Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c476cdd8-7895-3528-ad6e-02df1adcf44f.roa
File:                     c476cdd8-7895-3528-ad6e-02df1adcf44f.roa (raw, json)
Hash identifier:          dure2JQbghxI9bqsNInR4tJ3QKFHq7S2HZlIiQ1SoBQ=
Subject key identifier:   3F:52:01:E8:98:D2:E7:0B:31:5D:B8:23:66:93:16:C1:57:34:EE:79
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838313001E68D70029ADC5DA3C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c476cdd8-7895-3528-ad6e-02df1adcf44f.roa
Signing time:             Mon 07 Dec 2020 05:00:00 +0000
ROA not before:           Mon 07 Dec 2020 05:00:00 +0000
ROA not after:            Mon 30 Nov 2026 05:00:00 +0000
asID:                     12271
IP address blocks:        68.174.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:31:30:01:e6:8d:70:02:9a:dc:5d:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec  7 05:00:00 2020 GMT
            Not After : Nov 30 05:00:00 2026 GMT
        Subject: CN=0c0ca891-984b-4167-b7dc-9ee34aaedf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:39:7c:7e:b6:8f:6c:00:7d:68:87:1b:84:
                    36:c6:76:34:d5:75:67:30:56:c2:94:d8:c6:b7:31:
                    46:e5:79:76:5e:b1:16:95:64:57:27:77:31:f3:01:
                    cb:41:65:de:9d:71:4a:31:18:3e:e8:17:8e:2e:84:
                    57:d8:ff:77:6f:f1:52:15:88:09:8d:a9:26:08:85:
                    41:79:ba:45:34:e9:6f:63:e4:01:88:e1:95:d2:89:
                    ed:68:9b:e2:24:2b:f8:c1:25:1a:e0:8e:87:cf:9f:
                    8b:b5:03:59:80:66:03:2a:d0:c9:74:fa:2a:79:77:
                    7b:48:38:ba:77:57:42:50:81:23:cf:b4:55:b1:25:
                    97:65:0f:85:61:da:36:d2:ef:25:18:c2:ce:1d:62:
                    0a:a4:19:e7:cd:12:f8:64:a3:07:c2:f1:55:cf:7d:
                    96:69:64:d1:93:db:66:40:dd:ed:76:6c:8d:8d:46:
                    c4:67:7e:61:b2:72:9c:99:1d:a3:8f:1f:08:25:f7:
                    be:f0:7d:d3:76:40:da:c6:c4:41:43:cf:f7:59:31:
                    0e:95:6c:83:27:01:07:20:34:f5:9c:5a:a7:58:4b:
                    37:ce:96:fd:36:bb:c1:f7:f2:2d:05:12:e2:65:4b:
                    7f:f8:59:58:51:0d:17:90:1f:17:08:e4:90:18:f8:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:52:01:E8:98:D2:E7:0B:31:5D:B8:23:66:93:16:C1:57:34:EE:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c476cdd8-7895-3528-ad6e-02df1adcf44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.174.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:c1:66:94:5e:30:f0:4d:e8:c4:61:f6:41:23:09:16:d4:
         14:a5:54:d4:3f:bf:b8:3b:39:f2:18:2b:59:cb:6b:8c:86:f3:
         31:6f:a1:d5:12:ef:02:e6:6b:38:2c:dc:ac:5f:21:27:bc:28:
         b6:56:51:e3:be:53:30:71:41:73:3d:cd:a3:b3:01:ba:a9:52:
         e1:32:23:ad:83:43:90:07:3c:f2:45:e8:56:af:e0:d7:32:a1:
         ec:a8:b4:29:ba:8a:d2:0f:e3:93:fa:68:9d:24:63:e0:8b:3b:
         87:9a:8f:c1:85:12:79:28:c5:fd:82:2d:a8:00:d5:d9:00:b4:
         19:8f:c5:3d:c7:b3:5f:b1:75:e3:34:dc:7d:c8:cc:dc:90:bd:
         94:7a:9e:6f:26:31:48:7b:ea:a8:3b:97:01:d5:8b:83:8b:93:
         0b:5d:aa:d9:ab:8f:3e:7a:25:6a:96:c9:c7:78:a3:1f:cd:97:
         8a:8d:b4:a0:00:52:71:d5:43:d2:d8:3a:61:a1:43:3c:89:58:
         0e:9f:f0:8d:23:fa:52:0f:80:00:0a:a2:15:b2:11:30:59:c3:
         ee:c7:70:36:d6:94:2c:ba:d1:0e:3b:52:d8:15:28:9c:e1:fb:
         01:8e:ba:16:2b:dd:e1:99:61:17:f6:33:ce:7e:36:2f:5d:e2:
         bf:dc:0c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:12 2024 by rpki-client on console-ams.rpki-client.org