Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c2e3f1a5-e406-3045-a775-77003e6d31d9.roa
File:                     c2e3f1a5-e406-3045-a775-77003e6d31d9.roa (raw, json)
Hash identifier:          QTDhrJIpfiqdWSpt7z/vPL6hOlYd+QA2Qn1f3PUTvmQ=
Subject key identifier:   44:86:9D:D1:F5:BD:E7:C5:9A:D2:40:FD:06:C0:77:77:0D:79:C9:20
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DC3ABA509B0E9F46A0740
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c2e3f1a5-e406-3045-a775-77003e6d31d9.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11427
IP address blocks:        70.115.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:c3:ab:a5:09:b0:e9:f4:6a:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=725c3607-ca71-46c5-bd23-0a11a2f9eb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:0d:b1:ce:74:f5:f9:d8:cf:e6:11:53:44:
                    12:35:49:a8:dd:6c:e6:56:d1:03:0e:99:ec:93:d4:
                    13:6d:d9:44:ac:c5:b9:db:b7:d4:3c:36:e4:7d:c6:
                    84:4a:fb:e6:c8:fc:8a:a0:23:00:cd:35:f5:ed:c7:
                    c6:40:b7:30:b6:d7:78:17:d0:f9:b7:32:33:de:b7:
                    9f:19:6d:9f:85:99:d8:8e:79:18:79:3d:d4:a0:f9:
                    23:1d:6e:a9:82:0d:32:c8:5b:97:e1:d2:7c:96:bd:
                    29:79:2d:8b:1e:71:b3:e8:95:3b:0a:07:1e:05:c4:
                    c3:a7:8b:9c:7c:73:c5:c3:36:f0:43:a3:72:1f:14:
                    c6:44:a4:9f:ad:5d:ec:ab:ee:ea:3b:e8:b8:fe:77:
                    06:99:76:ea:1c:1a:1e:b6:9f:3e:7e:33:b4:a6:b1:
                    7f:54:71:96:e0:8a:6d:25:f9:97:50:5f:b4:2d:25:
                    34:e0:6c:e6:5b:1b:9c:cb:e8:bc:70:c0:a3:c8:5a:
                    b1:bd:54:76:40:4e:1b:f8:9b:71:e8:24:4b:65:c3:
                    14:27:68:28:96:27:7d:61:51:18:cd:4d:1a:33:97:
                    aa:b4:c2:e2:3b:47:e8:08:4c:8d:5b:be:86:12:68:
                    60:bd:d9:45:55:8e:d1:d8:ce:34:6a:53:7c:86:49:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:86:9D:D1:F5:BD:E7:C5:9A:D2:40:FD:06:C0:77:77:0D:79:C9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c2e3f1a5-e406-3045-a775-77003e6d31d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.115.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:29:93:be:17:49:ee:75:6b:20:70:88:3d:5c:28:14:df:a0:
         38:fa:6e:d9:a1:c3:56:74:f6:fe:8d:67:6c:b9:6b:6e:46:80:
         03:2a:80:95:0c:67:7d:46:4e:87:4e:b0:9b:70:3f:fb:ed:7a:
         76:65:54:e9:62:c1:45:ee:25:6a:3b:52:fd:43:0e:71:b9:8d:
         ce:fd:8c:09:3b:7d:de:26:87:48:1e:dc:22:55:7e:2f:5c:d5:
         5e:6e:9a:98:59:c1:e8:30:0f:1a:de:c6:73:ea:2b:a9:50:18:
         27:e0:d0:53:b0:54:33:e6:8b:e5:9e:14:c9:f9:77:9a:87:5d:
         9c:d7:19:aa:69:54:f6:48:c7:d5:f4:db:dd:b1:a4:1c:ff:6d:
         43:7b:87:17:e8:c4:66:cc:e0:e0:a1:1a:57:66:d2:b1:2c:9b:
         6e:1d:a4:8b:90:03:0b:b3:0a:46:99:16:27:e7:60:54:4a:d7:
         ed:0f:85:a0:1e:3a:99:55:79:be:cc:a8:69:47:7d:4e:4c:1b:
         1d:80:56:db:51:96:bc:55:d8:a2:d3:22:9c:ce:86:fd:8c:b1:
         bb:41:e1:88:6b:d3:2b:14:9c:f3:8e:0f:17:21:26:72:f7:dd:
         cf:2a:3c:cb:13:fb:52:bf:25:18:2a:00:a4:59:7e:7b:12:4a:
         09:81:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:56 2024 by rpki-client on console-fra.rpki-client.org