Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9c20fb0b-c5be-360d-b8cb-5370996be7e3.roa
File:                     9c20fb0b-c5be-360d-b8cb-5370996be7e3.roa (raw, json)
Hash identifier:          0deflN7yoD4FvJdxIhRxaJmVrpUH84weP9caAK9xr+I=
Subject key identifier:   71:81:31:2F:FC:03:1B:F8:B7:D8:9F:5A:2A:56:A0:E8:B9:EF:95:82
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285839321A701E0B990A39ED865230
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9c20fb0b-c5be-360d-b8cb-5370996be7e3.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        70.63.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:1a:70:1e:0b:99:0a:39:ed:86:52:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=5634f1bf-99ca-43ec-9a15-dddbbcde67f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:b5:74:8f:57:9f:12:73:e5:f6:6d:43:be:
                    0c:01:28:7d:68:a7:44:60:69:06:58:59:93:cb:fe:
                    60:4b:a2:db:3f:fd:42:b2:19:11:4a:8d:72:e9:eb:
                    20:bf:fe:33:19:29:9a:62:0d:24:8b:6d:6a:31:d6:
                    f2:b7:b6:fe:10:cb:08:4a:30:30:a0:7e:96:d2:27:
                    d8:70:09:21:34:d3:d3:44:82:b7:91:66:99:3f:92:
                    61:8f:7c:5e:bd:2f:c1:4f:12:cd:35:95:78:44:89:
                    53:7d:f1:d7:37:03:5f:f4:fd:60:69:db:35:bc:4f:
                    f4:9a:c3:07:38:57:a4:22:56:55:cc:86:2c:57:a8:
                    f3:db:dd:48:36:76:7c:5f:33:6c:62:a0:b3:f6:c1:
                    ff:7f:6f:23:83:6f:e3:69:11:13:6d:56:17:0c:57:
                    57:12:9b:54:51:a2:5f:06:92:3b:7d:1f:1d:7d:21:
                    29:48:81:02:71:ff:b5:90:ed:be:f6:d3:51:06:3e:
                    7b:22:85:cd:e5:3f:23:e0:c6:22:89:15:df:87:e3:
                    4c:78:ed:8f:42:ff:4e:bc:c7:0f:f5:e3:22:2a:75:
                    c7:b9:df:77:7a:de:df:84:8e:41:11:28:21:d3:5a:
                    71:91:61:cd:4c:7c:67:24:5f:7a:69:e1:52:4b:20:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:81:31:2F:FC:03:1B:F8:B7:D8:9F:5A:2A:56:A0:E8:B9:EF:95:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9c20fb0b-c5be-360d-b8cb-5370996be7e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.63.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:19:88:f8:14:78:12:c6:21:cf:c4:9b:f2:aa:33:5f:2c:1d:
         f2:52:9a:1f:20:49:6e:5c:02:38:20:6e:b5:7c:c0:eb:6a:a9:
         0e:9e:2c:d0:9a:13:44:c7:44:96:7c:ad:8a:fd:53:52:4f:68:
         d4:80:ea:c2:fc:f4:7f:4b:60:a5:4d:e3:78:a1:d2:48:59:73:
         4d:69:9d:35:ce:31:93:4d:c2:83:20:c4:8a:e6:ed:12:70:c2:
         dc:c2:79:9f:6b:90:85:bc:57:18:a5:57:8c:70:f5:16:3d:7b:
         d3:6c:0b:5c:0f:34:4e:a7:dc:fb:93:d3:1f:7b:9d:eb:94:cb:
         50:24:02:cc:f4:14:3c:ab:8c:b2:ed:5c:1d:59:45:4c:de:03:
         76:22:62:87:d6:8d:d2:54:ca:d8:55:2d:32:ec:f3:b7:12:01:
         34:87:e1:a9:1c:b6:56:ab:43:36:ba:83:f3:56:c8:65:0d:19:
         9a:26:31:41:a1:04:34:1f:d9:7d:5c:fb:06:db:fa:41:48:b0:
         12:77:cd:d2:ce:3f:54:23:9e:c4:53:86:a4:a6:5a:39:ed:c1:
         8d:70:f5:56:81:18:da:88:a4:69:cd:e2:06:59:ab:c7:67:fb:
         99:78:99:ce:22:9b:8c:a9:bd:69:08:8f:37:b1:3b:fb:f0:7d:
         b3:29:bb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org