Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cafdd263-8488-3f1a-955e-c10c89c6071b.roa
File:                     cafdd263-8488-3f1a-955e-c10c89c6071b.roa (raw, json)
Hash identifier:          QitMEmsQHeLoPM0ijVdkdBkbk0Eflb28y8oXRDHMCgc=
Subject key identifier:   53:8C:AC:D3:4D:0B:CA:B5:01:45:38:B8:4B:77:9D:78:49:09:80:7F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583AC045488B4F5C446D7666E0E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cafdd263-8488-3f1a-955e-c10c89c6071b.roa
Signing time:             Wed 09 Sep 2020 04:00:00 +0000
ROA not before:           Wed 09 Sep 2020 04:00:00 +0000
ROA not after:            Thu 29 Jul 2027 04:00:00 +0000
asID:                     20001
IP address blocks:        2603:8001:cb00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:c0:45:48:8b:4f:5c:44:6d:76:66:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  9 04:00:00 2020 GMT
            Not After : Jul 29 04:00:00 2027 GMT
        Subject: CN=17a7fe28-7db5-47c0-9540-5e2b22208230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:04:94:62:56:a9:e3:27:58:a3:e0:47:5c:
                    cb:ed:ee:e2:c0:bb:ed:b0:a2:7e:4a:99:5f:3b:b5:
                    7f:86:52:1a:a8:a6:68:fe:d2:82:7f:c0:e7:9d:b6:
                    0f:a9:82:f6:9c:11:64:ce:f0:bd:a9:d0:e5:a6:ad:
                    fb:0d:8c:d7:ee:36:f9:b4:9d:cc:37:a5:ea:a8:91:
                    bf:39:5a:70:da:40:35:e7:d3:38:c0:d3:d5:8f:06:
                    a0:04:0f:5f:7d:cd:92:f2:d3:12:2f:b2:6e:df:20:
                    39:0e:0b:c7:1e:ed:8d:42:d2:a8:9b:4b:6f:c4:38:
                    e7:ac:52:f5:bc:93:cf:2c:80:ed:6b:32:18:2c:6f:
                    1e:14:be:39:02:c2:2e:50:69:72:70:6f:2c:5d:39:
                    ea:ec:6d:6d:5e:53:8e:2a:a1:7e:c7:48:d6:6e:5d:
                    37:18:cb:e6:6d:4b:d8:3a:a7:21:9c:5f:d5:b5:c7:
                    62:d8:2d:a2:f1:82:ee:5a:d8:f9:8a:e5:66:30:45:
                    d5:1c:d4:bc:11:68:71:38:34:3e:5a:e7:e6:03:fd:
                    8b:98:c0:01:41:c2:11:8e:4c:7e:dd:79:90:b5:df:
                    8e:12:96:ae:3c:42:52:96:71:31:50:6e:a7:fe:54:
                    82:79:a4:56:ee:52:fa:d7:af:29:7b:6a:3d:77:81:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:AC:D3:4D:0B:CA:B5:01:45:38:B8:4B:77:9D:78:49:09:80:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cafdd263-8488-3f1a-955e-c10c89c6071b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:8001:cb00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:52:5d:f4:0d:74:65:da:31:01:e6:5f:37:42:b1:9f:1c:
         e7:0e:17:31:4f:74:31:1c:20:6b:0a:11:61:5e:83:b3:d1:be:
         af:b4:1e:eb:30:b9:b5:e8:b4:7f:c0:e3:56:ff:15:c2:7d:a5:
         01:09:7c:c5:8d:32:76:de:b5:4d:68:0c:e6:1a:e8:03:76:ee:
         fd:3a:e8:f8:54:bd:13:f8:63:a3:fe:f7:06:1e:8e:6d:0f:09:
         b3:cb:30:fe:60:95:1f:2b:5c:57:d9:53:ea:4a:fc:69:82:de:
         6a:b4:38:e4:8d:8c:52:a7:01:d2:71:1d:25:09:8e:72:e0:7d:
         3e:57:2b:94:3a:ab:1b:1d:8b:ec:83:02:e3:34:96:3b:c0:9a:
         d6:85:72:6e:b9:5c:3c:5d:0d:5e:84:fb:fc:78:25:df:bd:00:
         fa:70:59:01:15:db:04:dd:3c:c0:10:6c:5c:61:9e:a4:74:ec:
         26:1c:05:4c:38:f5:b3:c6:c4:ca:b2:fb:72:74:fd:cc:4e:08:
         14:ce:fe:40:41:d3:e6:8a:28:b4:07:10:21:2f:ca:05:49:f9:
         10:fc:aa:bc:1f:96:85:9f:d7:55:49:00:17:66:1f:b7:ed:68:
         5e:9d:85:7f:aa:8f:c4:7d:a1:76:eb:79:48:ab:6b:c8:47:2a:
         aa:f6:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:37 2024 by rpki-client on console-fra.rpki-client.org