Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df5be5d8-dcd3-3dbc-98f5-0d43eab408a7.roa
File:                     df5be5d8-dcd3-3dbc-98f5-0d43eab408a7.roa (raw, json)
Hash identifier:          e/gs0GuJp/FlsbhxZvxUTktmdUtKDMuhdO6cuWrzqNU=
Subject key identifier:   BE:B4:29:9B:6D:EA:0C:84:9D:3D:CF:4A:C0:89:82:67:24:21:F1:71
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1379B15B743A675F4F238
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df5be5d8-dcd3-3dbc-98f5-0d43eab408a7.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     12271
IP address blocks:        69.206.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:37:9b:15:b7:43:a6:75:f4:f2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b943d3f6-2d8d-4d7a-8554-b06fe9386116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:b0:ff:da:07:7f:5b:e9:bd:93:49:fb:dc:
                    22:68:ae:7b:d5:31:99:ee:f7:e9:10:e6:73:53:7f:
                    0a:e1:6b:13:c5:66:d9:b8:e0:2d:bb:aa:b5:4c:36:
                    48:a5:2d:c5:b7:e0:bd:1a:fd:9e:a0:ed:d7:4d:9c:
                    17:84:87:3d:b4:ad:b4:bc:f1:2a:c3:9f:89:bf:b9:
                    01:2d:67:d5:e5:0c:62:4a:53:31:4f:f8:c5:f8:73:
                    ff:59:97:db:44:ee:cd:79:80:77:3d:e6:09:75:a8:
                    5c:41:29:fa:1b:80:83:85:5d:db:7c:43:3c:ef:d4:
                    cd:72:b4:ae:14:29:85:d8:ea:94:c2:64:fd:e8:37:
                    0c:10:05:c9:e8:55:7e:97:8c:26:5f:d7:db:1f:b4:
                    94:7b:25:1d:21:ed:b8:57:17:64:49:3f:bc:b7:0b:
                    70:74:cc:6b:19:00:48:e1:83:d1:0e:25:ae:6b:67:
                    d8:0b:fd:1b:84:db:bb:ea:04:da:5a:85:c1:8a:0d:
                    2d:49:f4:f0:00:bc:b4:94:03:cf:4a:ab:f8:6b:7f:
                    c9:6b:fc:ff:91:2b:dc:29:ca:1a:a8:f4:ec:00:e7:
                    88:d4:ae:12:b7:64:1f:b9:3a:3f:28:99:b7:16:a3:
                    4a:9a:76:ab:4f:e8:97:c9:74:9c:bd:a0:71:55:d4:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B4:29:9B:6D:EA:0C:84:9D:3D:CF:4A:C0:89:82:67:24:21:F1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df5be5d8-dcd3-3dbc-98f5-0d43eab408a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.206.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2d:dc:32:50:05:e9:0d:a2:c1:d0:44:14:80:0f:77:86:ae:
         da:c2:c1:45:d0:b5:fd:38:74:d5:54:9d:dc:f0:f1:a5:61:09:
         1b:d7:fc:97:b0:5e:76:97:ed:3f:bb:db:f2:f3:50:89:70:65:
         32:84:cb:8b:a3:e1:ed:12:b7:9b:e9:c1:ba:bb:7b:20:da:02:
         eb:47:b7:1d:55:f7:52:aa:a0:d2:fa:07:97:d8:a8:75:2f:73:
         21:0c:09:0d:da:8b:9a:38:ea:f8:97:ff:6f:d4:81:65:8b:59:
         28:35:27:b6:db:c3:2d:43:74:0d:c4:ac:ea:cc:9f:da:08:0f:
         70:0d:15:40:8b:71:b5:5f:26:d0:fe:4d:ae:a8:e5:30:e0:8a:
         74:b0:86:7c:5f:4d:72:b4:6b:f4:c0:4e:59:b2:4d:2e:11:1a:
         64:3e:c2:15:24:47:2e:ad:ad:3a:3a:9d:d0:07:97:51:ae:fa:
         9a:5c:73:27:6c:dc:79:c7:12:5a:3c:40:f7:57:0c:16:fd:19:
         36:4f:8d:7f:c5:e2:e4:76:b2:43:44:af:cf:31:53:ec:d2:fb:
         e3:52:9e:f6:2f:09:b9:9e:21:b4:0e:ff:26:b2:df:90:b7:20:
         44:53:33:31:c4:42:76:df:ed:ba:62:b1:21:dd:6f:38:b6:eb:
         1c:d7:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:42 2024 by rpki-client on console-ams.rpki-client.org