Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4ba5f36-edf0-3f91-a2b8-a49fd011db8a.roa
File:                     d4ba5f36-edf0-3f91-a2b8-a49fd011db8a.roa (raw, json)
Hash identifier:          c1NAiL2v/0FhYNIbiVHFBj4JnlEkHShdRSWMoNhx5uE=
Subject key identifier:   2F:2B:48:8E:58:56:9E:F9:3F:36:43:C0:3C:AB:BD:CE:8B:AB:AE:DF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285847B2669F93AACD48327151ED60
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4ba5f36-edf0-3f91-a2b8-a49fd011db8a.roa
Signing time:             Tue 29 Oct 2024 01:00:32 +0000
ROA not before:           Tue 29 Oct 2024 01:00:32 +0000
ROA not after:            Mon 27 Jan 2025 02:00:32 +0000
asID:                     20115
IP address blocks:        173.40.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:66:9f:93:aa:cd:48:32:71:51:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 29 01:00:32 2024 GMT
            Not After : Jan 27 02:00:32 2025 GMT
        Subject: CN=3181f19e-2cc5-49ad-9b06-ff161d20231b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c8:bd:59:ba:f1:ad:c0:f2:a0:2a:82:72:a7:
                    17:aa:89:d1:29:8f:2d:88:6a:18:ea:04:19:06:ea:
                    05:66:8d:31:3d:15:5d:6c:4c:d7:b7:10:86:18:06:
                    60:01:64:9e:23:9f:db:6f:e7:01:a3:c7:ad:ab:c5:
                    76:79:5d:1e:90:0a:e8:b4:00:9a:02:2f:7f:98:c7:
                    f1:d5:82:49:1c:92:b2:90:d4:a5:12:88:32:a0:10:
                    5d:04:58:d7:cc:2f:dc:7a:f3:06:a4:3c:9b:43:71:
                    89:2f:0e:63:27:fd:22:08:15:54:0e:87:45:71:88:
                    31:73:26:15:87:c3:35:96:39:02:2b:91:9e:c3:42:
                    88:9a:a6:da:76:70:61:a0:26:df:3f:20:6b:5f:56:
                    70:cf:0d:a3:03:f9:f1:31:93:3e:e6:a1:7e:5f:6f:
                    02:3a:5c:4f:76:1d:b4:ef:34:00:57:d4:87:db:d3:
                    ce:37:49:10:42:7c:31:68:5d:5a:3b:27:e4:7b:87:
                    a2:1f:3a:54:ef:69:cc:c5:b1:73:a8:c2:60:c9:0f:
                    d2:2f:fa:88:80:ea:c2:a2:dc:cb:b9:10:0b:11:35:
                    66:36:28:da:25:57:7d:d8:a8:e0:90:0f:e2:6f:18:
                    b0:0b:50:67:ea:a9:7d:43:b4:68:67:84:7a:d0:f6:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2B:48:8E:58:56:9E:F9:3F:36:43:C0:3C:AB:BD:CE:8B:AB:AE:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4ba5f36-edf0-3f91-a2b8-a49fd011db8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.40.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b7:47:50:d7:f6:02:a0:8d:73:86:e6:0a:bb:a8:4e:6a:65:
         e9:27:42:57:e0:fe:8e:a1:df:ce:fb:44:75:7b:f3:5a:fa:b2:
         de:18:d0:f3:58:a9:c3:79:be:7a:ab:bf:57:da:77:e5:ba:25:
         a7:40:b5:d9:d7:ba:fc:ef:5e:ad:4e:ae:97:23:18:c9:ef:81:
         08:29:7e:43:6e:a7:51:37:bf:c3:4b:b1:00:d0:fa:4f:d7:b6:
         fa:d5:c2:c1:2a:c4:40:b2:4c:9f:22:3f:f4:78:83:2e:92:eb:
         14:0b:e0:84:8d:0b:39:e0:eb:88:cc:b1:78:2a:2d:1e:31:7b:
         3c:7e:4d:ef:4d:49:61:a7:b9:bc:bc:0e:ad:7b:32:83:7f:3d:
         8e:e5:a4:be:34:4d:82:0e:0e:f4:44:f1:1d:68:ba:d4:e0:1e:
         f3:2f:c0:c4:0c:b7:ec:64:0c:58:3c:fa:16:ab:ef:38:a9:08:
         60:6e:79:97:73:6b:d6:66:10:b4:89:3e:a8:4b:2b:f3:46:85:
         e0:57:c1:01:dc:bb:44:1a:c4:f5:46:14:d6:7b:77:f0:93:13:
         48:c5:34:fb:36:2e:3f:c5:c9:55:85:f1:04:0e:d9:88:fa:9d:
         6e:da:6e:a1:e6:f5:c5:50:93:36:8b:9a:51:9b:92:aa:e7:ea:
         99:6e:21:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:39 2024 by rpki-client on console-ams.rpki-client.org