Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b6753a7f-ec4a-39f7-9ca3-c5fb368e787f.roa
File:                     b6753a7f-ec4a-39f7-9ca3-c5fb368e787f.roa (raw, json)
Hash identifier:          fJTExUngChvla3BPBO9Ej2K9Kq36ClopCVvCZaZGAZw=
Subject key identifier:   9E:D1:CC:B3:03:77:DD:C1:3D:F9:4A:3F:EB:DC:1F:30:B5:4F:72:F3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A144BC1CF2DCD690CA6F10
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b6753a7f-ec4a-39f7-9ca3-c5fb368e787f.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        71.40.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:44:bc:1c:f2:dc:d6:90:ca:6f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b20c159e-9907-4b93-bbab-ed583f6fec91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:23:3c:14:4f:1c:d5:c5:c7:a7:25:6c:55:
                    df:47:ac:2a:e1:b3:a9:de:d1:18:cf:8f:68:46:95:
                    26:9e:9e:22:e6:df:8f:95:7d:96:d6:6d:70:66:08:
                    14:65:66:61:9c:93:4d:aa:2c:ee:1c:97:b5:85:32:
                    f0:58:0e:0c:ca:48:c3:54:27:22:48:ff:28:7b:2f:
                    b8:dc:2f:1b:02:6c:26:73:c7:fa:7f:11:12:fc:a1:
                    70:4e:d9:4a:1c:d6:f2:f8:7b:c1:cd:5b:03:d3:12:
                    49:05:cb:d8:d3:09:db:17:20:8a:59:f6:df:76:5f:
                    b1:4a:82:c2:e2:eb:00:17:0c:cc:0c:3b:8f:73:80:
                    e6:ce:8c:99:6a:b9:10:b1:c7:1b:78:0d:87:3c:2d:
                    29:56:6f:3b:ee:50:c2:b4:c6:80:47:d6:32:bb:86:
                    c4:13:46:56:67:a1:db:20:85:68:5a:80:90:5b:ac:
                    0c:e6:8b:2a:3d:f1:77:e7:3c:7f:a2:d8:b2:5c:4b:
                    d7:0b:a8:14:66:95:00:23:d2:6c:ff:be:68:0e:4c:
                    47:05:60:9e:2d:0f:04:d1:81:f5:e7:ab:32:7c:d8:
                    c4:35:1e:2e:d9:6b:a4:d6:4b:12:8b:fa:9d:7c:03:
                    86:61:88:46:d8:2a:4e:7c:36:fb:73:6a:9f:fe:ec:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D1:CC:B3:03:77:DD:C1:3D:F9:4A:3F:EB:DC:1F:30:B5:4F:72:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b6753a7f-ec4a-39f7-9ca3-c5fb368e787f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.40.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:4c:37:fe:6b:d4:fc:26:04:30:44:c8:ad:70:92:0c:62:
         06:e9:bc:52:69:7d:3e:2c:14:10:45:f2:62:45:82:63:90:50:
         6e:6b:5e:8e:5e:90:4a:a3:48:23:90:08:1b:4a:84:46:85:83:
         a9:dd:be:10:de:ab:f0:af:9a:70:9a:44:67:81:60:64:72:25:
         d0:7d:df:4f:a1:cf:4c:da:a0:48:13:c6:9b:fe:c3:df:f9:57:
         1e:69:fd:41:c0:5d:85:8d:67:1e:8c:ed:1d:eb:1f:81:19:47:
         d3:83:2b:ee:f9:9f:06:3c:87:34:20:0c:3e:7f:9d:b5:48:a8:
         94:4b:7a:c6:f1:03:04:f7:33:5c:ee:d3:87:c4:3c:2f:c8:f4:
         d3:ca:3d:fb:ed:b8:20:88:e8:98:17:fe:41:cd:b2:4b:15:2b:
         6e:08:99:59:01:9e:c7:8c:77:f5:60:07:39:5b:67:96:70:70:
         4b:98:6c:1b:e8:78:7e:60:69:56:9a:c9:87:e0:1c:d4:bd:d6:
         5d:31:2e:b8:30:6a:45:b9:ef:fa:bd:0b:54:be:a7:e9:24:82:
         34:44:86:f1:fa:77:26:cb:b3:81:83:72:10:0b:7d:ca:c1:d1:
         fd:bd:9c:66:43:8b:16:e6:52:44:4f:6b:e8:9a:4a:61:14:8a:
         fa:ae:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:35 2024 by rpki-client on console-fra.rpki-client.org