Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3ae70ab-87cc-3430-b1ad-f053cd492769.roa
File:                     b3ae70ab-87cc-3430-b1ad-f053cd492769.roa (raw, json)
Hash identifier:          hicGzix5Er7VlJWhujQp8Kx+r7rgzo7Jo4bbdh11/jY=
Subject key identifier:   3B:44:A7:DE:C8:8C:97:F7:B4:D3:34:1F:21:0B:52:61:F8:06:35:94
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A3E3CA238B7570BDCB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3ae70ab-87cc-3430-b1ad-f053cd492769.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        70.124.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a3:e3:ca:23:8b:75:70:bd:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=4a5519cc-c4d7-4022-9e7f-d9f9ba24b7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:68:88:88:38:a1:3a:4b:29:05:d9:4b:4f:
                    93:f8:4d:a1:ae:e8:4a:50:48:c7:65:44:01:18:e3:
                    d8:8c:a9:48:d0:01:2a:d6:b3:37:c4:2f:82:54:84:
                    1a:90:23:cc:c6:b0:c1:71:5e:bb:f4:e0:42:30:1d:
                    56:2c:b8:cb:b2:7d:14:ec:41:ca:ad:f5:9c:80:44:
                    0d:6d:4c:bf:58:66:8c:b9:ef:be:a4:8c:53:99:9a:
                    12:74:e6:d4:a3:8a:8b:03:31:c4:6f:64:89:d6:00:
                    c1:d7:68:b7:5b:83:74:a2:24:8f:35:40:de:84:aa:
                    b1:eb:dc:ca:7a:4a:34:4c:98:ae:b2:cf:4c:dd:c3:
                    11:18:54:1e:7f:06:1b:06:63:86:0b:4e:e9:f0:6f:
                    f2:04:63:f6:cb:3d:d0:4e:4e:98:0a:0a:8f:e8:5c:
                    60:25:25:c0:13:66:c8:18:b6:75:27:8a:7f:5e:bb:
                    7d:89:1d:d5:c7:e3:35:50:81:bb:94:cb:74:38:2e:
                    c1:17:17:db:3a:ef:92:54:07:d5:7b:6b:50:c0:50:
                    05:16:47:70:43:d1:93:0f:ed:1e:ad:a6:ac:4b:7f:
                    19:db:88:f4:6f:ae:3d:22:6f:4b:45:35:78:bb:22:
                    32:f8:9e:70:a6:cb:6b:ff:ef:d6:4e:3d:92:7f:2b:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:A7:DE:C8:8C:97:F7:B4:D3:34:1F:21:0B:52:61:F8:06:35:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3ae70ab-87cc-3430-b1ad-f053cd492769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.124.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:2f:95:1e:b7:85:37:4e:0e:26:4b:cc:cb:69:8f:13:c4:
         29:54:a3:0a:f7:84:13:ac:69:06:57:88:96:bc:9d:84:1a:2d:
         4f:f1:a7:ee:da:03:4b:65:8b:d1:0f:44:29:2d:0b:66:ae:72:
         f8:5c:a5:4c:d7:1c:0e:a3:e8:b9:6a:31:ac:c9:32:ff:5d:8a:
         de:0b:4e:06:72:2a:dc:f1:ed:52:f1:95:a0:0a:f0:c2:33:53:
         1d:05:0c:7b:8c:41:7e:44:f6:4b:b7:08:18:ad:79:a0:03:f6:
         71:ed:35:63:6b:44:3b:f4:ae:5b:67:57:cc:03:ed:c8:5e:dd:
         ce:5b:f0:72:7c:57:d8:75:83:60:d4:ec:8f:f4:b1:ac:83:30:
         f1:8e:1d:e2:26:fe:c2:e9:cd:e5:46:44:4e:f5:5a:16:70:21:
         b3:a3:49:f7:0c:e9:43:77:e0:e4:1c:8b:68:f8:d4:7d:2d:19:
         5d:14:57:45:12:eb:82:c4:88:c7:83:4a:68:60:fd:4a:e2:d1:
         58:61:55:4c:88:d4:c8:db:c9:8c:5b:62:b9:fc:ea:c0:4a:dd:
         db:13:62:84:9f:eb:9e:70:8a:9e:a0:76:e3:37:aa:dd:82:0b:
         df:ab:e0:f5:5b:07:74:ba:a8:6d:ea:d0:d2:32:63:38:35:b5:
         9b:5c:47:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:35 2024 by rpki-client on console-fra.rpki-client.org