Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e9ce14c9-72ee-31e7-9907-e655ab6b037a.roa
File:                     e9ce14c9-72ee-31e7-9907-e655ab6b037a.roa (raw, json)
Hash identifier:          XqBHuJOc1WJ6MUa7KqHfScaQJ6bCMXWhQzJAT2I18vM=
Subject key identifier:   20:F9:C7:43:77:7E:9B:AE:C4:FD:1A:FB:A8:79:53:8D:45:69:30:0F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583932196B16E9DC8CD7ACE68A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e9ce14c9-72ee-31e7-9907-e655ab6b037a.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        67.52.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:19:6b:16:e9:dc:8c:d7:ac:e6:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=ab754041-3b24-453e-ad72-0f76ab6055d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:70:6c:85:d0:6d:7f:f7:b5:8b:e9:96:9f:
                    cc:9f:d7:23:33:a7:dd:8e:63:de:00:32:8a:19:40:
                    e4:7e:66:74:f5:2e:a4:9e:4b:c5:e6:3c:1f:79:75:
                    8e:f6:ec:8d:64:59:d9:5b:f2:66:87:25:67:07:22:
                    cb:40:c1:e2:95:08:44:80:58:71:b4:89:ff:1d:f3:
                    80:4a:ba:5c:b0:45:0e:0f:f9:c1:7a:f5:72:67:b1:
                    88:53:09:f1:2f:54:8c:75:be:f8:36:f1:14:8a:96:
                    22:ec:ec:bd:ae:93:db:93:e0:08:63:56:a5:97:c5:
                    cc:cc:5f:48:65:04:4d:f2:ab:5d:af:24:9b:45:3a:
                    f9:a9:29:4b:1f:99:cc:0b:2d:70:40:c4:76:ec:b9:
                    45:b2:9f:13:d8:d0:9a:17:06:43:08:40:68:9f:9c:
                    93:37:2b:85:d7:78:48:4b:be:97:4c:fd:ad:ff:23:
                    4e:da:f0:0c:5f:44:44:47:54:41:81:b7:22:95:f2:
                    14:de:8d:5c:f5:6f:30:74:41:2d:f1:7e:bb:48:25:
                    40:15:28:87:12:bd:b0:3a:95:48:c6:8b:df:f4:2a:
                    b4:e9:57:52:b7:0f:d9:c2:a8:aa:3f:22:74:32:64:
                    36:74:10:8b:23:9f:ce:67:df:2a:d0:22:d0:03:d3:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:C7:43:77:7E:9B:AE:C4:FD:1A:FB:A8:79:53:8D:45:69:30:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e9ce14c9-72ee-31e7-9907-e655ab6b037a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7e:2c:7f:45:78:33:ed:95:2b:2d:8f:12:0e:70:ae:d0:e4:
         06:36:b0:ee:a9:07:2c:8c:b3:b0:cc:ef:a2:ae:dc:d3:78:6f:
         b0:ca:e8:6e:73:1f:e2:e0:38:6e:4a:c2:61:53:3e:8c:70:ed:
         2b:55:4c:9a:6c:ca:bc:fe:8e:4f:07:14:d0:e2:b7:50:7e:56:
         81:f7:63:db:f1:12:2f:d8:30:ee:f0:b4:df:6c:ae:78:ad:e2:
         1a:82:80:f6:df:f9:90:87:0b:62:74:5e:25:91:fc:11:df:46:
         48:6e:56:45:2d:d4:21:e7:86:c7:e8:f6:fd:a7:49:99:4c:36:
         85:3d:22:e2:59:0e:54:58:4b:ad:d3:90:33:c1:3a:52:9d:7e:
         c8:8e:b1:d7:bd:3a:c6:88:af:ca:d1:54:56:a3:88:1b:1b:40:
         c4:93:4e:5f:10:83:96:ea:ef:51:dd:86:77:27:d4:f7:65:8a:
         00:04:40:92:0f:8e:18:93:2e:23:1f:e0:07:e8:27:2b:a0:ab:
         80:59:a3:c1:13:d3:0a:41:de:36:43:3e:a0:6b:06:d0:76:c0:
         d8:a0:27:db:be:c8:6f:b5:fe:04:4d:08:9c:bb:91:91:9f:d5:
         9c:88:74:11:8e:a6:f0:8a:1b:c6:df:f1:cf:46:b6:60:44:4e:
         b4:7f:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:43 2024 by rpki-client on console-ams.rpki-client.org