Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc9c87d0-266f-3909-8a38-99cee6661687.roa
File:                     dc9c87d0-266f-3909-8a38-99cee6661687.roa (raw, json)
Hash identifier:          CbmyDZ2ZopCkL1UAkxNTgpnyBu4xmlmnGmFd0KnfYfY=
Subject key identifier:   29:DA:63:46:4A:B6:4E:00:BF:C6:35:9F:4C:F6:A0:95:C9:73:CF:C3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A13A5328E547F7B20044C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc9c87d0-266f-3909-8a38-99cee6661687.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     16787
IP address blocks:        71.74.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:3a:53:28:e5:47:f7:b2:00:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c96fc6ec-dfa7-4672-b876-549ee395a296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:c1:14:ba:c7:ba:0d:f6:72:d7:a8:90:4d:
                    6e:15:71:cc:3b:58:b0:29:aa:bf:7f:17:91:19:c7:
                    c8:6f:05:27:e6:00:da:f2:36:1f:49:05:fb:d6:3a:
                    d2:17:1b:1e:13:e9:d6:c9:b7:70:e3:ba:f4:0e:9c:
                    a8:48:57:3e:5f:df:d4:22:3c:75:f7:14:07:3e:67:
                    ad:78:f8:20:6f:e0:50:ec:dd:f2:65:db:ef:a5:11:
                    a8:8e:f6:c4:2a:9f:3d:10:b3:ba:56:6d:a0:5a:ea:
                    98:25:13:d0:db:90:0c:f8:ee:2d:c0:72:a8:78:75:
                    76:0f:c9:bf:b0:74:d7:da:be:98:4b:50:9b:2a:a5:
                    86:1a:19:73:f6:38:c0:f9:79:20:bb:77:9d:0b:e6:
                    c3:34:c2:cf:c8:c9:85:6a:cb:73:0c:87:58:71:2c:
                    51:98:f3:bf:a5:c6:dd:87:67:1a:89:03:5e:30:69:
                    84:64:01:ee:47:6c:4a:00:92:9c:8d:e5:c2:1c:b6:
                    fb:a6:a6:56:66:54:07:19:73:7c:8a:13:76:c3:6f:
                    ef:42:9c:64:3d:b9:f5:23:ff:e5:cc:d7:4b:d4:15:
                    5e:7d:1e:1a:fb:02:22:2a:d2:32:86:99:c4:b3:51:
                    7a:f3:6b:24:76:3d:5e:c0:64:b5:d6:8f:38:e3:25:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DA:63:46:4A:B6:4E:00:BF:C6:35:9F:4C:F6:A0:95:C9:73:CF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc9c87d0-266f-3909-8a38-99cee6661687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.74.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:8b:fb:a3:f2:5d:6c:44:60:84:59:6a:02:ce:c6:80:71:
         7e:e2:99:d8:2e:16:a4:81:e6:62:1c:ce:25:e8:b8:b4:cc:0c:
         50:36:43:d8:de:db:4c:f7:5a:b6:8e:c3:ef:f3:dd:e0:c8:b9:
         bf:99:f3:f7:e4:4b:ac:81:98:9f:14:bc:fb:fb:e4:86:a6:54:
         9c:84:e1:4c:48:9e:a3:27:97:56:d6:66:fa:ce:84:9f:a7:56:
         aa:19:ad:fe:d0:18:c6:a2:f7:cb:32:55:d5:d1:10:02:c3:68:
         01:d1:41:0c:92:ce:b0:52:80:8f:ca:ef:d6:8b:23:2e:89:ea:
         eb:65:bf:bd:58:45:79:17:6b:24:58:e2:d5:91:b3:0b:3d:84:
         5a:5f:d0:30:18:4f:c1:b0:de:69:57:a7:9b:e1:88:92:9e:dc:
         46:77:d0:b5:3b:c7:a3:c1:cb:e4:21:bc:3c:a2:30:89:0d:a3:
         2f:81:c7:a3:bb:e1:23:42:5c:18:de:9e:3b:55:25:87:00:be:
         dd:39:d0:13:d5:ef:96:c4:81:bd:67:47:5f:c8:b5:a9:3c:ca:
         1e:4c:89:81:db:3f:bc:29:2e:b8:c5:86:82:f5:45:ff:ec:ec:
         23:d1:d5:87:38:ae:e5:e5:a0:04:21:fd:e1:f4:ee:7e:e2:a8:
         f9:9b:84:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:38 2024 by rpki-client on console-fra.rpki-client.org