Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e364eebe-5f5f-3db1-a85d-7b1552712159.roa
File:                     e364eebe-5f5f-3db1-a85d-7b1552712159.roa (raw, json)
Hash identifier:          WNedhiHuzrD0s+O5z/8idI0BEwJ8csD9yzcQNuzzN6k=
Subject key identifier:   68:F8:93:3E:67:DF:04:E8:1D:3A:5A:24:12:97:31:A2:90:F3:99:22
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A12E798FD56FBBE16F6B40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e364eebe-5f5f-3db1-a85d-7b1552712159.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11426
IP address blocks:        66.57.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:2e:79:8f:d5:6f:bb:e1:6f:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=6efb8a62-5820-44e3-be6b-02c664abb35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:b5:a9:97:39:37:91:b9:7a:30:a8:c8:27:
                    76:20:92:d4:73:61:05:f7:1b:a8:0d:d8:2b:0f:0f:
                    ac:19:20:e5:08:af:e5:39:f2:ed:71:b8:5c:47:de:
                    ed:27:77:b4:a9:0d:76:e1:49:f1:f1:b6:cf:64:61:
                    40:c3:1a:19:e3:de:2a:56:dc:07:cd:be:c8:ba:da:
                    b2:a4:e0:6e:c8:99:f2:09:6e:04:29:07:f3:35:9c:
                    9c:65:45:f8:51:cc:89:a7:55:c4:72:2c:ed:3f:d7:
                    4a:dd:61:80:ef:dd:ef:68:85:9b:18:72:a8:d0:53:
                    58:fd:00:b0:d7:a4:ec:4c:64:44:84:51:c4:96:80:
                    1e:8b:23:4f:88:9a:11:a3:ad:f4:36:0b:eb:28:a5:
                    d9:2d:45:1f:cf:cb:dc:ac:41:69:ef:c5:6e:4b:ee:
                    83:ec:01:0b:c9:79:f8:e6:fa:9c:cc:6b:6a:03:59:
                    2f:b0:86:9c:11:43:77:f3:d9:3c:e5:77:52:fb:81:
                    a7:ce:59:d9:97:b8:e4:b2:04:8b:f2:e1:ad:73:42:
                    e4:99:0c:14:1b:ff:09:d2:75:fd:6b:88:2f:61:57:
                    2d:f1:50:11:2d:13:80:ed:89:22:3b:14:6c:e6:ad:
                    6a:46:0f:03:ad:6a:4e:96:92:bf:20:1e:59:9c:4a:
                    e6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:93:3E:67:DF:04:E8:1D:3A:5A:24:12:97:31:A2:90:F3:99:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e364eebe-5f5f-3db1-a85d-7b1552712159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:60:82:e3:04:e2:5b:e0:a8:cb:60:24:36:a5:ba:f9:03:
         ef:43:e2:e3:31:eb:a3:9e:ec:b7:6d:09:f5:15:18:36:2d:5e:
         70:44:f8:f0:7b:de:1f:25:52:ff:c9:09:38:1d:6d:3d:33:c3:
         4e:94:5e:86:39:bc:78:fc:df:22:83:91:4c:67:19:70:39:2d:
         28:9c:99:fb:f8:f3:90:03:b5:a6:b4:d8:d9:e6:5d:85:ec:3c:
         04:a0:86:bd:98:8c:fa:6c:20:be:71:d7:38:9d:4c:c2:f2:c1:
         97:43:db:01:6c:95:d6:f6:a1:ed:80:73:e1:c8:0c:c6:38:e1:
         22:86:8a:64:2f:dd:95:d1:d4:e3:95:a6:08:2b:b5:22:6c:67:
         4c:cd:f4:8d:a2:41:7b:21:78:ff:70:9b:5c:f0:fa:98:5e:b8:
         23:89:ac:5b:0c:53:25:84:82:88:65:90:08:02:0b:b0:6a:b5:
         4b:04:cd:b5:20:26:e9:48:04:34:a8:84:d7:f4:43:b0:ec:74:
         47:0b:a2:cf:06:d2:79:e3:9c:75:17:7c:3e:7e:2c:55:cd:81:
         59:3d:bb:f0:65:54:85:82:e2:28:f3:2c:c1:d8:43:49:44:34:
         1c:c5:c7:be:3f:92:2b:00:81:76:cd:13:19:30:a1:e2:9a:82:
         0c:d1:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:42 2024 by rpki-client on console-ams.rpki-client.org