Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0e41394-9363-3fbf-be45-fe339cf7d93b.roa
File:                     e0e41394-9363-3fbf-be45-fe339cf7d93b.roa (raw, json)
Hash identifier:          AZjaqmG+uiXDZHRQMKoJl1LQWcOpey6BzxwJuURsbIU=
Subject key identifier:   C1:2B:32:39:AE:73:74:09:53:A1:7E:79:FB:A3:16:D6:9D:2C:A8:F9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A134F00D0D4514B9922060
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0e41394-9363-3fbf-be45-fe339cf7d93b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        74.62.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:34:f0:0d:0d:45:14:b9:92:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=00ed5ac7-7a3f-4ccb-86c3-d7d459410c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:2a:57:b3:0c:b0:62:be:51:0e:e6:8f:a3:
                    58:25:97:7d:80:9b:96:0d:26:c7:23:7c:90:2e:7c:
                    fb:ec:6d:0d:24:a6:f2:8d:0c:59:e6:22:d1:54:5f:
                    fb:52:d3:96:d6:e9:b5:37:5e:45:eb:f7:42:43:27:
                    3a:88:e8:a5:5f:f9:b6:7c:2e:cb:31:c5:e6:ba:9b:
                    7c:91:5c:86:b8:1e:2f:ec:0f:ae:28:79:8f:cf:0a:
                    7a:9e:f2:c7:94:99:c1:13:a0:4d:a1:6c:29:3c:b5:
                    56:02:2c:88:ca:ad:8e:c5:1e:bb:c4:e3:d7:0d:51:
                    23:08:cf:b1:45:c0:78:0b:0c:5e:1f:bd:e6:a1:af:
                    d1:ef:11:07:6a:bb:96:4f:0d:cb:b8:1e:98:59:a2:
                    12:38:7f:7d:6b:d3:27:63:0d:22:32:d7:97:ac:fe:
                    d9:11:33:89:ce:5c:e2:87:7f:5a:03:82:ac:d5:3e:
                    28:8c:33:1c:1a:a0:c3:ba:f2:ab:76:b0:35:80:60:
                    24:76:20:7b:7c:11:5c:64:67:37:da:68:31:ea:8d:
                    b2:64:57:d2:4a:fc:40:f3:6b:4b:e7:b1:7f:0f:20:
                    74:46:c1:8b:d7:88:cc:ac:9f:96:43:9e:e9:e8:20:
                    1c:e9:48:c8:ce:2a:5d:7c:c8:81:46:67:c7:7f:61:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2B:32:39:AE:73:74:09:53:A1:7E:79:FB:A3:16:D6:9D:2C:A8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0e41394-9363-3fbf-be45-fe339cf7d93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.62.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8d:24:91:29:32:c1:b4:58:00:47:ad:f2:dc:4e:a4:69:a4:
         9d:36:ed:ee:1b:aa:90:ba:a8:9d:9a:ad:18:bd:12:97:6f:55:
         bd:63:f1:c1:f1:62:fb:0f:f5:c0:be:51:3d:5d:86:68:8a:e2:
         ae:ea:84:fc:3a:ae:47:7e:9c:93:e2:e2:cf:60:5f:04:0c:40:
         e4:d6:dc:59:05:71:b4:51:94:6a:07:2c:13:d0:63:d3:ad:59:
         a4:a3:19:bc:b2:29:62:ae:b0:10:27:e8:c3:7f:28:9a:cd:25:
         20:67:d4:97:14:da:c0:45:2b:03:c9:7a:27:52:a3:25:99:ce:
         09:33:22:93:56:2c:39:c5:cb:3c:a2:ea:b2:66:f3:92:09:8a:
         e9:89:2f:6f:0f:1b:29:97:fd:cb:9e:d8:26:c3:9a:ac:dd:ec:
         c3:45:3f:0a:2e:ce:64:39:03:ad:f1:fa:3c:70:57:81:fd:1f:
         82:c0:7d:fc:aa:75:96:a4:66:77:20:74:14:c0:c1:ea:25:c4:
         0c:64:46:1f:ed:90:1e:58:23:be:83:84:2b:af:b9:5a:29:b9:
         df:19:5b:d1:98:64:40:c2:dd:1f:24:5b:27:f4:41:11:10:23:
         51:98:9f:b6:51:05:0b:39:7f:e0:3a:63:e6:19:30:9c:ba:f7:
         e2:55:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:39 2024 by rpki-client on console-fra.rpki-client.org