Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ddd50-d728-34de-8ff8-b61a3acdf6bc.roa
File:                     be3ddd50-d728-34de-8ff8-b61a3acdf6bc.roa (raw, json)
Hash identifier:          5D8SoYkAANvqT2qgFlcDXH7833YxbqEcH0pfpdnu064=
Subject key identifier:   F3:B3:62:7E:E3:53:24:9C:3F:6F:02:2B:32:61:D8:AD:BA:67:71:99
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DDB9C1B90BFB21C1F2680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ddd50-d728-34de-8ff8-b61a3acdf6bc.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        70.125.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:db:9c:1b:90:bf:b2:1c:1f:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=4d5a57bf-5d8e-4bc6-b3cd-f814e3fa128e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:4b:1d:53:6d:72:c1:98:64:78:db:b3:3f:
                    0c:58:16:d8:c0:90:60:51:be:e5:c2:b9:1f:9d:cf:
                    f5:21:a9:0d:e2:07:b7:4d:7a:9c:a0:12:ad:7b:c3:
                    19:74:5f:22:cd:6a:c8:18:d5:15:44:f2:48:a9:11:
                    7c:19:3b:a6:07:88:7f:ca:da:64:51:72:2f:96:43:
                    30:a8:6c:73:6d:b9:88:ac:f7:50:38:ad:e2:e7:ab:
                    ca:43:e8:e2:ef:6e:aa:0d:77:26:23:ee:25:ba:3c:
                    a1:3e:57:45:42:51:a1:a8:40:35:6b:58:2b:50:c8:
                    c9:df:82:c7:1e:aa:85:48:3b:3a:fc:d8:d8:fd:20:
                    66:c4:86:dc:70:b0:a8:37:7f:e6:3f:b5:84:b7:fb:
                    54:e5:92:a9:8d:61:18:fc:5c:0f:28:25:3b:f0:b3:
                    c5:f2:ba:d9:b5:6f:7c:72:bc:95:b4:70:4c:5f:19:
                    1b:e2:06:14:e6:0d:55:dc:26:ff:61:fa:53:f6:9a:
                    a4:39:51:65:8e:93:86:d8:ff:8c:5f:31:1e:cc:12:
                    13:c1:dc:45:e3:61:8b:a6:f4:52:cc:d2:27:44:fa:
                    90:27:0b:43:ca:56:8f:20:22:fc:43:83:66:e4:ad:
                    79:ff:de:38:f6:95:c0:6b:35:ec:e0:af:d6:7e:66:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B3:62:7E:E3:53:24:9C:3F:6F:02:2B:32:61:D8:AD:BA:67:71:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ddd50-d728-34de-8ff8-b61a3acdf6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.125.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f0:05:9d:be:75:29:53:9c:00:6f:d5:6c:b5:ad:d3:89:3e:
         14:3b:ef:d6:c0:3d:19:69:eb:c2:bc:c6:e2:9c:b9:9b:1c:75:
         e2:c0:9b:d6:06:9e:0d:05:e1:62:6c:d8:96:8a:91:b7:e3:7e:
         fc:6f:a1:13:86:86:ea:12:d8:47:9d:18:96:04:03:4a:06:8a:
         68:1f:be:71:dd:64:a1:79:2b:6c:f6:4f:48:fa:33:be:d3:37:
         c5:c0:61:ca:a9:f7:59:6a:30:cb:31:43:0b:45:15:a9:4d:cf:
         2f:37:ff:c1:cc:df:6e:a4:eb:58:60:a4:71:74:83:4a:5b:47:
         90:e4:50:b1:79:1e:6e:f9:cb:0c:b3:2a:d3:52:37:ac:e7:5f:
         27:5e:84:4d:4f:ad:9e:5b:d3:3f:9e:a5:58:57:8b:dc:14:78:
         1c:94:a1:f9:7c:25:24:17:0c:39:a2:5a:09:02:4b:fc:04:16:
         01:72:b3:53:4b:77:c9:fb:2b:b8:65:01:63:a7:d1:3d:29:cd:
         38:bb:01:a7:7f:7b:56:66:b6:9a:ba:a3:34:62:24:8f:f0:f7:
         21:1e:9c:83:7d:bd:6e:85:cc:2c:2a:65:07:06:80:13:9a:06:
         d3:d1:06:ab:00:87:11:49:05:43:1d:7f:35:39:31:f3:51:c1:
         c2:13:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:11 2024 by rpki-client on console-ams.rpki-client.org