Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c60152c1-3f05-33fb-8e40-37a9cf22533e.roa
File:                     c60152c1-3f05-33fb-8e40-37a9cf22533e.roa (raw, json)
Hash identifier:          PAFDr1lhyx4cVNE2pofC3v2k2wIZHfoAsRbMOoatDtY=
Subject key identifier:   B4:7B:2E:A7:0B:E2:70:C6:32:7B:4B:E4:AF:87:30:9B:A9:D6:7C:52
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838609A7779B8A666BD6F8BBA60
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c60152c1-3f05-33fb-8e40-37a9cf22533e.roa
Signing time:             Thu 24 Dec 2020 05:00:00 +0000
ROA not before:           Thu 24 Dec 2020 05:00:00 +0000
ROA not after:            Thu 17 Dec 2026 05:00:00 +0000
asID:                     33363
IP address blocks:        71.42.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:60:9a:77:79:b8:a6:66:bd:6f:8b:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 24 05:00:00 2020 GMT
            Not After : Dec 17 05:00:00 2026 GMT
        Subject: CN=a05b87c8-728b-445b-9794-b6015b5292f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:d5:e4:45:4d:0c:e1:6f:ba:40:2f:48:fb:
                    7d:7f:d7:c0:06:d8:65:13:ce:8c:c5:b8:96:a0:2f:
                    76:86:3f:57:de:96:37:80:32:ee:65:e5:6f:35:08:
                    24:83:d8:b0:37:18:cc:d6:89:d7:02:b1:1e:fe:f8:
                    28:87:88:74:9a:fa:06:f7:67:56:2a:a8:61:28:13:
                    10:bc:27:a1:29:0b:8c:15:09:9c:c4:8a:02:d4:80:
                    60:9c:c9:5b:0f:bf:e2:29:50:fc:1b:81:f5:f2:ef:
                    48:f4:ac:34:9b:ce:8d:70:a1:13:dd:c5:f6:52:21:
                    13:82:a3:b7:07:27:4e:90:39:c0:2c:04:ac:a1:6f:
                    1b:4a:b6:94:01:61:7c:50:fe:7b:e5:0e:00:f8:d8:
                    83:f1:99:e1:4f:db:e2:36:43:17:bf:a7:b9:12:a8:
                    6a:bc:a0:8e:b6:af:a9:dc:8a:07:37:4c:c7:e3:4d:
                    bf:20:06:de:3f:aa:5e:18:0c:66:19:85:35:d8:fe:
                    62:28:01:3f:9d:a1:ec:1a:7e:ac:cb:ef:53:f3:a8:
                    d4:f4:d7:0b:1a:84:61:d6:0b:5b:14:7c:5e:9e:8a:
                    b2:59:8e:08:b4:b0:40:9c:fa:4d:7a:e5:87:5f:0c:
                    a5:8d:b0:ec:29:a0:1c:d1:96:0a:af:68:45:ec:14:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7B:2E:A7:0B:E2:70:C6:32:7B:4B:E4:AF:87:30:9B:A9:D6:7C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c60152c1-3f05-33fb-8e40-37a9cf22533e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.42.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e1:97:b1:01:d6:e5:bc:0c:a1:4d:a1:e6:77:1f:cd:3f:f4:
         36:48:24:b5:32:c0:83:74:bd:c3:c4:99:82:32:ac:87:72:fe:
         68:28:09:e1:06:c7:bf:0d:fa:b2:7b:4d:a4:32:79:21:6e:b7:
         ef:4e:04:8d:43:1a:50:2b:a1:54:f5:b0:81:5f:f2:56:64:60:
         c6:41:7e:5a:e6:33:74:d4:a2:45:c7:b2:d6:ce:dc:b8:28:9c:
         8f:ee:65:f1:61:49:48:81:4c:6e:27:1a:b3:1e:59:5b:a8:ac:
         3b:65:ca:73:3e:28:a7:0b:2c:47:fc:0e:2f:84:2b:40:6a:f3:
         bc:8d:87:7b:aa:18:4e:cb:b2:28:41:fc:b9:b4:df:93:32:5c:
         9f:cc:e8:b3:ef:fc:a6:31:a7:e6:61:bb:67:61:90:63:af:50:
         98:2c:25:ee:07:4f:1d:9d:61:c5:2d:4d:18:ab:78:db:e1:5c:
         02:bf:bf:13:0c:6f:a0:45:e2:e3:8e:c4:38:c3:c0:f3:1f:24:
         6d:3a:73:a9:31:ae:ab:30:18:32:f8:64:c5:f0:38:76:6b:51:
         1f:7c:cd:6b:ca:ca:b3:b5:27:22:2a:79:11:82:ce:2c:e2:b8:
         a2:03:03:ad:9e:4b:df:a9:45:94:ea:f6:99:89:57:89:74:f0:
         f9:e6:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:28 2024 by rpki-client on console-fra.rpki-client.org