Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cde051da-a92f-3ec0-8898-7eb577f862d2.roa
File:                     cde051da-a92f-3ec0-8898-7eb577f862d2.roa (raw, json)
Hash identifier:          j3kG54OfaVWdv4gasoRSHUPgkXO6Drlu8VAVgHf7afM=
Subject key identifier:   D5:68:B2:1C:49:6C:09:19:57:5D:B7:7E:7E:09:29:F6:A3:87:6E:6B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A09681239DFC9709A68A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cde051da-a92f-3ec0-8898-7eb577f862d2.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10838
IP address blocks:        75.87.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:96:81:23:9d:fc:97:09:a6:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=cf80c68b-1779-4018-82ef-fbe6d1297826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:ac:78:6f:88:87:0e:bf:11:4a:29:93:44:
                    a7:6c:c4:65:09:db:e5:d3:12:12:28:4f:c8:cd:c9:
                    d1:b5:d3:5c:5a:9c:f8:ef:77:e3:64:a1:10:0c:3f:
                    8e:39:d4:e0:8c:a1:06:9c:ba:2c:6a:3f:cd:e7:d0:
                    c3:a9:03:e6:b1:7f:91:42:5a:84:3e:de:e7:d6:b2:
                    f8:db:1e:05:d5:6a:bc:f7:3f:bd:58:5f:69:c4:49:
                    7b:a2:3b:56:aa:7e:f5:b5:ad:d3:f4:99:0b:03:60:
                    00:8a:95:3b:0d:5d:ca:c9:b3:25:78:b4:e3:00:be:
                    5d:8c:5f:e5:02:2a:8d:43:0a:a8:80:2c:e4:9f:6f:
                    85:94:c2:eb:b4:06:58:14:8b:0a:f5:be:29:ec:06:
                    e9:06:96:5a:31:ce:d5:de:00:99:ea:20:f0:12:c5:
                    11:5d:28:fb:c9:52:a5:0e:4e:94:b3:42:05:c0:ad:
                    e2:c3:b2:85:fb:0d:c6:1e:1a:40:08:b7:6b:26:2e:
                    e2:b3:f2:83:b8:14:61:b9:80:cc:7e:01:13:ed:01:
                    c2:bd:65:41:ae:5f:be:f5:a4:93:a7:63:be:25:63:
                    d2:d0:d3:fa:3b:66:bd:f5:3e:93:08:32:b3:e2:75:
                    4c:a4:a4:0d:c4:49:86:7f:1c:53:7f:3a:5a:5d:56:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:68:B2:1C:49:6C:09:19:57:5D:B7:7E:7E:09:29:F6:A3:87:6E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cde051da-a92f-3ec0-8898-7eb577f862d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.87.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ca:39:65:24:21:e0:e2:45:47:5f:71:41:70:3a:a3:80:ea:
         2f:d9:b5:f9:e5:88:08:f4:ab:70:ab:bb:0d:99:df:53:9f:24:
         d2:e1:13:24:86:e8:36:69:69:14:32:f5:c4:58:5b:a4:c1:e6:
         57:f1:a6:d1:ac:cc:33:04:10:fa:dc:57:cd:66:b0:d0:b9:27:
         24:3d:bd:01:d1:61:db:30:2e:30:2a:26:9c:1f:6a:7c:1b:42:
         f8:0c:53:bd:6e:a2:c1:61:cf:84:dc:db:85:ec:6a:a8:1b:30:
         81:f6:0a:72:a8:92:69:9b:0e:a6:9b:a4:43:60:6f:f5:45:0f:
         ff:7e:cb:a3:83:1f:29:1a:a8:c0:a3:e1:b1:d0:51:d3:8c:ae:
         7c:04:34:4e:20:67:2a:4c:b7:03:83:7c:16:06:f3:a2:67:f4:
         a0:27:b2:5a:66:b3:c4:df:ec:58:f5:b4:71:02:0f:20:fb:50:
         df:e4:79:5e:03:1c:56:d9:ac:1a:fd:f3:85:14:57:e3:b0:7d:
         60:d0:e0:05:ad:73:dd:59:be:13:e2:b3:6b:c9:15:95:28:3f:
         a6:20:02:51:bc:2d:79:fc:82:bf:a5:04:75:8b:ad:97:a5:9a:
         ff:f8:bc:15:d9:ca:4d:63:87:1a:29:9a:ef:73:7a:03:22:3d:
         f3:4d:b4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:38 2024 by rpki-client on console-ams.rpki-client.org