Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95f7d972-94c5-3750-80a7-b30adff4b891.roa
File:                     95f7d972-94c5-3750-80a7-b30adff4b891.roa (raw, json)
Hash identifier:          0WwWCp85IGuySFbzEKRPFVeJFise9ZBcXxjjULEz6Gs=
Subject key identifier:   56:A8:72:49:34:FD:60:4D:80:63:8D:58:53:DD:EC:66:4C:23:6A:CA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DD5A3F1CE045AA66A1980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95f7d972-94c5-3750-80a7-b30adff4b891.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        76.79.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:d5:a3:f1:ce:04:5a:a6:6a:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=935cb839-0f5e-4287-baff-7ed2b9dce797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:0c:df:9b:09:83:91:b3:db:26:b5:4a:41:
                    37:72:42:9b:70:7c:8e:02:7b:5d:3e:48:9a:b3:5c:
                    89:28:c7:a1:f1:42:4c:28:14:42:bf:63:83:59:84:
                    e8:ac:2c:7c:86:5b:0b:5d:a7:81:f1:cc:f3:87:02:
                    a1:30:9d:30:dc:95:de:53:05:2d:63:45:4a:8b:59:
                    3d:61:07:76:7c:db:dc:96:b9:81:51:87:73:78:d0:
                    6a:8a:ba:39:71:d4:04:25:7a:af:89:57:8c:db:e8:
                    94:64:a2:65:45:14:fc:5b:60:6d:24:e1:7e:8f:7d:
                    1e:4b:19:2d:dc:68:e9:26:8e:1c:29:e5:08:09:37:
                    69:fa:15:7c:64:10:50:c4:d2:85:00:85:15:28:7d:
                    c0:cc:50:f6:e7:f0:63:dc:7b:82:c7:09:fc:89:65:
                    9d:15:07:4b:7d:99:10:ab:45:17:59:25:5c:1f:a7:
                    04:d4:e6:4c:43:e6:60:db:b7:34:49:ef:21:59:82:
                    fe:91:59:87:01:40:68:bd:74:20:a7:2b:23:c0:34:
                    cc:39:32:2b:ff:96:51:d8:6d:d8:57:79:5d:a0:ef:
                    e9:29:ea:42:3d:93:a5:38:03:9c:f1:96:2f:e6:3b:
                    30:7d:de:13:85:36:16:ac:91:8f:62:92:db:e6:25:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A8:72:49:34:FD:60:4D:80:63:8D:58:53:DD:EC:66:4C:23:6A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95f7d972-94c5-3750-80a7-b30adff4b891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.79.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b7:4a:fd:bd:86:77:89:f1:fc:8d:6f:d7:1a:1e:64:bc:8b:
         f8:05:54:a9:ed:92:7c:74:63:49:29:0f:da:b5:eb:bf:1a:ab:
         34:17:ec:31:e4:9b:ab:83:dd:80:28:2f:23:6b:fd:85:e2:e6:
         92:24:6a:51:b9:5d:99:bf:d0:3a:45:bc:6f:9d:ff:1a:e9:11:
         c1:48:25:88:23:cb:e3:31:79:f1:4c:b5:0e:08:d3:a7:4b:a9:
         72:4e:99:f3:c3:45:bb:0f:fc:d2:53:78:ec:8e:22:83:ff:1d:
         43:5a:77:f6:32:b3:f2:dd:5b:89:20:83:21:ae:d1:87:d3:ab:
         14:e4:f7:66:8f:77:e9:a5:96:46:84:b8:a3:22:b3:19:e7:34:
         b3:b5:a8:9b:9e:c0:20:b6:49:25:ae:b7:e7:e7:d4:f4:ad:c4:
         99:b9:5b:45:53:1a:ad:b0:8c:60:e1:1f:1e:89:01:0e:c6:87:
         64:02:75:66:b6:e1:49:61:23:c8:c0:7f:7e:d5:51:0e:32:b9:
         ee:e5:d7:d3:2e:d9:a3:0a:87:57:dc:8c:2b:fa:f9:be:9c:13:
         dc:f1:1c:8a:91:60:6a:e2:dd:a6:16:40:d0:79:a4:52:3b:8d:
         ce:50:cc:c8:ae:78:ba:a3:0f:7d:18:39:46:0a:00:a4:c9:fb:
         2b:f9:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:52:33 2024 by rpki-client on console-fra.rpki-client.org