Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1313dcb-6e23-3285-9363-f895592e677e.roa
File:                     a1313dcb-6e23-3285-9363-f895592e677e.roa (raw, json)
Hash identifier:          CxVKr6Itw7KbJygGYTQJYXB4EtV7mVc/nW2a4yNJRM8=
Subject key identifier:   1A:97:C3:01:A7:60:07:96:95:39:CF:1B:F6:46:C1:99:66:D1:08:98
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858385DD272BF653E71D4FF5C9A40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1313dcb-6e23-3285-9363-f895592e677e.roa
Signing time:             Wed 23 Dec 2020 05:00:00 +0000
ROA not before:           Wed 23 Dec 2020 05:00:00 +0000
ROA not after:            Wed 16 Dec 2026 05:00:00 +0000
asID:                     20001
IP address blocks:        70.95.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5d:d2:72:bf:65:3e:71:d4:ff:5c:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 23 05:00:00 2020 GMT
            Not After : Dec 16 05:00:00 2026 GMT
        Subject: CN=b38195b3-7cd2-4a6b-ae8c-9c1b84a95126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:b4:6c:5c:ef:78:dd:b1:e2:95:ce:cb:07:
                    50:1b:1f:60:2b:f9:56:e4:aa:6d:94:15:6e:fa:6a:
                    83:b2:ea:81:e2:86:f7:20:12:fc:57:c4:63:bc:a6:
                    16:13:bf:3e:fb:b4:64:0e:9b:69:c3:4b:d3:01:a6:
                    ce:ad:52:88:b6:80:03:5d:20:44:a6:6d:6b:d1:40:
                    97:7b:55:f2:41:e0:54:39:91:68:95:8e:7f:77:01:
                    28:28:87:62:80:5a:6f:d4:a0:71:6f:6e:41:09:c9:
                    c2:4d:64:63:2c:f7:49:83:72:e1:be:9f:9c:9b:de:
                    44:3f:21:84:ca:b3:73:08:fa:f8:47:c1:36:27:66:
                    75:56:6d:c5:c8:30:d7:8a:89:be:7b:3e:4e:5e:b3:
                    9e:c2:91:67:06:dc:1c:2e:fe:7a:72:25:77:46:42:
                    2f:0a:24:55:fb:38:68:f8:8f:f0:ed:3a:1a:17:6b:
                    e5:b0:55:63:59:34:4c:8d:7f:9c:c3:ce:cf:fe:5a:
                    5b:4f:b9:ce:b3:a5:75:13:11:4f:a4:1d:43:b6:56:
                    1b:bd:16:a0:e7:ba:d5:e7:7c:c1:83:8f:ef:ad:43:
                    cd:68:84:0a:e2:9c:d6:b7:5f:1a:59:dd:f5:58:15:
                    8c:14:86:39:2c:14:07:01:71:df:cb:b0:34:be:b3:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:97:C3:01:A7:60:07:96:95:39:CF:1B:F6:46:C1:99:66:D1:08:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1313dcb-6e23-3285-9363-f895592e677e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:94:fa:6f:2b:6d:2e:90:15:a3:e5:3c:3d:a7:23:d6:5e:75:
         c1:f6:ae:c7:df:78:7a:95:dd:75:aa:38:ab:4d:cf:d9:d2:e2:
         30:43:22:5d:7b:80:50:b1:56:db:6e:c7:b1:00:ca:34:4b:be:
         bb:a9:a9:f3:af:2b:61:ad:e1:1f:89:31:93:c6:e8:9c:1f:ac:
         bb:85:40:6e:08:d2:e3:c4:a6:d0:f4:3a:62:eb:84:e2:ba:e5:
         cf:a7:c4:8b:85:79:f0:e1:3f:68:0a:e6:59:ba:4a:b8:7a:94:
         1e:b3:63:f5:9c:33:ae:2d:93:9f:e5:cd:c1:f6:31:c0:53:11:
         45:9f:f0:25:44:9e:9a:68:d6:f6:d7:b1:5b:14:cb:04:0c:45:
         2e:08:ef:a8:06:db:f9:bd:e6:2e:a3:84:d1:40:72:87:09:5e:
         ff:f0:3b:1e:27:16:c3:ca:ee:97:dc:b9:0c:d2:34:95:66:a1:
         58:4d:9e:d2:9a:46:33:a9:4a:68:7f:29:ba:53:98:91:5c:e5:
         91:c9:cb:bb:f3:14:66:f2:b7:cc:3f:a9:0c:82:09:92:50:a5:
         84:c4:df:a4:c0:f4:e0:a1:a3:10:9f:72:42:84:16:c1:e0:47:
         1d:5b:26:3d:ef:ad:38:81:1e:3e:a7:08:07:dd:f8:12:8b:eb:
         59:20:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:41 2024 by rpki-client on console-ams.rpki-client.org