Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/94f0e4ea-38c2-31a6-b528-399776615e5b.roa
File:                     94f0e4ea-38c2-31a6-b528-399776615e5b.roa (raw, json)
Hash identifier:          R7T8WpGZ/Se1ihPki5mxNCvM/Jk1h2oLp3/yYQsRoaA=
Subject key identifier:   47:EC:C2:67:C6:B1:57:9C:54:45:0B:CD:77:8D:F1:06:D7:90:B2:6C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A130CBB784DE181CC69800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/94f0e4ea-38c2-31a6-b528-399776615e5b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        68.201.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:30:cb:b7:84:de:18:1c:c6:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=3f0559b7-35f8-481a-a318-ba4df563245e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:c0:e5:6b:e8:13:24:e1:f4:32:29:9d:f4:
                    1f:c1:aa:8a:f4:69:dc:66:8d:f1:d1:07:72:11:94:
                    be:33:f3:63:60:c7:bf:d5:87:89:9a:1b:ff:ef:8b:
                    16:a9:60:c2:05:d2:9b:25:86:15:1d:7d:ca:1b:51:
                    48:bf:c1:51:d3:ee:8a:a2:99:da:54:a4:94:8f:68:
                    bc:f0:53:bb:c1:4c:e5:7e:11:eb:fe:68:a5:10:f1:
                    95:49:6f:49:da:ab:82:1a:79:f2:50:b7:41:91:1f:
                    d4:6d:2b:67:1b:0d:ec:e6:63:64:81:16:d7:39:a7:
                    f7:e6:0e:a6:08:d4:eb:be:fe:6e:45:13:33:7a:87:
                    18:8f:a2:e4:42:be:74:e8:57:66:31:f8:9a:c1:63:
                    c1:78:b2:6c:cc:83:de:69:98:17:9c:44:16:f0:83:
                    8f:19:0e:91:1c:38:11:8a:7a:87:dd:b2:1d:17:29:
                    3c:b5:ea:da:66:18:59:30:76:ee:9d:0f:7b:32:9e:
                    42:81:91:a9:14:e4:1b:15:a5:5c:b6:6b:23:03:3d:
                    c8:74:3a:01:93:1a:1a:40:0a:7c:29:d3:49:cd:c0:
                    9e:eb:ee:02:42:11:f8:34:de:0c:49:08:e3:e1:d3:
                    bd:e4:d5:c0:c7:e4:2a:69:a5:de:fb:40:43:c4:fe:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:C2:67:C6:B1:57:9C:54:45:0B:CD:77:8D:F1:06:D7:90:B2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/94f0e4ea-38c2-31a6-b528-399776615e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.201.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a4:1b:06:f4:1e:35:bc:98:5f:35:f7:42:95:9a:23:97:99:
         8b:bb:49:cf:ab:f8:b4:b6:00:56:a7:95:47:48:ac:8b:4b:f4:
         54:56:bf:57:7b:45:b8:33:d5:93:af:85:9b:ca:4f:31:cb:27:
         7f:62:56:34:26:28:89:fb:d0:17:bc:00:3e:b7:71:4b:16:14:
         f8:c6:4e:af:d1:b8:35:a7:15:8f:04:c0:1b:4a:19:a5:3b:4f:
         94:77:ab:9e:eb:68:92:f8:7d:9f:e1:e0:33:85:4f:f4:74:c1:
         65:dc:9c:9a:0e:0c:58:26:3d:93:29:fd:ec:f6:a6:70:43:a5:
         a5:60:c3:7e:8b:58:d3:9e:27:d9:65:a8:98:29:6a:43:af:ed:
         ff:ac:24:f3:cf:8d:47:c2:02:45:67:8b:08:2e:27:eb:42:5e:
         76:30:6a:83:88:5a:9b:b1:e2:49:fb:06:03:5d:71:fe:5f:cc:
         f0:4e:ba:6f:90:82:23:da:7c:fe:b4:67:2d:c9:5b:65:35:3b:
         6a:67:05:f2:ee:0d:96:53:0c:f7:48:85:d8:fe:29:17:9b:c5:
         b4:fd:e3:27:96:c5:bc:b4:d2:8e:e9:e3:7f:4b:54:b8:ad:8a:
         16:ae:c6:25:01:47:b0:c3:b1:08:c6:00:06:81:45:a4:88:54:
         6c:ba:06:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:32 2024 by rpki-client on console-fra.rpki-client.org