Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d0a7af9e-ac13-3de6-bd1d-642f23813d86.roa
File:                     d0a7af9e-ac13-3de6-bd1d-642f23813d86.roa (raw, json)
Hash identifier:          IkXaXVViIgFoVTtFoT/o5zayaAH5MhNivS06E6ffDyY=
Subject key identifier:   16:6A:B8:8A:8A:27:0C:F2:37:77:B9:D7:8B:A8:CD:F3:A6:4C:4A:E4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCE2167CD7B301070F28040
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d0a7af9e-ac13-3de6-bd1d-642f23813d86.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     4546
IP address blocks:        173.198.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:21:67:cd:7b:30:10:70:f2:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=e4095b1d-6540-4802-aa01-3557a12d124e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:e9:38:e0:fb:7d:d0:53:50:ea:ac:c7:24:
                    e1:02:8b:23:44:76:9d:7c:82:c4:34:ff:98:d7:98:
                    89:9e:74:d3:10:6e:b8:25:c2:63:6d:ce:82:53:eb:
                    94:b9:a2:98:f5:5e:9a:77:4e:b4:70:84:08:f9:31:
                    22:82:79:9b:9b:61:34:e7:0c:56:ca:93:d4:70:a3:
                    59:13:87:e3:cd:67:f9:34:8f:ba:c8:b4:c4:17:12:
                    3a:2b:7e:21:bf:3b:5d:eb:68:03:fc:09:51:93:ef:
                    4b:92:4c:7f:e1:4f:10:fa:a6:9a:b6:83:c4:07:28:
                    f7:1a:9c:02:0b:12:73:93:7b:64:10:95:df:f8:52:
                    5c:f7:d4:20:13:99:b3:33:a9:0b:c5:17:a5:8e:d9:
                    f9:f2:bb:74:4e:74:4b:39:ca:5b:a5:84:bb:56:d5:
                    85:51:65:ea:6f:67:8f:a9:bc:9a:c1:f3:a1:33:e5:
                    19:ae:4d:4c:01:ec:ea:76:90:6b:b1:16:9d:0c:46:
                    40:be:47:2b:07:dc:8f:e0:fe:46:48:da:cc:01:9f:
                    4f:f4:d7:f1:58:a4:cf:07:7d:00:52:ab:32:54:66:
                    13:6c:84:f7:0a:07:55:9c:53:d8:c1:6a:17:c3:b7:
                    86:3c:2f:20:a8:d7:5d:6a:db:54:a8:90:a9:c2:47:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6A:B8:8A:8A:27:0C:F2:37:77:B9:D7:8B:A8:CD:F3:A6:4C:4A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d0a7af9e-ac13-3de6-bd1d-642f23813d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.198.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:61:81:fa:00:57:ad:68:54:fa:af:a0:89:14:eb:74:b8:
         7a:0d:dd:31:1d:63:4f:27:3e:77:43:96:28:b9:82:6b:66:e3:
         78:a7:46:a8:02:6c:7a:d9:75:bd:1c:7e:a8:56:48:a8:1e:d7:
         18:a2:d7:ee:11:31:8b:3a:5e:1c:e7:96:46:64:1a:b0:72:05:
         a4:c6:29:4e:3b:df:be:df:e4:6e:5d:ef:37:09:ee:24:bf:2d:
         04:f7:2e:ca:5f:96:e0:d7:43:56:e4:60:db:35:76:aa:52:24:
         f5:51:e4:43:58:e6:aa:8a:fa:bd:65:f5:6d:dc:e3:40:d0:4f:
         bc:7a:ea:a7:94:cc:90:a7:15:24:d7:b7:47:9e:35:c6:e3:f8:
         83:c7:3e:32:44:e3:8e:c2:fe:8e:45:c6:c2:3e:8a:d1:90:ff:
         cd:64:0e:f4:d1:a4:d5:2b:29:51:f0:48:2f:f9:53:5c:86:1c:
         cc:e3:7b:f3:6a:b7:c6:58:a3:20:49:b1:e0:d6:dd:14:cc:62:
         22:5a:09:f8:1c:1f:65:c3:9b:71:3d:e3:2f:a9:ce:de:d3:2f:
         43:89:79:15:ba:57:4b:7b:91:9f:2c:78:02:57:a8:0f:29:f3:
         85:c0:d0:f6:f8:a8:27:1e:d8:a1:d5:be:6b:c2:07:cf:7f:5d:
         ac:e6:5c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:39 2024 by rpki-client on console-ams.rpki-client.org