Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa8a35a1-f400-3d6c-a94d-9d12d0844309.roa
File:                     aa8a35a1-f400-3d6c-a94d-9d12d0844309.roa (raw, json)
Hash identifier:          hCS9X75a+VC3D/8bUlRQ88SHYVJpbmygrObll1K6k5E=
Subject key identifier:   5C:03:CB:A6:9D:83:D3:C6:8D:75:2B:16:DA:69:DD:82:E4:E2:21:A3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E5D53064FABD678338570
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa8a35a1-f400-3d6c-a94d-9d12d0844309.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11427
IP address blocks:        69.23.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:5d:53:06:4f:ab:d6:78:33:85:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=40779065-8526-4af8-ab85-5ad6451ca97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:c5:9b:19:e0:f8:f6:3d:1c:54:8c:f8:d4:
                    19:7c:34:f5:82:d0:06:c4:5b:90:9a:94:8e:48:80:
                    cd:fb:01:93:85:e7:9d:f3:ef:0f:8c:3e:35:89:3b:
                    ef:1b:06:b0:b4:f4:fa:74:4c:ce:bb:3e:9d:22:eb:
                    58:a0:52:b0:26:60:23:81:bc:38:db:23:fd:c6:58:
                    df:aa:33:9b:86:50:34:7f:b7:99:53:c8:c8:a7:91:
                    96:9b:71:49:84:b4:08:52:93:9e:8d:fd:b3:01:23:
                    43:33:5c:43:5f:70:22:6a:70:d2:8f:67:df:43:e6:
                    23:22:1f:15:a0:d1:63:29:19:c2:ce:cc:2b:2e:36:
                    90:dc:d2:ea:d3:76:d5:2e:fe:4d:60:2b:9e:4b:75:
                    c8:8a:f7:fc:02:68:0c:6f:25:06:ee:da:22:10:b8:
                    79:f1:50:77:f0:8b:de:a1:b1:f7:b7:83:d7:32:49:
                    e0:24:63:a0:0f:55:c2:a9:34:70:52:09:2d:c2:89:
                    ad:79:03:b7:2e:36:55:86:dd:4a:5e:9c:5a:4c:6d:
                    72:61:44:1f:a2:45:27:a8:f6:53:a9:95:ab:f0:02:
                    54:97:d2:a7:70:22:54:e4:f7:83:0a:42:94:70:9b:
                    63:bb:a4:59:a4:40:c7:78:ae:76:f9:d9:9c:ae:c4:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:03:CB:A6:9D:83:D3:C6:8D:75:2B:16:DA:69:DD:82:E4:E2:21:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa8a35a1-f400-3d6c-a94d-9d12d0844309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.23.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:09:1f:6d:20:a8:e5:9d:50:b6:2e:69:7f:ee:e6:34:29:
         5b:b3:f9:b0:c6:7f:a8:54:47:95:18:3b:83:d5:96:39:95:0a:
         26:88:6b:a2:0a:81:0f:16:7e:b3:f7:7e:02:d2:8a:8b:77:76:
         79:2b:7a:84:25:6c:d6:fc:c1:30:6b:81:d4:0c:85:33:01:56:
         a5:48:0c:4c:0d:81:98:74:45:e5:d4:d3:ff:8f:1d:b3:c6:a8:
         38:51:ce:97:94:45:f5:e1:38:a0:13:60:34:78:9a:c7:1d:99:
         92:26:72:13:8f:8b:30:62:4f:9a:22:04:eb:ca:ef:62:09:9a:
         2c:2d:bc:62:9c:cf:c4:91:db:97:cc:e7:cb:f3:74:24:7e:ea:
         4d:c5:fa:44:8a:47:ff:88:7b:75:65:a9:5c:be:62:79:56:13:
         7a:22:dc:78:a8:75:0d:09:40:c6:96:f3:27:d0:41:d9:2b:ae:
         ac:a1:5f:7a:4a:72:f1:ef:79:66:b9:c2:87:ce:a2:e2:38:9f:
         9b:d9:2c:90:b8:cb:80:fc:c0:90:93:dd:a0:41:c3:9c:c1:82:
         dc:14:1a:61:7d:c5:bd:54:1b:51:c3:c3:de:85:7f:7e:aa:25:
         d0:98:e1:be:cc:63:c5:05:de:c5:30:15:64:1c:cc:2b:ee:aa:
         08:e4:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:10 2024 by rpki-client on console-ams.rpki-client.org