Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d341d9ba-6472-3d06-b52d-a58443f5e084.roa
File:                     d341d9ba-6472-3d06-b52d-a58443f5e084.roa (raw, json)
Hash identifier:          nMxKqJzb1KOb+j+hJ+7cxKrdaWiNgWWN0k2l6uGZwCY=
Subject key identifier:   49:B1:ED:1E:7F:74:0D:80:5A:E5:04:1D:54:5C:48:10:14:04:F7:DE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DB0CD8A3FBA5AF4A50000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d341d9ba-6472-3d06-b52d-a58443f5e084.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10838
IP address blocks:        76.178.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:b0:cd:8a:3f:ba:5a:f4:a5:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=6184445a-8ef7-4e81-b76f-a393b781495f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:69:89:d3:51:ab:02:d2:e7:f3:99:32:47:71:
                    a8:c1:bd:58:b7:cc:b2:a8:14:33:00:4f:0a:4d:8e:
                    fd:9d:17:be:96:c8:69:95:02:79:80:35:91:b7:d8:
                    71:be:53:07:ba:9e:aa:23:44:4b:6d:4e:8b:73:e0:
                    8e:5d:8a:11:6d:01:cd:22:6f:4a:cc:88:00:8f:7b:
                    16:c9:cb:ce:5f:92:13:99:91:4b:97:d7:ff:20:a6:
                    e8:4e:7a:e5:1a:19:4c:85:9b:e9:90:be:f1:cd:06:
                    13:0d:71:af:1b:7d:33:7a:5b:38:b2:06:0e:56:ea:
                    6a:ee:c9:5d:04:56:a9:7c:70:c1:21:f4:27:0c:10:
                    71:f2:90:11:86:05:02:d1:ff:69:ab:f8:0d:4d:47:
                    52:25:33:a9:ce:33:fb:ab:74:fa:65:73:ff:90:0c:
                    61:a3:8a:d4:d4:ae:77:89:4b:f0:bf:f3:46:8f:d1:
                    cf:dd:1f:6f:29:1d:dd:b9:15:f8:ed:52:65:4e:8c:
                    bd:8d:6d:bf:1c:a7:48:e1:2e:2e:61:d0:fb:e7:75:
                    13:b5:5b:9f:d1:85:1b:86:d1:ef:5f:97:c4:07:c9:
                    69:d8:3a:37:c1:9e:fe:3e:e6:c2:4e:9e:7c:0b:ca:
                    1a:16:ef:a9:79:ac:06:9b:35:49:a1:d2:a5:bc:97:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:ED:1E:7F:74:0D:80:5A:E5:04:1D:54:5C:48:10:14:04:F7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d341d9ba-6472-3d06-b52d-a58443f5e084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.178.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:d8:95:df:39:43:31:f4:0c:23:be:63:67:d1:a1:1a:6f:
         8f:f7:b1:a0:ca:ad:52:67:58:80:33:61:7c:8c:cd:12:62:bb:
         86:b9:f2:a4:19:47:56:bd:6d:45:12:9e:e9:cd:3d:84:4e:52:
         6a:45:c7:f0:af:f8:60:f3:a6:be:21:f5:66:e7:ca:c1:bf:e9:
         8f:65:ec:4b:92:f9:bb:a4:75:d0:08:09:f2:f5:78:3a:2e:01:
         1d:49:4e:a6:c5:bd:ee:c2:59:24:a1:ea:f8:59:fd:47:d9:59:
         49:a4:cf:61:b9:36:50:17:94:de:e2:18:eb:62:ff:e7:57:ce:
         7d:1b:f0:7c:92:c2:fc:fd:37:ce:60:3d:63:fb:9f:5d:98:4e:
         5c:2e:93:01:e7:b5:28:c8:c9:7b:41:06:59:3b:03:5b:62:33:
         f2:25:22:92:7d:27:ff:19:c5:7f:aa:1e:c0:eb:41:e5:d8:77:
         49:c5:b3:fb:31:5f:ca:ca:42:f7:0d:5b:bd:69:17:f4:16:93:
         6c:72:05:24:cf:3e:0e:d1:64:46:d5:f4:1a:d3:0c:70:f3:bd:
         58:32:01:57:fd:7c:85:b3:1b:17:04:86:6f:ea:78:87:c2:4d:
         59:ec:9d:01:3e:51:46:a3:31:6c:21:7a:74:52:ad:4e:d7:5f:
         5d:cb:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:57 2024 by rpki-client on console-fra.rpki-client.org