Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfd9aa03-f2f8-378a-b993-4399913468c8.roa
File:                     bfd9aa03-f2f8-378a-b993-4399913468c8.roa (raw, json)
Hash identifier:          2Lq3Nn33riuik/t7VB8J1i2AGulcfsTN71qY9eZ90b0=
Subject key identifier:   96:F7:6B:14:BC:A8:FB:B0:08:32:7B:C6:45:E3:7F:9F:36:5D:F8:AA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E5EC3224B8F2814F29D80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfd9aa03-f2f8-378a-b993-4399913468c8.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11427
IP address blocks:        70.120.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:5e:c3:22:4b:8f:28:14:f2:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=e6fa0745-7348-44ef-83bb-5f7e8e3c24d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:4e:3b:35:16:cf:2a:e5:17:2a:7f:1a:41:
                    e6:a6:fa:7b:53:57:b6:bf:fb:30:55:26:9c:eb:31:
                    bf:d4:55:27:d4:d3:81:63:68:26:a3:69:09:0f:e4:
                    f7:26:66:06:08:0f:af:40:59:a6:10:1a:25:15:eb:
                    8c:c3:74:e4:18:92:e0:3f:98:d1:ef:85:e2:b4:e0:
                    03:4c:e8:61:7c:95:90:60:65:58:34:ec:dd:6a:fd:
                    f1:9a:a4:8e:2f:ed:95:12:d9:b4:13:f7:cb:9f:eb:
                    b3:b1:23:c4:bd:67:0b:d4:da:c0:00:f6:4d:7c:5b:
                    bf:1c:e3:a9:d9:09:9b:bb:64:51:c7:3b:16:8d:de:
                    47:c9:b8:73:20:8b:ea:f8:82:85:ed:31:eb:e3:0e:
                    fc:bc:e8:cd:43:12:87:4c:57:9c:a6:b1:b3:ca:b3:
                    0a:37:32:75:f9:91:34:85:af:9c:b9:bc:0b:18:c2:
                    60:ee:16:70:05:07:ae:20:ee:dd:db:ff:17:fb:d2:
                    b3:af:5e:88:bf:53:95:cf:50:a6:b1:03:9e:8c:88:
                    17:3e:d3:33:66:ed:0f:d1:01:b4:a2:f3:86:75:37:
                    f4:e2:19:a5:f0:eb:89:70:35:e8:fb:e5:8f:e3:c2:
                    6f:d1:24:a7:09:57:33:74:7f:c5:fb:eb:30:cc:3b:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F7:6B:14:BC:A8:FB:B0:08:32:7B:C6:45:E3:7F:9F:36:5D:F8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfd9aa03-f2f8-378a-b993-4399913468c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.120.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:80:0a:24:f6:21:58:f0:0c:7e:73:fb:91:13:43:82:5c:49:
         15:4f:a9:ce:ae:a8:e0:b9:ee:79:2d:fb:cb:83:99:f7:32:a7:
         5c:6d:6e:0e:17:26:55:c1:b2:09:09:aa:2f:d0:6e:b5:17:ea:
         23:c7:09:ff:16:0d:6c:e1:5f:e2:ba:2e:fd:7d:a4:15:71:6c:
         be:99:aa:24:b7:e9:98:62:f7:e3:9d:4b:84:4e:78:69:e0:9e:
         2a:8a:28:ac:da:e6:fe:75:94:39:6e:b3:87:e9:da:74:04:51:
         f3:d7:c3:25:b6:55:89:df:bb:6d:c8:d5:e5:ca:6d:c6:f2:11:
         aa:32:f4:ca:be:b9:1e:b9:ef:5a:c8:55:17:27:b3:81:65:8e:
         9d:e0:c4:31:38:87:b0:ae:52:63:b4:b7:9b:d1:78:81:79:59:
         75:ed:71:47:61:a2:eb:fc:14:35:67:4f:29:03:9b:37:6f:3b:
         08:10:09:2a:ac:93:f0:be:45:3e:88:93:f6:2c:72:3e:f6:49:
         96:2b:f7:80:0e:57:fb:88:b0:71:f6:f2:f2:53:e3:b3:57:9e:
         bc:96:f9:c7:68:87:1e:62:d9:55:e8:47:f0:ec:f9:1a:a1:ce:
         fb:af:ee:46:d2:d3:8c:b3:0b:80:62:72:02:86:75:f9:1f:93:
         6e:a1:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:28 2024 by rpki-client on console-fra.rpki-client.org