Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efb45974-4643-364a-b4f7-2923ddd2a3ed.roa
File:                     efb45974-4643-364a-b4f7-2923ddd2a3ed.roa (raw, json)
Hash identifier:          BqtgW/XR4t/wA5QUp8vknJREpW178FI0Llu39uEuXu0=
Subject key identifier:   9B:ED:1F:DB:81:28:6A:E3:94:4F:35:06:92:27:AB:75:C3:3B:A6:89
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DDA54AC3463BF440B0D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efb45974-4643-364a-b4f7-2923ddd2a3ed.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        65.34.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:da:54:ac:34:63:bf:44:0b:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=81c2d35a-51b2-4587-b665-7f0d48a19b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:0c:21:5d:03:c6:a7:28:3e:43:9b:79:1b:
                    ac:85:1a:46:2c:15:da:d0:84:ca:00:d5:02:07:46:
                    2b:c9:15:4a:18:f6:14:8f:e3:9e:47:35:4d:85:45:
                    52:c0:d2:35:36:56:07:f3:58:1d:bf:8d:09:50:e6:
                    e9:25:46:c4:d2:9f:d7:51:e9:1b:ad:ad:04:ff:76:
                    6d:5a:18:5e:1c:ea:fa:d7:15:ea:49:cc:99:2a:d6:
                    ba:68:63:7c:ec:1a:c3:e7:2b:f3:48:b3:5d:35:63:
                    80:e7:c7:d9:fa:2a:9b:61:e1:9a:b3:cd:73:4b:40:
                    9b:6d:fb:c8:1f:2b:9e:d4:ff:64:37:cc:a1:eb:7a:
                    2d:10:3c:f1:31:47:b1:47:15:e9:87:46:89:2a:d8:
                    30:58:d8:fe:53:e7:ef:0a:58:65:3b:76:20:93:1a:
                    e5:9b:29:a5:6e:27:ca:55:75:8a:8f:8d:93:50:8b:
                    bd:fc:6b:77:6a:0a:26:f7:96:ca:fd:83:68:40:52:
                    f8:eb:39:20:3a:95:4a:f8:8b:f2:87:7a:4d:40:f6:
                    d4:66:7c:e5:db:f0:80:48:7b:b8:e1:19:f2:9f:1b:
                    12:bf:af:68:b4:7a:c6:ba:cd:8e:14:07:13:df:8e:
                    a1:59:65:77:8e:42:a6:93:6b:24:c5:33:8c:7d:0d:
                    35:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:ED:1F:DB:81:28:6A:E3:94:4F:35:06:92:27:AB:75:C3:3B:A6:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efb45974-4643-364a-b4f7-2923ddd2a3ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.34.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:cd:53:32:ad:e4:2a:bd:3a:6d:7e:f4:c4:3a:0a:d1:52:31:
         cf:0b:f9:21:0f:23:47:69:f5:cf:c0:3e:42:2d:b5:ec:55:de:
         c3:a9:5f:6a:8c:53:9a:6e:34:75:f3:a8:62:21:30:da:82:c0:
         1d:41:50:e6:fb:86:2c:47:b8:50:56:35:1c:20:f2:0c:6c:9b:
         ff:ac:ba:dd:27:7b:e9:3f:93:ad:3e:de:f3:d4:76:fa:8e:cb:
         b5:75:e2:f1:cc:60:6b:ed:40:08:40:24:aa:7d:d7:c1:cb:27:
         65:d4:ef:47:50:d5:f0:f1:27:31:e2:43:b6:a3:48:a6:44:ca:
         f7:1f:f9:cd:3a:f4:07:75:0f:cb:bf:16:59:8d:ae:0b:7e:c4:
         d1:0e:28:10:f4:aa:5e:8e:9e:09:5d:6c:38:3d:51:37:dd:aa:
         bf:b0:d2:5e:79:ee:06:26:53:d1:48:6b:ac:bd:ee:94:87:14:
         a4:e9:eb:dd:18:a6:25:9d:83:8b:bc:f9:d1:07:30:84:de:02:
         5a:c8:9a:fa:a5:17:df:7e:e2:8d:da:c7:9f:7c:5d:22:f3:c2:
         ce:5b:6d:0f:37:d5:16:bc:1d:ee:5a:f1:e6:6c:b9:b8:3f:d8:
         0c:27:c2:85:84:00:1b:6b:ad:8a:cb:88:00:6c:29:5d:af:57:
         fa:0e:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:32 2024 by rpki-client on console-fra.rpki-client.org