Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1cedc22-6f8d-3dd2-a2b3-e012a19c19a3.roa
File:                     a1cedc22-6f8d-3dd2-a2b3-e012a19c19a3.roa (raw, json)
Hash identifier:          u7bLp9rTu2+c3SSl9bM+9/2HYImIpVlQHJzNAUijOl4=
Subject key identifier:   3B:1E:E1:48:3A:F2:76:E1:95:F3:D5:39:87:73:E6:2C:A3:23:DA:54
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0990A976B9FE142487B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1cedc22-6f8d-3dd2-a2b3-e012a19c19a3.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11351
IP address blocks:        72.230.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:99:0a:97:6b:9f:e1:42:48:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=ac779418-7457-4ec7-866b-93abbbed5e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:e4:59:a6:fb:c8:15:af:71:d0:79:41:f6:
                    ac:58:51:18:de:f8:8f:dd:62:3f:d4:7d:ec:b1:21:
                    fa:26:3e:ed:a6:4b:f8:0f:9f:e2:6c:26:1a:50:0c:
                    c4:9c:10:36:33:da:46:b0:ba:2e:67:31:9d:05:01:
                    2b:24:ff:5c:37:d7:42:89:2a:52:ed:f2:b1:39:48:
                    cd:99:9a:e5:95:c8:b4:91:05:87:4a:c6:38:6b:2c:
                    3d:da:35:6e:60:73:cf:ce:00:35:73:d2:de:3a:c9:
                    17:40:9f:36:01:45:92:4e:6d:ac:03:a5:c9:05:8e:
                    55:4d:64:df:02:17:d8:e9:b7:b6:b5:8a:32:fe:19:
                    e9:f4:f0:be:d8:57:c4:d5:9c:92:a5:e4:7e:e7:95:
                    9c:17:68:32:7a:0f:ac:82:00:8f:7c:38:f3:bf:ab:
                    6d:02:38:f7:73:69:8f:be:7e:bb:9a:82:b9:c3:64:
                    23:56:9a:90:d3:6d:5b:86:e7:86:ce:51:c6:92:81:
                    d7:5f:77:a4:e2:f2:20:56:b2:f8:a8:42:80:aa:67:
                    8e:11:22:bd:f0:66:c7:f5:eb:c3:5a:c5:ef:62:30:
                    13:7f:33:8b:1f:b8:36:fe:7c:da:61:a4:cd:00:72:
                    96:84:a5:73:92:85:76:73:33:86:10:f4:f4:81:a0:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1E:E1:48:3A:F2:76:E1:95:F3:D5:39:87:73:E6:2C:A3:23:DA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1cedc22-6f8d-3dd2-a2b3-e012a19c19a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:32:0c:e0:b7:9e:f0:31:55:3c:c0:e9:fe:14:65:dc:f8:d5:
         be:b1:4b:bc:88:e5:b6:5e:1c:02:3e:e8:34:3c:34:7b:4f:20:
         fd:57:f2:65:b1:3d:9b:c9:1f:06:91:a8:39:68:c5:6b:20:a2:
         19:12:99:ef:c6:d4:7c:ac:bb:ca:63:e4:e2:2a:a1:62:c2:43:
         d0:44:95:64:01:71:3b:74:c1:79:0d:c5:62:b5:6a:40:e8:21:
         5c:33:a2:71:e5:5d:22:f5:a7:74:36:c4:12:2e:5e:50:30:6e:
         ac:fc:41:ac:00:a3:69:c7:9d:30:da:2e:a5:2d:85:dd:34:f3:
         28:dd:4d:64:cb:b6:67:cf:cb:c2:33:b7:d5:bc:db:1d:6a:ca:
         2f:78:ad:2c:9f:e4:42:3e:be:34:dd:0e:67:3f:e0:01:3f:cf:
         d6:1c:db:14:23:7c:78:ce:b9:01:3a:be:cd:23:df:d5:e8:d8:
         2c:86:90:a3:ea:6f:31:b3:c6:a1:48:d9:a3:5b:e0:7a:f0:09:
         de:c6:91:be:7b:56:8b:76:9a:88:d5:90:41:a8:a2:35:8a:bc:
         b4:30:37:3d:15:60:5c:a4:39:02:1a:8a:01:ae:87:8e:28:c2:
         4c:53:6d:d0:80:1b:2b:6e:bf:f0:80:43:e4:e3:0a:ec:84:85:
         6e:0e:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:26 2024 by rpki-client on console-ams.rpki-client.org