Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e12d7502-6047-37c5-b787-799e00b77e0a.roa
File:                     e12d7502-6047-37c5-b787-799e00b77e0a.roa (raw, json)
Hash identifier:          fgWm2nA/q48CZYKqUBG2q28f7LvpoyOI5v+OElFCumo=
Subject key identifier:   1E:EE:B0:03:DB:C0:E8:C1:A3:5D:A0:F4:A6:F2:45:CF:E9:08:9F:13
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A091CA676FBD8C33BED3D8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e12d7502-6047-37c5-b787-799e00b77e0a.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        67.52.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:91:ca:67:6f:bd:8c:33:be:d3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e7788194-8470-4c08-bb97-288077659c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:72:a9:d8:b1:f3:06:ce:1c:a8:87:a5:a5:
                    ba:35:1f:3f:68:e2:c7:15:c1:e2:df:94:6c:f1:95:
                    38:b2:44:e7:5d:55:1c:7f:90:48:52:eb:97:f6:d4:
                    1c:35:57:02:97:df:d4:7b:da:d4:d1:52:1e:4c:ec:
                    2a:96:ae:22:4e:0d:ed:fc:b4:2f:05:c4:eb:22:7f:
                    a9:cb:4b:b1:ca:cb:bc:54:83:dc:d9:cd:0c:4d:bb:
                    83:fe:30:3a:de:87:4f:20:39:ec:8a:60:a3:69:34:
                    3f:b7:ed:77:6c:7a:c8:ac:d3:67:55:d3:d9:70:b0:
                    ee:d4:20:08:af:d7:71:99:38:59:f7:ce:be:92:a9:
                    b3:c2:bf:b9:a1:07:cc:57:a7:cf:66:8e:58:ae:a5:
                    7c:0f:bc:8c:92:da:5b:33:3f:c9:7d:9f:0d:4a:78:
                    c9:80:41:ad:22:4e:fc:4b:9d:2b:8a:5d:f9:69:c8:
                    47:1b:a9:15:ed:2c:2c:50:cc:82:8c:6f:64:3f:75:
                    a2:8f:da:02:49:70:e9:18:ba:2d:ca:0a:a6:6c:26:
                    08:a0:77:7b:57:c9:c2:15:6b:7f:dd:aa:a8:86:f3:
                    74:c5:e4:e3:c6:04:83:a1:49:12:09:72:c5:3b:91:
                    d6:a4:83:10:0b:26:6b:66:33:d4:a4:df:8f:22:a6:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EE:B0:03:DB:C0:E8:C1:A3:5D:A0:F4:A6:F2:45:CF:E9:08:9F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e12d7502-6047-37c5-b787-799e00b77e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:da:a2:12:98:6f:4f:8c:66:ab:5a:a8:a9:b8:ca:1f:b7:4e:
         4d:d7:ec:5d:1c:71:39:1b:8b:3f:f8:86:24:be:65:f9:45:7b:
         b3:22:d2:1e:59:09:15:de:d3:93:38:f4:2c:0f:da:5b:5c:48:
         88:51:ab:0d:52:40:d0:ed:e2:b8:b4:b7:96:9e:2d:74:43:ac:
         3b:92:ce:5f:8b:75:ff:4c:8c:e4:82:ec:09:6c:b0:00:de:83:
         7b:6b:dd:5c:18:93:63:27:70:34:36:fe:b8:f5:ef:eb:88:57:
         d1:fc:65:26:81:a4:24:93:79:a1:88:33:1f:f7:b0:6d:9c:19:
         7a:9e:e1:c1:fd:56:24:31:14:ea:97:b4:70:7e:ae:e9:e9:a3:
         59:47:fa:14:9f:57:18:f8:ab:51:bb:40:28:00:24:a2:f5:57:
         56:a9:52:45:99:a9:37:f3:e4:04:96:fe:f7:9d:72:d5:09:48:
         61:78:c8:29:82:f0:e0:9f:b9:72:a0:ce:ae:6a:be:6c:93:46:
         ac:0d:ff:06:3e:9e:20:ac:42:a7:6e:5b:12:20:f3:29:50:28:
         2f:90:2d:7f:e4:d6:33:f1:97:91:d4:db:49:c1:1e:56:c7:7c:
         53:c3:64:07:6e:c4:0c:9a:b3:84:fb:35:d8:14:c6:02:b5:f6:
         eb:17:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:39 2024 by rpki-client on console-fra.rpki-client.org