Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa
File:                     fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa (raw, json)
Hash identifier:          v+vRMjIcx9KmxSD5LraWJr40x0vbPIOJGgWSkl4DRvw=
Subject key identifier:   C3:C8:DF:FB:B7:BD:47:29:5F:3F:99:02:AA:36:FD:3C:90:CE:83:97
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E5EFC0F36B3777035B180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11427
IP address blocks:        70.119.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:5e:fc:0f:36:b3:77:70:35:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=95d97f70-c612-4c49-a8ba-36af1b7e471a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:53:71:9f:55:61:fd:9a:7c:20:5a:37:fc:
                    6b:9d:c1:82:28:6a:be:c0:74:13:f5:12:cc:67:72:
                    96:2c:0c:d2:9a:d2:00:a9:d0:eb:11:9c:43:c0:da:
                    37:d5:14:b1:60:74:ee:94:92:aa:45:8b:cd:ae:85:
                    36:b7:78:04:86:bd:8c:cc:a4:39:e0:c7:d5:b0:1b:
                    fd:61:6c:fe:9c:b9:d8:a1:8d:8d:b9:f7:4c:a2:02:
                    d9:f8:09:0e:58:0b:a1:a6:6e:57:cd:8b:bf:95:94:
                    a5:81:77:3d:e7:95:6b:77:c9:4d:03:b6:90:98:4f:
                    e1:df:8b:65:fe:c7:d5:61:ec:9c:7a:31:9c:3f:56:
                    c4:d8:00:1b:e6:5d:26:a1:69:1a:3e:01:64:df:de:
                    2b:cf:ac:ae:33:ff:f6:35:29:5b:35:68:3c:40:cf:
                    6c:8f:0c:0b:1e:f3:61:3b:3c:07:d1:7a:b7:a0:3f:
                    0a:77:5c:be:4c:9b:e1:e3:61:a5:ff:3e:5e:9d:1b:
                    97:c5:0a:f7:30:70:e4:4e:86:72:24:9a:14:d1:56:
                    f2:c5:5c:1c:ff:dc:6c:bb:f3:4d:63:70:d1:7a:8d:
                    8d:8d:96:19:84:72:86:6d:63:54:54:73:34:bf:4b:
                    e0:66:37:9f:f9:96:ad:2a:e0:4d:c2:94:46:15:9f:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:DF:FB:B7:BD:47:29:5F:3F:99:02:AA:36:FD:3C:90:CE:83:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:85:0b:5a:54:0b:c2:0c:ff:cf:a9:48:58:b6:89:84:aa:69:
         85:c8:89:5f:92:4d:c9:21:f7:97:fc:cc:aa:14:76:4a:3c:94:
         4b:56:a3:5f:64:61:4a:2e:66:a4:b9:a6:e3:47:47:3b:70:eb:
         4d:a9:38:20:4d:49:85:5f:12:e9:af:ac:b4:38:3f:9e:03:4c:
         24:a5:22:e5:1c:ef:82:5f:bb:da:b9:00:21:38:2e:a0:24:f2:
         aa:a8:93:67:41:63:7b:5d:9c:13:9f:9b:0b:50:5d:2d:7b:c9:
         6b:7e:8d:ea:96:b3:d2:53:48:8d:f7:9c:dc:11:2f:c7:a2:9a:
         ac:c1:ab:0d:d8:53:95:c9:61:9e:f1:6c:16:8b:57:a6:75:9b:
         65:c6:f1:89:9a:5d:22:d3:fc:3a:59:69:e7:f0:10:e7:3f:95:
         d8:a1:c6:c2:0f:a3:da:98:f0:aa:c1:64:1f:7c:b6:ba:ac:89:
         ff:89:72:9f:76:8f:fa:05:47:da:9d:d8:51:b2:2c:36:d4:fc:
         2c:ce:70:4e:97:3c:d2:0c:4e:41:5f:20:33:78:9c:16:ce:1b:
         45:fc:76:69:c6:bd:58:2b:1f:a0:2f:8f:bf:11:c6:6f:8f:66:
         7a:02:1d:e4:40:6b:ed:75:2a:38:9e:b7:33:7f:3d:6d:67:f7:
         62:3e:65:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:04:21 2024 by rpki-client on console-ams.rpki-client.org