Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b97836f0-2d82-3f78-be48-98ed48fe7727.roa
File:                     b97836f0-2d82-3f78-be48-98ed48fe7727.roa (raw, json)
Hash identifier:          QJHWPROAUAwzl4K1SZlC5Cq8OL/zLSNAJwTiK07+v5c=
Subject key identifier:   76:0D:DF:6D:7F:46:DC:4E:AE:14:CA:F3:BA:AD:D9:AB:1D:1F:6C:D2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A09A3CDDFDE6B222B13C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b97836f0-2d82-3f78-be48-98ed48fe7727.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11351
IP address blocks:        67.246.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:9a:3c:dd:fd:e6:b2:22:b1:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=7729a28a-f7fe-4489-b529-8afb296eb94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6f:a0:21:16:8f:65:57:45:2f:f7:3e:fb:ec:
                    cf:23:ee:12:fe:18:83:d0:07:d8:53:a3:9b:14:5d:
                    30:78:2b:b0:61:ec:6c:b7:f8:89:ba:e8:a2:22:44:
                    88:f4:aa:35:86:0e:e9:5f:43:c5:9a:1a:dc:85:04:
                    be:92:1e:d2:55:9b:78:0a:2f:71:8c:c3:cd:a7:d1:
                    59:9d:29:71:01:35:58:4d:2d:17:b2:8f:ce:2c:e2:
                    53:45:92:bd:77:db:cb:5c:9a:b2:cc:a4:8e:da:b2:
                    24:ee:3a:1e:7c:ae:ff:da:c1:e7:70:8a:97:85:55:
                    5e:c7:17:b0:b7:0d:d6:a8:2e:a9:49:e4:da:08:63:
                    e6:ff:8e:c9:21:1e:c7:7e:c4:f7:73:73:10:00:25:
                    54:49:ea:a4:08:bf:fe:b0:e4:bb:59:be:32:76:e0:
                    70:03:09:52:67:cd:5c:44:37:b6:57:30:51:27:0a:
                    d1:73:35:87:99:cc:f6:37:fe:38:63:11:a3:5a:b9:
                    09:2a:72:9a:e4:74:4b:31:dc:45:b6:18:2c:2b:75:
                    2f:d5:9f:5b:23:f2:bc:58:6a:96:f9:d0:d6:29:d3:
                    89:28:c4:9b:30:24:55:f1:85:01:aa:77:d8:76:fb:
                    ae:73:8a:da:66:ca:da:44:24:f2:42:7e:eb:a8:d4:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0D:DF:6D:7F:46:DC:4E:AE:14:CA:F3:BA:AD:D9:AB:1D:1F:6C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b97836f0-2d82-3f78-be48-98ed48fe7727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:dc:25:47:f1:f7:97:94:6f:3c:ae:62:2d:de:67:c4:93:c6:
         36:f7:48:fb:fb:e8:fa:f9:ae:9e:d9:0b:b5:2a:90:c6:85:e3:
         4b:a5:30:a3:64:2d:f3:dc:90:43:eb:12:2f:8c:9a:e4:21:04:
         02:7e:8d:d7:be:5e:8d:40:f5:9f:cb:c2:c5:3e:4f:af:30:2a:
         50:e9:0f:0f:ce:c0:64:11:ff:40:51:40:ea:2f:16:be:fa:d2:
         b6:fe:b0:8b:e5:1d:7f:43:ca:1d:6d:4b:24:6b:ec:e6:47:89:
         1f:77:dd:e0:83:57:e7:77:96:45:2c:7c:22:97:e1:94:66:fd:
         c6:5d:3b:93:71:cc:0e:d5:24:78:0d:5b:80:2d:98:75:7f:43:
         76:3c:49:c8:ef:f4:e3:c6:9d:03:80:1f:c2:93:c2:4e:02:ff:
         d1:bd:df:3a:e5:e2:4f:6e:25:ac:4f:54:62:5a:13:9b:c4:61:
         10:38:ed:70:01:c0:7a:f3:4c:73:79:f8:e6:33:6b:b7:ad:70:
         94:68:33:a9:4c:1d:1d:69:1f:12:a8:2f:68:0c:3c:80:d6:b2:
         bc:a2:71:31:28:ba:db:3f:e9:50:05:bc:72:4f:fa:39:da:bb:
         ee:48:92:69:be:23:6f:71:df:7d:6f:23:b4:40:41:a0:05:1a:
         60:cd:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:31 2024 by rpki-client on console-ams.rpki-client.org