Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efc9ef6c-6c72-3181-bc69-b0218d5c1575.roa
File:                     efc9ef6c-6c72-3181-bc69-b0218d5c1575.roa (raw, json)
Hash identifier:          xhZMDDkokqJ7jxsapP4bOu2cm5eWSIuR1uBwuD3vO2Q=
Subject key identifier:   1E:7D:43:4A:D0:48:1B:8C:1A:F3:F9:F9:2E:97:7A:39:E5:82:BC:48
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E4C85FD73AB732D5D0528
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efc9ef6c-6c72-3181-bc69-b0218d5c1575.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        65.186.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:4c:85:fd:73:ab:73:2d:5d:05:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=8585bf2c-413d-4be4-a407-81f2c3ca9787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:b1:74:42:d5:14:80:92:dc:17:9b:ed:7a:
                    c5:e1:7e:81:76:b5:63:fa:6f:1c:b3:a7:7d:6c:ff:
                    86:eb:af:5e:ca:79:90:46:c6:dc:4e:15:d0:5f:c8:
                    e1:54:2d:90:73:b1:f5:b4:e0:25:a9:e2:da:12:8a:
                    87:3f:6e:61:e3:00:91:7b:e4:99:e7:46:fb:03:cb:
                    35:e2:4d:76:84:3e:d3:4e:bb:c7:ff:0b:7e:4d:3a:
                    6c:4e:ae:3c:39:dc:f7:50:62:c1:5b:a7:f1:63:13:
                    a0:83:00:fb:6d:f0:fe:be:5e:d6:30:2c:c0:72:da:
                    a1:12:c6:63:e8:c0:58:76:16:26:fa:e3:6d:cf:40:
                    2a:94:a5:ce:40:0b:fa:8c:a4:72:09:82:a9:33:48:
                    b4:7e:d5:86:9e:a5:cc:72:6f:9d:d4:df:2f:e9:d3:
                    99:64:d0:f8:3d:9d:d7:31:6c:94:50:dd:62:c4:b8:
                    81:47:73:99:c9:1b:90:b5:3b:e9:d1:89:bf:8b:8c:
                    ec:82:27:dc:30:b8:16:dd:f0:ef:a2:20:f7:77:4d:
                    cb:d5:37:dd:b4:28:ca:d6:c6:df:5b:23:6e:ec:65:
                    e1:78:f1:54:c3:fc:37:ef:f5:03:07:33:92:d9:b0:
                    be:48:e5:2a:6b:99:9b:7d:da:cc:81:3f:e7:e5:41:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:43:4A:D0:48:1B:8C:1A:F3:F9:F9:2E:97:7A:39:E5:82:BC:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efc9ef6c-6c72-3181-bc69-b0218d5c1575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.186.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:6f:e2:51:3e:67:82:69:f2:ec:fd:9e:73:3b:91:b9:52:
         47:f5:84:47:ea:3a:58:dd:a7:33:91:7c:bb:13:aa:c9:27:29:
         82:02:41:84:bd:d2:36:c7:72:7f:e4:01:3e:c6:04:d5:76:02:
         c5:1e:b9:2b:da:77:1a:01:69:4e:2d:db:81:0f:c9:fc:ca:f4:
         b4:f3:07:93:b3:67:ea:a1:3d:81:b6:22:8e:de:a7:41:57:c0:
         4e:db:ab:6a:46:9d:5b:5d:df:8d:8f:68:87:34:7c:ec:e7:6d:
         42:23:b6:b9:67:af:26:4a:df:51:66:bf:0c:83:c7:93:89:bc:
         df:07:59:ce:9b:ba:bd:d7:4d:d6:29:06:cc:ab:97:7d:50:e3:
         a2:4b:25:1f:58:2c:fd:e7:da:5c:f7:18:f0:15:00:b2:bb:1a:
         34:cd:13:1a:c3:be:65:be:d7:43:11:5b:dd:52:75:ff:c9:87:
         31:7f:ac:b3:d7:23:9b:30:6c:af:5f:97:73:f4:22:f7:a1:90:
         31:d5:07:a0:17:0e:de:81:a8:7a:15:4d:47:c7:d6:a9:c2:0c:
         1e:5f:9c:b3:5e:8d:6b:1d:03:1c:f7:a2:f1:50:8a:67:2b:dc:
         68:4b:5a:e8:5e:1b:80:d7:48:3e:92:5c:e0:84:32:d1:6a:0b:
         91:71:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:45 2024 by rpki-client on console-ams.rpki-client.org