Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa
File:                     a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa (raw, json)
Hash identifier:          xuzJVQlN/UjiC7qDjpxtTfRBZKEBQdEuxkyu6FDNftM=
Subject key identifier:   D9:25:B4:55:27:54:18:F1:CF:E6:76:37:90:2F:72:5F:29:2D:E6:52
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DDD659D456B0D5FDED580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        173.198.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:dd:65:9d:45:6b:0d:5f:de:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=72867941-d578-422e-b8b5-349493e1f67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:d6:53:49:2d:63:35:63:23:26:3f:01:63:
                    06:8a:28:40:c9:70:a4:7b:e1:0f:8e:b7:7b:78:3b:
                    9a:67:da:68:09:de:06:7d:7a:1b:3c:5a:63:99:c2:
                    45:e6:76:e3:ec:22:c9:32:95:67:db:78:0a:92:89:
                    55:07:d7:52:54:d7:e7:0b:23:b9:27:94:31:75:e3:
                    b5:cd:36:f1:7e:9f:9a:33:cc:28:74:f7:ce:95:55:
                    cc:78:7c:97:01:cb:6b:2c:a7:30:41:f8:8f:cf:51:
                    97:96:3a:67:c0:cf:26:40:ec:19:28:2c:84:80:f2:
                    fd:2f:e5:65:81:3e:1f:28:43:50:e9:a7:25:25:2f:
                    a4:22:61:96:97:14:41:e1:85:ad:23:33:ea:d9:b3:
                    ec:8a:43:83:7d:b0:98:52:27:87:60:18:b7:f3:3c:
                    9b:d6:5e:21:03:c6:5a:01:68:e3:80:00:5b:fc:da:
                    8c:db:91:c9:b3:cf:12:c5:0d:26:2a:e8:15:ad:11:
                    1b:5e:9b:aa:8a:6e:9e:ab:b2:95:41:99:db:c2:b2:
                    0b:33:62:27:0f:3a:9f:e7:46:ec:cc:a0:58:ca:a1:
                    27:54:7c:db:a6:7f:15:7a:08:3f:17:8b:3b:17:7a:
                    51:18:9d:3d:d4:48:8a:f0:be:b8:e6:f2:01:c9:e4:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:25:B4:55:27:54:18:F1:CF:E6:76:37:90:2F:72:5F:29:2D:E6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e8ae2a-5105-3295-a7ce-d248e3a22b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.198.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:80:60:31:cb:61:11:7a:3e:b8:f9:a8:77:24:e8:5d:60:8e:
         7f:79:b2:e2:44:86:80:62:8d:cf:95:5c:e8:4e:bd:d4:1f:9a:
         c0:ff:7e:0e:3f:bb:f1:56:7a:69:79:73:17:5f:5d:15:4d:47:
         2c:54:91:65:f0:40:eb:e5:65:d0:ed:af:1f:c8:74:4d:1d:b0:
         fc:0d:ae:05:ad:e3:bb:d6:fd:2d:f8:b0:01:85:0a:5b:5f:9f:
         f3:39:b5:36:f0:ef:3f:bb:1a:8e:0a:e4:ab:1e:11:82:07:f7:
         65:52:66:cc:5c:d7:0e:bc:a6:5e:ab:91:e6:0a:b9:a9:54:0c:
         2b:f5:2f:0a:ad:a3:53:86:01:ff:1a:f8:01:1d:89:b0:a0:5c:
         91:07:b1:62:8c:12:7c:e5:3b:15:53:63:44:5f:13:f5:ce:93:
         68:f0:73:7a:73:a9:5a:89:24:60:eb:16:63:a1:df:53:11:a0:
         f6:33:48:e3:66:6e:45:e9:09:1f:0f:25:ee:8b:66:cd:af:07:
         e7:35:98:57:69:4d:2d:79:ba:a0:09:7a:64:fc:2d:a7:2b:5a:
         af:f2:19:9e:51:8e:a4:1e:0a:3f:94:5b:54:a0:94:b5:41:72:
         22:55:6b:96:6d:d3:42:e1:76:bd:3a:d3:b7:62:49:3d:da:cf:
         d8:b9:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:26 2024 by rpki-client on console-fra.rpki-client.org