Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dae05319-91f6-3ea5-9635-000f7434e0df.roa
File:                     dae05319-91f6-3ea5-9635-000f7434e0df.roa (raw, json)
Hash identifier:          ep3yCfWWVE1dQt1AoZ76zliuHZhPz9ckG05jzNyZLpY=
Subject key identifier:   87:81:32:6A:B2:CA:FB:92:5E:25:E1:69:74:01:8E:FA:B8:B0:7F:A7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628D9E6A75EF1AA91E5B99C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dae05319-91f6-3ea5-9635-000f7434e0df.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        65.25.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:9e:6a:75:ef:1a:a9:1e:5b:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=b828cfb9-e810-4c4f-a2d7-fd0adee10ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:95:21:5b:41:c5:f8:c3:b5:ca:9e:50:23:
                    9f:f6:d2:5e:45:c7:dd:26:8c:1a:22:b1:77:f2:29:
                    45:68:53:8f:5b:e4:03:f0:e4:05:1e:a3:37:e3:a9:
                    1d:62:02:35:ef:b8:c1:43:03:91:eb:31:81:fb:42:
                    d2:13:80:16:d7:63:c7:eb:60:e5:9e:1b:b0:49:e7:
                    29:19:b6:f0:58:3f:e2:ad:a5:b4:2c:78:4c:28:6a:
                    bf:43:57:a5:b9:27:b0:43:68:5f:9f:b6:d7:51:aa:
                    36:c7:ba:ff:16:0b:c6:87:c5:36:2c:ea:1b:54:06:
                    82:8d:f5:6b:d5:3b:9d:86:1c:cf:b7:20:10:11:64:
                    9e:90:53:83:74:c5:4f:5c:fe:b8:80:57:6b:e2:0a:
                    31:06:31:d9:88:27:cb:a2:d8:23:6a:be:eb:95:6e:
                    74:fe:43:c2:db:94:f3:40:d5:35:45:b1:53:6c:78:
                    10:b2:87:71:b0:f0:cb:5a:d3:5e:25:4a:5c:22:b9:
                    0f:06:8a:30:22:93:3e:17:02:94:dc:3e:d9:c3:50:
                    0d:37:cd:f8:f8:d9:35:32:45:52:48:93:86:83:c7:
                    93:f1:cc:7e:24:a5:84:f1:7f:f5:35:37:2a:94:54:
                    63:8a:2d:dc:fe:09:b0:4f:83:ad:55:d7:9f:24:de:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:32:6A:B2:CA:FB:92:5E:25:E1:69:74:01:8E:FA:B8:B0:7F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dae05319-91f6-3ea5-9635-000f7434e0df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.25.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:66:e0:a4:95:dd:00:bc:9e:e4:e4:55:40:d2:ad:b1:1f:cf:
         33:69:c8:58:72:f9:c5:9b:af:fe:77:16:88:2a:a5:81:86:12:
         21:8c:e3:e6:cb:e2:5c:2d:33:8f:aa:72:17:f0:9c:a4:06:83:
         26:b6:11:b3:6f:58:a8:33:d1:1c:4d:e8:23:03:61:8d:4e:5d:
         45:81:a1:9c:b5:e2:c1:58:1e:e2:da:f3:a4:f0:9c:c8:39:dd:
         04:27:33:07:7e:89:af:41:4a:a6:b4:0f:66:49:f8:6f:0a:06:
         ba:11:d2:c9:53:79:6f:21:6a:69:56:95:d1:73:36:93:9d:1f:
         46:5b:e9:b5:6c:ca:97:27:b8:1a:9a:50:66:8b:86:d4:5a:c6:
         f9:26:6a:02:83:77:4c:de:04:4a:0f:11:85:c6:b3:16:c2:c1:
         b3:13:17:22:bb:e7:16:f5:59:36:9c:1d:4b:62:1d:94:ba:d1:
         00:b2:fd:97:b2:35:65:ae:cc:6e:f1:c0:02:2f:cd:69:84:dd:
         71:e2:16:96:91:1b:ca:ee:6d:08:59:c7:ad:2b:68:ec:7c:bd:
         f5:2f:e4:a3:ec:da:a9:f1:02:1f:fc:17:8e:7c:a0:ac:44:84:
         38:ab:43:3f:4b:bc:de:c8:5c:25:8d:49:c1:50:e9:d5:24:8f:
         a0:cf:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:58 2024 by rpki-client on console-fra.rpki-client.org