Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99e7758c-8534-339c-8e81-3416ce8e32dc.roa
File:                     99e7758c-8534-339c-8e81-3416ce8e32dc.roa (raw, json)
Hash identifier:          jIEFW80D/FueUnpxIbh+B5Yuqe8ma5yxVd84csOMGIk=
Subject key identifier:   FD:24:FE:69:DD:DC:A6:10:92:1E:AF:65:79:4B:32:24:B3:D0:00:56
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A373925A2C2B10FFD480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99e7758c-8534-339c-8e81-3416ce8e32dc.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        72.133.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a3:73:92:5a:2c:2b:10:ff:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=09fb5ad2-3c1b-4851-810b-2dce65e9981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9b:b2:71:59:86:fc:ed:79:59:ee:7e:5b:3c:
                    0a:da:61:38:f3:9c:4c:23:ec:5f:17:d7:30:36:b3:
                    ea:b4:1f:d0:05:b3:5e:b6:ec:24:29:08:be:42:68:
                    a6:9b:c9:5b:9c:e3:be:5d:b5:6b:9a:a0:a6:44:4c:
                    81:06:aa:93:ba:a4:68:3f:3d:a8:59:9b:2f:c0:38:
                    60:be:f2:6d:30:8e:6a:4e:66:8e:54:d2:2a:0f:98:
                    32:63:7f:e0:fd:f4:40:dc:bf:18:30:0f:22:eb:34:
                    cc:a4:a2:eb:8d:2c:32:41:6e:bd:05:ef:d5:be:05:
                    5b:a4:16:69:83:91:c7:4d:cb:33:85:4a:d0:15:0d:
                    5b:44:c7:54:11:66:e7:ae:4d:4e:5b:61:a4:ca:8f:
                    1b:a5:4c:bc:a0:9a:7e:41:81:48:cc:e7:dd:d4:88:
                    68:fa:95:55:fb:d1:ea:6f:90:cc:62:45:63:e5:0e:
                    5b:ad:a2:1d:c7:94:c1:0d:00:80:8f:00:3e:da:d4:
                    94:7c:eb:1a:37:7d:bc:f6:c7:c2:de:5a:05:37:81:
                    ba:1e:25:5c:34:24:bd:28:ad:76:86:19:92:48:26:
                    13:39:03:5f:e4:45:07:83:38:da:db:e4:48:32:de:
                    7e:db:e1:48:b1:db:7c:5b:36:9d:28:8b:cd:32:3b:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:24:FE:69:DD:DC:A6:10:92:1E:AF:65:79:4B:32:24:B3:D0:00:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99e7758c-8534-339c-8e81-3416ce8e32dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.133.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:9d:12:93:ab:5a:7d:ec:23:51:7d:5a:b3:c2:20:4b:fa:
         09:6f:b1:a8:5d:e9:ca:f4:d9:ac:02:6e:15:31:89:ba:33:d1:
         e0:08:5f:f7:43:d1:4d:18:52:31:80:15:c2:b7:05:7c:87:bb:
         b2:ee:96:cb:bc:7c:ae:06:38:31:35:fc:c6:b8:fc:cd:a8:c5:
         ff:87:0b:a5:eb:bd:ca:8e:82:57:dd:b9:0c:f9:a4:26:54:3e:
         e1:21:0d:c1:44:91:bb:65:74:60:07:b8:5b:ea:2f:7c:d7:d6:
         f3:ea:b2:6a:b5:b8:26:7c:9b:33:ac:a5:7a:02:90:f0:6a:e9:
         f2:3d:29:40:d4:46:07:5f:f8:0d:c4:f0:38:17:79:da:d5:47:
         cd:78:71:d3:8d:8e:21:43:e9:d8:dc:26:b8:e5:5d:75:e1:12:
         b7:40:0b:3f:73:d5:bd:15:c1:ee:c3:96:ec:02:53:59:c7:95:
         82:9e:bb:82:22:59:93:63:00:70:63:f9:39:af:d3:83:95:68:
         10:43:d2:e5:2b:56:71:55:c2:78:02:17:69:ff:55:bd:58:3b:
         11:61:6b:e7:f8:f9:c2:67:51:c9:01:1c:54:2f:3f:48:76:62:
         82:da:99:fc:66:49:a1:ac:4e:d2:6a:2d:4a:14:b4:a0:13:ee:
         46:d2:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org