Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c02bacd3-4a5b-3dae-81b2-8c3e519cabb1.roa
File:                     c02bacd3-4a5b-3dae-81b2-8c3e519cabb1.roa (raw, json)
Hash identifier:          CJ9R8kqNyB9SKp3sCYBn565jf6xrozd46bbzmcQPQEI=
Subject key identifier:   8F:29:92:D2:1A:5B:CA:DC:57:F3:12:A1:DC:82:96:47:D4:E5:02:E8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DA8FFE608B321D9C55F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c02bacd3-4a5b-3dae-81b2-8c3e519cabb1.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        74.218.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:a8:ff:e6:08:b3:21:d9:c5:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=5e1b0e8e-c18b-4ddb-9127-26676f78f6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:45:83:77:e4:a8:2b:42:cd:0d:ff:ef:27:da:
                    27:25:18:bf:9d:5a:1a:fa:7a:12:6d:f8:77:9d:13:
                    f3:33:d2:51:e9:80:86:6b:dc:e6:2e:d9:a4:05:1c:
                    38:d8:5e:f3:09:72:5e:75:4c:30:ec:94:12:c8:55:
                    85:e9:e5:1f:8d:36:bb:70:04:58:6b:5d:a7:9e:c1:
                    a6:df:be:73:40:b2:ae:bb:02:07:bb:a2:09:53:bd:
                    c7:c7:8f:e8:3c:36:89:6a:f0:dc:97:da:79:89:f7:
                    73:a6:96:3d:8c:8c:9b:33:ab:dd:a8:65:85:8e:9d:
                    b9:46:7d:47:a1:31:b2:8e:96:5b:78:a3:d0:56:4d:
                    f6:d8:e3:09:df:ec:c6:db:24:d3:52:04:48:98:4e:
                    6f:f0:f4:e0:56:84:ff:d0:4d:f1:3d:dc:27:e0:d7:
                    ba:a2:2a:94:e2:c4:6a:0f:cd:c7:11:d7:97:c0:38:
                    56:a1:6a:a2:a2:22:31:7c:86:e2:14:f0:58:f3:77:
                    32:6e:b2:a8:14:c6:ac:f6:02:b0:31:20:7c:af:50:
                    f2:5a:da:7b:9a:29:52:95:6c:cf:04:6e:4d:b7:b4:
                    ea:58:78:11:b1:af:b1:da:82:25:e0:23:f8:a7:ad:
                    46:2d:bf:0f:82:02:ec:84:7f:5f:25:ba:32:bd:67:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:29:92:D2:1A:5B:CA:DC:57:F3:12:A1:DC:82:96:47:D4:E5:02:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c02bacd3-4a5b-3dae-81b2-8c3e519cabb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.218.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:08:df:f6:66:d3:00:62:a0:54:ce:2c:63:28:d7:2b:05:
         5a:68:22:e2:16:a2:75:0b:98:0f:dd:04:e8:25:98:d1:f5:ff:
         8a:74:b3:f4:85:8b:8c:20:c5:6d:f0:b1:9c:7b:f4:35:ff:83:
         a1:b1:51:95:ed:f7:c2:29:2e:2b:2b:8a:a4:98:05:0d:2a:14:
         4f:4d:df:aa:c9:6f:0b:9a:6a:d7:74:10:ac:a0:5d:db:2c:f5:
         ec:57:60:c5:6c:b7:ed:71:37:f8:93:14:45:46:a5:d7:4a:65:
         8b:31:46:a6:26:c9:71:cb:a5:61:ab:ed:0a:ac:81:d1:e7:fb:
         81:4a:ff:66:6d:74:49:a0:47:ee:d7:1a:90:00:71:0f:0c:47:
         0c:f1:08:0c:94:ae:68:c5:f5:b7:96:10:f9:3d:90:55:bb:86:
         21:58:db:6a:f4:37:d8:c1:09:3f:49:98:f7:23:81:67:d7:d3:
         09:28:fe:9b:9e:0b:69:94:d2:ee:1f:6b:8f:75:a0:68:94:c2:
         5c:49:1f:d3:90:39:33:a9:fd:e0:4e:bf:2c:0c:b3:48:8b:1e:
         3f:41:67:52:c5:09:1d:03:13:45:1a:d8:67:11:55:e2:7e:0c:
         04:8d:16:58:ed:c5:85:c7:2c:4d:fb:f1:91:4b:47:2f:a5:96:
         2f:fa:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:04:18 2024 by rpki-client on console-ams.rpki-client.org