Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c92df729-affd-3ca2-8441-2cff44d8ae87.roa
File:                     c92df729-affd-3ca2-8441-2cff44d8ae87.roa (raw, json)
Hash identifier:          nESsBZuHkpB/r5yYgEFbWXKATfW/TjuiJAScQHjJ2Ss=
Subject key identifier:   6D:FB:27:A2:5C:76:67:70:0C:3B:7B:B8:AC:9E:2D:1F:87:A8:FB:C8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DB65E2EB3C2E9EC1C6180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c92df729-affd-3ca2-8441-2cff44d8ae87.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11351
IP address blocks:        67.248.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:b6:5e:2e:b3:c2:e9:ec:1c:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=535e3919-94a9-4a2d-bf3e-3a058dc24b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:48:0e:b9:b9:c4:6d:55:de:5a:b1:42:6f:
                    b5:10:37:62:17:2c:e9:0f:74:4b:48:ec:ed:85:c3:
                    9c:74:5d:98:5c:75:c0:31:d5:f6:ae:8b:6d:5d:71:
                    da:7c:d8:76:25:24:ac:72:78:31:ca:d4:74:89:be:
                    65:fb:58:39:f6:15:64:b5:bd:2d:bb:81:00:1f:1f:
                    4d:41:16:49:6f:1d:36:3b:b9:b1:29:8a:e4:c1:f8:
                    4d:3a:80:5f:b1:74:41:6e:b2:a3:7d:30:de:92:61:
                    54:bf:35:b2:7e:6d:58:56:b8:d8:b1:57:d0:fc:3e:
                    27:b3:db:f2:d7:c3:46:d1:f1:ac:b1:37:f1:33:e4:
                    13:e9:6b:83:47:7f:09:7d:85:9e:f4:dc:e6:97:37:
                    eb:32:c4:b4:1f:fb:ed:7d:e4:00:3a:f6:5e:5b:36:
                    9c:5e:25:5e:1b:17:4d:f6:bc:16:80:d2:50:2b:76:
                    3e:ae:a5:27:a5:0a:1b:ad:8e:7f:df:79:b2:c9:d9:
                    f5:2f:6c:db:7b:03:4b:4e:07:4c:dd:e1:8d:27:6f:
                    b9:fb:b7:09:72:36:e2:04:ce:d1:41:5e:a4:cb:a5:
                    79:04:63:e5:cf:4f:1a:ba:0f:9c:3d:11:f9:40:16:
                    22:5c:89:fc:c8:44:72:6b:0e:26:f1:5e:2e:56:6e:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FB:27:A2:5C:76:67:70:0C:3B:7B:B8:AC:9E:2D:1F:87:A8:FB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c92df729-affd-3ca2-8441-2cff44d8ae87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.248.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3f:b5:d0:b3:e0:21:f4:7d:02:c4:bd:66:89:3f:05:d5:3f:
         bc:d3:80:38:b8:ef:24:c8:13:f2:2c:5a:6e:95:45:8d:9a:b8:
         77:90:ff:ee:e6:c2:03:8c:9b:b2:52:10:43:33:28:04:f2:0b:
         0d:c3:33:27:dc:bd:38:b7:1a:48:c4:89:c3:44:25:81:7d:30:
         fc:1d:4a:46:49:74:26:39:bc:9d:50:3e:e9:39:8a:05:c5:b8:
         82:90:da:ff:e3:b2:ac:7c:dc:d5:1e:22:c7:18:b9:a5:d2:a6:
         5a:8c:6a:c4:f5:8c:aa:d7:6d:dc:ee:ad:b7:75:16:f5:ad:79:
         43:fd:6b:6c:c8:80:1f:52:47:6d:e0:f1:57:97:84:19:33:81:
         71:50:4e:d0:dd:8d:a7:16:f6:c9:9b:5c:4b:6f:3d:69:f0:f9:
         29:07:a4:f5:84:87:22:65:11:73:4b:e1:47:db:2e:0c:7a:4f:
         a8:02:9b:5f:06:ff:53:05:2a:7e:1d:1f:57:ca:d4:b6:5d:6c:
         d4:5d:50:7d:62:8b:a8:e8:a3:00:9e:89:8b:c5:07:95:14:e3:
         3f:bf:dd:49:69:5e:ec:a6:e6:86:64:44:5a:c9:80:89:19:bd:
         cf:f1:c7:ea:ec:97:61:75:a5:11:9f:17:db:6d:fb:6c:36:cd:
         de:1f:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:52:36 2024 by rpki-client on console-fra.rpki-client.org