Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fd7d11ad-0586-3a60-baf3-bff97dd2af26.roa
File:                     fd7d11ad-0586-3a60-baf3-bff97dd2af26.roa (raw, json)
Hash identifier:          XfusCW88VnrMcY489Qt/0oUY0y2AEDkv+chsohb9mHg=
Subject key identifier:   26:53:05:EC:2D:E0:B3:86:15:A5:2D:EC:F2:F6:A9:71:4A:DA:24:17
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A09A2ECC80101CA8C7CB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fd7d11ad-0586-3a60-baf3-bff97dd2af26.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11351
IP address blocks:        67.251.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:9a:2e:cc:80:10:1c:a8:c7:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a0bb1b37-0e2f-4a3d-b251-3cf289265617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:33:20:21:de:e2:78:96:32:5d:a8:d9:cd:
                    0b:c3:f9:f2:0f:e2:22:dd:51:52:f0:e1:fc:f1:cc:
                    71:54:e5:6f:76:05:35:7b:74:86:bf:6c:bb:9b:6d:
                    aa:26:16:76:d1:67:e4:9b:93:4b:82:05:91:be:59:
                    5c:40:d2:ef:9b:53:bb:a8:c9:26:9c:e0:cd:64:a7:
                    02:4b:0c:aa:fc:cb:9f:b4:85:6a:65:4a:d5:5f:ce:
                    f3:34:e1:21:60:c9:18:ff:81:ca:fb:48:3f:7e:af:
                    f2:42:e4:6b:c7:bb:73:80:85:00:3a:4f:33:2f:a7:
                    6f:f1:31:60:92:ea:e5:48:46:c6:12:62:70:ef:1a:
                    b8:ce:2a:0a:ef:15:4c:d4:bf:b8:06:d2:8e:79:cb:
                    17:1a:8b:cf:a3:40:4c:1d:54:a9:13:25:4a:ae:f0:
                    f6:75:01:89:56:76:ba:58:c4:04:36:7d:fd:d8:b3:
                    e3:45:2f:e4:24:31:d5:65:db:ad:ea:aa:e2:21:a9:
                    a9:00:cd:2a:59:8d:d4:d3:24:d1:e4:1e:ce:32:c6:
                    ba:dd:48:50:06:09:47:4d:74:c4:13:d5:b5:59:38:
                    b9:b1:e6:37:8d:7d:ae:ff:7d:cd:7e:30:a1:83:af:
                    3d:4c:c2:dc:1c:0d:10:fe:54:78:56:9f:f4:c7:7a:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:53:05:EC:2D:E0:B3:86:15:A5:2D:EC:F2:F6:A9:71:4A:DA:24:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fd7d11ad-0586-3a60-baf3-bff97dd2af26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.251.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fa:2e:6d:54:17:25:e5:2a:2f:f5:f2:38:2c:00:75:5d:a0:
         41:4c:98:5d:16:08:a1:63:60:09:10:1e:c1:8d:b1:d4:92:8f:
         58:57:71:8c:46:18:9e:3d:0e:ca:bf:14:96:36:d5:e1:29:99:
         c3:94:83:f1:f4:8d:0c:b1:50:72:2e:3f:0e:98:bb:2a:87:47:
         f6:61:8b:a9:a9:66:53:50:08:09:d6:67:a3:9d:c1:1f:fd:6a:
         9c:53:d8:b6:2c:94:5a:f5:6d:dc:5c:9d:4e:07:04:b7:ab:62:
         17:6f:4f:1f:74:10:54:bf:f5:c5:f5:36:d3:5a:a8:8c:ee:88:
         79:70:f7:10:6c:65:0d:40:4a:e4:5c:8c:9b:7a:6a:b7:9a:55:
         66:0e:ce:8c:0f:c8:c5:23:06:0f:08:8f:86:a4:8f:47:b0:e4:
         04:6b:11:77:9f:cb:a9:11:2e:bb:95:52:01:9b:5d:35:a0:9c:
         0c:db:a4:d5:95:58:8e:69:a0:cc:b1:b5:a7:64:15:52:65:c2:
         6f:fc:6a:4d:bf:a8:32:50:52:d9:cb:b8:6a:d5:40:e8:a6:0d:
         3a:1f:36:b8:f3:0b:b3:ee:34:86:29:54:2b:27:9e:2c:89:0d:
         63:40:c7:ac:26:32:20:0c:1c:f4:c2:59:69:f3:b8:37:5f:ba:
         9b:b3:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:41 2024 by rpki-client on console-fra.rpki-client.org