Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed70ca85-d87b-304c-ba12-37eb8a8b35c2.roa
File:                     ed70ca85-d87b-304c-ba12-37eb8a8b35c2.roa (raw, json)
Hash identifier:          Fpy4/vNL+GpUSSTwyJDP4I+QTlj6VqMGENvasyRGPWY=
Subject key identifier:   56:B5:B5:DB:1F:9F:CC:02:21:4A:B7:CC:93:BC:F3:3A:FB:83:14:E3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DACFD34E9AB0919088CC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed70ca85-d87b-304c-ba12-37eb8a8b35c2.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        74.218.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:ac:fd:34:e9:ab:09:19:08:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=fff8982e-9324-47a1-8554-fd05b0418764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:f4:94:81:e2:28:62:16:1c:b1:b2:f3:18:
                    aa:9f:5e:18:54:0d:80:ef:10:d6:ff:a4:74:b6:4c:
                    dd:78:e1:97:dc:76:a5:d7:9d:16:55:7b:35:d0:09:
                    0a:6b:98:98:c7:74:b5:2f:69:5e:c3:55:8d:77:85:
                    4a:c0:42:e9:78:0e:96:54:bb:ae:6f:59:f4:69:c2:
                    2d:48:9e:f3:c0:37:ff:8d:19:8b:cf:6a:4e:c5:ac:
                    ea:46:53:3d:7c:45:84:31:b1:04:9e:c4:9a:af:8a:
                    35:eb:ab:4f:28:4e:01:c0:4b:a0:20:1b:f2:a3:a8:
                    57:38:49:34:28:c1:af:cd:0a:1b:20:79:07:d9:41:
                    15:50:c9:04:be:b6:6c:0e:5d:ed:59:52:e2:4b:54:
                    c3:5f:3d:f5:8f:b1:51:2d:30:b4:47:1e:3b:f5:54:
                    40:22:ed:c5:19:3b:c3:e5:60:ca:8b:b2:de:bb:0c:
                    3d:34:a9:a1:8b:61:24:6e:d5:58:ce:14:8f:1f:ef:
                    82:08:e1:f4:f8:74:0e:07:1d:11:d3:56:14:f4:db:
                    7b:12:68:ce:76:1f:f9:27:31:3c:68:e9:43:f1:e0:
                    cf:2a:ad:2b:42:41:4a:8d:04:f3:1f:ad:7f:19:c2:
                    56:25:57:41:e4:07:6c:13:44:bc:2b:f6:f9:5e:a2:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B5:B5:DB:1F:9F:CC:02:21:4A:B7:CC:93:BC:F3:3A:FB:83:14:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed70ca85-d87b-304c-ba12-37eb8a8b35c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.218.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:c4:16:d0:a4:18:45:5f:05:71:58:8a:ea:d7:25:4c:d2:
         2d:52:1d:3a:2f:b8:b9:f3:c4:65:0a:df:17:d3:03:74:95:e8:
         7e:84:9e:89:d0:cd:80:8d:5f:34:23:39:77:3a:d3:67:b5:8c:
         c0:41:1f:3b:58:e1:c1:f3:c1:2f:7c:79:0b:a3:c4:66:2f:a2:
         f9:f1:f0:cf:38:01:d3:9b:a0:a6:09:6a:18:1c:8f:89:ff:60:
         1b:15:d4:12:35:7b:c1:a6:ad:d0:32:0c:e2:99:c8:a9:3b:ee:
         a1:e5:78:31:fe:35:92:85:ca:72:a3:d2:a0:fb:82:b7:8c:cb:
         0d:86:7f:51:17:9e:7b:42:1d:cf:85:97:60:f9:8a:ce:85:c2:
         f8:a5:47:c7:29:33:25:d1:e4:20:30:22:6e:31:3c:5b:71:f0:
         18:fd:1e:dc:70:5f:b7:02:9b:e3:ee:dc:e4:0d:7e:04:59:08:
         c7:b0:6a:cc:96:f3:a1:c5:66:c8:c2:38:05:91:d9:4d:5e:0b:
         29:22:7c:48:e1:2e:1a:7a:3e:5b:78:e7:28:ce:4f:95:53:5a:
         c9:13:10:b9:d1:d8:37:e1:4a:34:a6:3f:f1:b5:8d:5c:41:20:
         93:ee:13:a9:14:89:11:82:e1:d5:3f:bb:a7:9c:1c:d2:9a:b3:
         30:04:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:21 2024 by rpki-client on console-fra.rpki-client.org