Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efc9ef6c-6c72-3181-bc69-b0218d5c1575.roa
File:                     efc9ef6c-6c72-3181-bc69-b0218d5c1575.roa (raw, json)
Hash identifier:          qifQr9fEnJVJs8sKeDWwqmw8RRyt3y3vWBIL78PHt7M=
Subject key identifier:   92:B0:45:96:B3:13:F6:11:8F:A1:7E:87:77:4D:09:B7:D2:BE:14:D2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A122D631DFCD28287F4780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efc9ef6c-6c72-3181-bc69-b0218d5c1575.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        65.186.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:22:d6:31:df:cd:28:28:7f:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b04dd623-4535-4142-91e3-e4df29e65cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:bb:88:2e:b3:83:f0:b2:da:54:a1:e9:5f:
                    c5:27:2b:5f:e6:7d:07:37:ff:6c:57:28:5c:b8:34:
                    96:cd:b0:55:6e:4d:8c:40:db:dc:e3:f0:95:bb:5d:
                    40:23:db:45:f0:98:5a:c7:8c:2a:0c:6b:2a:e9:14:
                    4b:5a:b4:eb:c7:32:4a:2b:c9:30:f0:fe:b6:3f:47:
                    a0:28:36:a0:8d:d0:2c:cd:69:a8:b7:64:ff:32:5d:
                    31:09:6f:c0:ce:ed:be:e8:01:86:0b:4f:52:ec:50:
                    02:c6:ad:44:ee:1f:af:cb:2e:10:d0:ae:a5:a7:23:
                    52:3b:72:04:49:7c:b3:98:3e:76:92:bc:67:07:b7:
                    f0:dd:e9:d0:b2:a4:19:ea:0e:1c:a0:b5:05:28:01:
                    0d:41:1c:db:48:7d:b2:dc:5a:6a:63:26:8d:97:1c:
                    2c:1f:d7:9a:fc:ab:74:28:77:f5:bb:5c:f6:b6:32:
                    6d:f1:a6:84:8a:7b:8d:5d:ad:bc:d7:02:b4:5d:88:
                    93:9e:59:4b:9d:7a:e8:f6:3b:de:b3:40:97:98:18:
                    98:fc:42:32:81:47:20:1f:88:30:30:06:4a:35:16:
                    09:e5:2e:c6:27:fb:ab:76:c9:a7:53:02:f9:b2:4b:
                    2a:57:f1:7a:2e:dc:4c:63:96:49:33:74:02:14:0f:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B0:45:96:B3:13:F6:11:8F:A1:7E:87:77:4D:09:B7:D2:BE:14:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/efc9ef6c-6c72-3181-bc69-b0218d5c1575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.186.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:42:94:9d:05:cb:43:a8:62:b5:0f:b4:d6:04:fa:44:d7:
         14:e2:db:3f:fd:39:a3:86:28:54:8f:45:d8:70:59:a8:10:97:
         7a:8f:34:25:23:2f:51:4b:e8:9b:50:75:fc:81:c4:e4:97:d1:
         95:ad:78:5c:df:53:25:00:59:f0:45:e8:2e:fd:7d:d1:6f:b3:
         a1:bf:7b:66:d8:ef:90:6b:91:65:b2:b9:9f:35:7c:74:b3:32:
         af:64:1f:2c:53:d0:12:51:9a:ed:af:de:ec:46:3f:e9:d8:30:
         cd:4a:80:97:79:d3:58:91:83:ed:ee:80:7b:51:c4:00:f2:13:
         5c:3b:df:1b:f3:5e:3b:63:79:c0:2b:43:ac:5a:88:0f:fd:6a:
         28:f3:2a:1e:5f:7c:bb:ce:1d:68:b6:ba:c2:58:40:41:19:47:
         9c:d5:ab:56:2d:a0:c3:04:5e:8c:26:d4:88:74:91:31:04:ae:
         28:e8:43:71:a6:fa:4a:fc:df:cc:21:84:ee:99:d7:a5:f9:44:
         6d:af:72:79:0b:eb:69:df:bb:81:8f:b0:70:6c:91:c4:62:69:
         5e:13:46:e3:de:d9:60:2e:e7:70:e9:91:1f:36:6e:35:4f:a2:
         2c:3f:30:1f:80:a4:a4:bb:d4:38:da:e7:e1:28:22:7e:d2:dc:
         1b:89:9d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:40 2024 by rpki-client on console-fra.rpki-client.org