Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c4aa48ca-9775-3c42-a990-c5b78c86e219.roa
File:                     c4aa48ca-9775-3c42-a990-c5b78c86e219.roa (raw, json)
Hash identifier:          PZI5FnyYPb4JDyY3ECCUjmTeXfXbnTzXDi6M7KQ2m9A=
Subject key identifier:   FE:1E:4B:9C:43:AE:22:6E:90:AE:B9:A1:19:45:E5:D3:BD:81:55:E4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF0B0A989E85A8BFA362580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c4aa48ca-9775-3c42-a990-c5b78c86e219.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     8052
IP address blocks:        107.14.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f0:b0:a9:89:e8:5a:8b:fa:36:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=2238fbc9-4ec9-49e8-af07-220f0e08284d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:fd:9c:f1:10:17:3e:b3:ad:f9:f3:9a:78:
                    8c:65:1d:88:dc:ec:33:88:6b:62:e7:dc:ff:61:83:
                    3a:c9:4e:e0:c2:89:a8:e3:bd:46:44:99:6a:db:05:
                    6b:df:17:1b:34:ff:71:f5:de:99:aa:6f:f0:c3:35:
                    9a:2b:4a:ee:aa:5f:20:28:3b:6c:d6:96:34:bb:35:
                    20:a9:de:71:49:02:68:09:00:52:0b:e6:8e:91:97:
                    65:de:34:24:2e:5c:58:cd:f2:c9:24:25:36:bd:d0:
                    5e:16:97:03:96:96:71:fe:a0:f0:7f:30:53:e2:21:
                    51:6c:ca:0b:58:b0:95:96:47:af:17:05:ac:55:a2:
                    31:2e:72:87:15:ff:fc:82:c0:8f:07:f5:8e:6c:7f:
                    f0:cc:5c:5e:fd:2a:70:20:d3:4d:c7:c7:b2:dd:ce:
                    28:13:f2:5f:74:d9:ca:46:a0:f0:14:56:5e:5c:fe:
                    41:15:48:01:f9:f8:6c:e7:d3:c0:80:a1:c2:37:06:
                    55:bf:f8:ad:24:f4:0f:8f:6c:b2:99:9f:4c:0b:35:
                    94:82:d6:c4:ec:88:f5:97:fa:8e:af:62:8c:75:46:
                    f3:be:e2:42:9d:91:6c:6c:4d:66:75:ad:ce:66:a6:
                    bd:2f:73:4f:f5:00:7f:7a:8d:ae:19:b3:3b:9b:87:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1E:4B:9C:43:AE:22:6E:90:AE:B9:A1:19:45:E5:D3:BD:81:55:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c4aa48ca-9775-3c42-a990-c5b78c86e219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:c6:33:19:83:82:d8:e9:f2:b9:60:ab:71:c3:6e:4f:21:
         36:77:d8:50:e6:f7:b2:3d:28:88:13:b2:0d:4f:72:5e:a4:66:
         9b:e1:30:ad:bc:13:ac:56:d1:35:e7:78:65:a2:39:2e:bb:fc:
         fe:d6:18:7f:fd:55:b8:7a:95:a1:20:2b:bc:ea:e9:56:04:b2:
         b3:a7:97:22:f8:07:d8:d6:a8:32:0a:6d:5b:a0:75:d0:70:f3:
         aa:82:d4:d9:25:09:ac:e8:03:84:7b:97:ac:ba:ee:98:4b:67:
         04:17:f4:3c:2f:dc:64:8e:e4:f3:4b:72:49:3c:7b:01:fb:cf:
         6e:d9:d6:34:f5:e6:47:9a:f8:ab:3c:72:29:0e:42:d7:1e:d0:
         50:39:8c:36:02:b4:ac:03:f7:9b:17:d3:f1:d2:60:f7:e5:a3:
         90:3d:2b:f7:f5:9c:25:35:5d:2c:ac:14:06:35:ef:1e:cf:ea:
         78:4b:2d:9a:21:5c:05:bc:ff:72:d2:af:fc:ec:7c:07:66:47:
         a7:a9:4b:dc:79:02:d8:35:ab:6c:8b:06:de:bc:82:3e:df:07:
         5e:44:7a:fb:8d:97:7c:69:89:06:3b:51:ae:2f:81:ac:bf:f2:
         25:d7:52:37:f0:3f:90:52:b9:5d:f2:d3:c0:0c:ee:33:e4:2b:
         2c:a0:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:36 2024 by rpki-client on console-ams.rpki-client.org