Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bff5ae0e-ad3d-39e8-a509-c5f0446086b5.roa
File:                     bff5ae0e-ad3d-39e8-a509-c5f0446086b5.roa (raw, json)
Hash identifier:          wTKCRLzNwRdvt4eImxiyh3W3tALJ3bFtnrYus7DZt5s=
Subject key identifier:   E1:6E:38:82:81:2B:CB:E2:3C:96:D0:5F:C1:F3:98:EB:9C:3B:B8:9C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1401270BE2DA26991FE80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bff5ae0e-ad3d-39e8-a509-c5f0446086b5.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20001
IP address blocks:        76.58.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:40:12:70:be:2d:a2:69:91:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=84b4fa71-44a0-43ad-b2c1-5dda425b056c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:d8:14:58:ef:88:3d:3e:99:78:5b:30:95:
                    74:2e:db:6f:52:02:ce:52:33:ee:8c:a4:e5:0b:b9:
                    92:b2:2b:8a:23:64:31:d6:a0:b2:0c:50:21:23:01:
                    b0:8c:f1:fe:38:22:04:b1:8b:ce:72:c6:0e:85:da:
                    3f:3e:b2:49:e4:27:20:43:5d:d1:ee:16:e2:d5:66:
                    03:0b:18:af:ec:e9:f0:d0:d1:aa:46:f4:a9:55:e0:
                    f3:41:29:fe:b8:a1:7d:c2:4c:1a:c0:80:9f:b0:f0:
                    98:26:55:54:9d:29:3a:37:08:5f:aa:f2:ec:1e:d7:
                    d1:86:46:4e:eb:e2:ea:35:d9:fa:73:d4:e1:8d:30:
                    03:0f:3f:ee:1b:69:37:b6:d6:ae:09:3e:8d:e2:da:
                    f4:fd:b9:62:de:2a:d9:bc:90:2f:55:ad:12:6d:fa:
                    7a:49:49:8a:bc:1d:e0:22:d7:40:91:a8:e7:36:ff:
                    ee:4c:9b:1d:81:5f:f5:73:ad:bc:7d:13:f0:90:64:
                    2a:d9:eb:b5:de:0b:f7:30:26:de:f9:20:52:c9:31:
                    c0:b9:c2:31:7f:ff:1f:05:17:d8:f6:e1:df:4e:88:
                    94:7c:07:b5:c0:19:ac:be:bf:72:05:72:bb:8b:2f:
                    39:c9:f6:34:27:64:ec:55:8c:7a:a7:05:90:2d:4c:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6E:38:82:81:2B:CB:E2:3C:96:D0:5F:C1:F3:98:EB:9C:3B:B8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bff5ae0e-ad3d-39e8-a509-c5f0446086b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.58.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a4:2e:10:4a:60:f1:2a:36:25:9c:be:3a:18:4d:40:e3:e4:
         4d:75:e7:34:4d:17:82:40:19:e5:fc:56:72:14:0a:24:78:e7:
         1b:c8:1b:49:6d:5e:17:65:7d:c0:ea:06:e7:14:bb:9c:96:22:
         0b:55:21:28:15:bb:86:20:c4:4b:d0:00:60:6f:88:6f:98:7b:
         2f:9f:ec:45:61:2f:99:42:ad:fb:10:da:ab:8b:1d:d0:23:99:
         a6:33:79:b3:dc:f6:bd:d5:70:50:d7:d7:6a:b0:9e:4e:ea:65:
         ff:09:92:38:36:f6:62:26:f8:7f:d0:5e:88:00:c9:05:92:ab:
         4e:a1:ac:49:72:3f:8b:63:9d:7e:57:e1:04:b1:28:e1:c4:71:
         c3:49:47:62:f3:ea:3c:87:16:ff:70:07:9f:fe:58:78:8f:bd:
         96:da:73:46:c4:69:79:41:18:d8:55:b9:f5:a4:06:e2:d1:cc:
         52:bb:f3:b5:2c:e9:34:10:1d:3e:2f:38:e0:d1:2c:5e:2d:3a:
         05:75:41:dd:bc:7e:5a:9e:1f:e1:71:6a:60:63:9a:d0:cb:e4:
         6f:80:c8:7c:46:26:fc:70:c8:a7:a6:46:88:9e:bd:aa:54:db:
         75:dc:d3:03:9d:fd:6a:f1:43:15:31:f0:d5:1b:3c:07:4e:5c:
         64:66:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:36 2024 by rpki-client on console-fra.rpki-client.org