Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aba5558b-47d6-3708-83ba-26141db71208.roa
File:                     aba5558b-47d6-3708-83ba-26141db71208.roa (raw, json)
Hash identifier:          eKmep2Jm4abkxyM1SJpTMe9sRpT2Hg978TsHUMiuDtw=
Subject key identifier:   C1:F2:30:57:AE:E8:D1:06:21:48:13:BC:8F:0C:C9:CE:38:5A:89:B1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E3F0ECB257222E8694BC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aba5558b-47d6-3708-83ba-26141db71208.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     8052
IP address blocks:        72.129.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:3f:0e:cb:25:72:22:e8:69:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=912306d1-d7cc-49f8-b12b-6c7a9d1c01fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:70:ae:27:a0:f5:62:ab:0a:cd:85:ce:3c:
                    f3:b0:ca:05:0c:8e:5d:52:43:2f:29:a1:a5:be:36:
                    ef:cc:71:25:da:6c:3e:94:bb:32:86:f7:cb:e3:8d:
                    88:fa:c1:d1:cd:d1:93:55:29:0f:81:07:c8:cb:08:
                    c0:2a:80:89:32:9b:23:b7:80:53:0f:5e:fb:e7:25:
                    f6:4e:4c:e9:de:77:e0:ea:eb:dd:48:ee:5f:fc:4a:
                    f4:be:33:6f:c3:7e:51:7b:c6:66:3f:8d:84:7d:f5:
                    21:8d:87:3a:93:85:7f:45:51:26:c9:14:4e:94:fe:
                    53:26:5d:ed:a2:91:ed:d8:b2:fa:86:38:ab:d5:de:
                    81:4e:84:4b:dc:54:5b:cf:de:38:6a:88:60:14:db:
                    1e:48:78:6f:30:17:e4:72:f9:4f:68:aa:66:b4:5d:
                    86:db:b6:bb:0f:77:99:1b:ec:b1:0c:22:c9:41:f7:
                    24:9a:51:0c:a1:89:a5:55:69:a2:10:d1:ff:b8:c7:
                    03:69:cf:c6:48:81:05:9e:81:e3:3d:52:0d:f1:01:
                    c6:d1:b5:06:46:b2:fd:7a:a9:69:1d:d0:a9:29:37:
                    b4:74:ed:98:a4:be:ea:43:46:b2:53:10:60:75:a2:
                    44:33:fd:d6:85:7d:a9:b6:23:04:bc:68:01:0f:cf:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F2:30:57:AE:E8:D1:06:21:48:13:BC:8F:0C:C9:CE:38:5A:89:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aba5558b-47d6-3708-83ba-26141db71208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.129.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:20:3c:a2:fa:b3:e3:7d:25:86:88:c4:e1:1c:2b:bf:39:62:
         96:cc:e0:2a:23:e8:ce:91:79:64:16:ec:31:55:a5:76:f2:9f:
         a8:fa:bd:86:e6:e8:62:38:c8:da:c3:61:3d:c3:8a:2c:94:00:
         de:3c:1d:85:95:23:b1:c6:ad:a1:c0:89:9d:b8:d8:47:ae:a4:
         c7:c6:3e:93:3d:52:74:65:55:88:10:d8:ad:0f:b5:bc:a6:29:
         cf:ed:db:52:54:8e:04:84:b3:2e:2a:1a:d1:20:75:93:d1:93:
         f1:92:6a:54:a8:7e:53:3e:ea:a8:05:48:7e:21:5d:07:ed:04:
         7e:96:f0:70:be:d3:ac:de:41:46:d7:57:ed:ee:82:14:40:02:
         27:21:98:95:f1:4f:d9:7d:f3:ba:ab:f9:f3:13:41:f9:de:d4:
         4e:eb:58:7d:bf:88:2b:0f:32:2b:e4:6f:63:76:e8:de:72:90:
         93:f2:07:61:7e:0a:0d:11:e7:40:c1:8e:91:fd:83:f9:e4:fa:
         7f:a8:25:32:cc:bc:4d:4e:48:34:8b:1c:44:a6:0a:42:38:b6:
         a0:20:33:91:ed:4b:66:9d:8d:d9:c2:ff:99:ba:d7:50:f1:a6:
         b1:9b:ea:7e:31:59:50:98:70:25:4b:b0:be:f4:fb:44:ba:7c:
         1a:f7:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:17 2024 by rpki-client on console-fra.rpki-client.org