Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c3a1f0b6-19f6-3fb9-ac5c-134aeee1640b.roa
File:                     c3a1f0b6-19f6-3fb9-ac5c-134aeee1640b.roa (raw, json)
Hash identifier:          s+nrJfKwJsMcWXEuSJgq1J2jOR0dmSiiRC8p1slRxIc=
Subject key identifier:   A9:31:41:E2:24:E2:B0:D6:05:86:C4:23:5B:5B:97:E5:44:86:2A:6C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC64A58AB9AB411335720580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c3a1f0b6-19f6-3fb9-ac5c-134aeee1640b.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        154.11.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a5:8a:b9:ab:41:13:35:72:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=72e01f11-391b-4d96-8d20-378d9e164830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:86:12:fc:08:9b:49:6b:8b:77:06:7c:e1:
                    97:a7:7d:0e:2c:23:78:a0:59:3b:56:5c:b1:9f:63:
                    7f:24:e6:b7:c4:2a:dc:d8:c0:ce:a1:db:14:c9:e3:
                    88:f0:1f:d4:2d:40:12:9c:44:35:ef:82:b3:62:c4:
                    06:12:f1:32:ca:08:2c:68:b4:68:9c:de:44:7b:5e:
                    41:c0:f5:a0:ab:68:d3:b8:31:94:e8:1f:d4:1d:5e:
                    0b:dc:78:66:22:79:a0:12:88:df:e2:f8:c7:f1:8f:
                    c5:20:5c:83:6b:c2:b5:b4:b7:96:43:26:ab:09:58:
                    c9:49:8e:49:e0:7c:df:b1:90:d6:e8:5f:ff:7f:78:
                    3e:6f:2e:6b:12:ce:19:dc:75:86:96:38:30:ee:3b:
                    70:46:eb:28:99:60:48:26:99:2c:07:e9:bf:f9:4e:
                    bd:b7:f5:50:66:27:08:40:7d:f8:47:93:92:49:86:
                    3a:2d:53:db:60:30:af:6f:81:61:73:19:7d:fe:f8:
                    fa:66:e4:44:71:ad:e7:a8:0f:7f:bf:54:df:15:97:
                    e3:40:ef:76:26:db:c5:5f:7b:d1:4d:a1:57:3e:60:
                    42:fb:c1:03:b6:18:9f:a0:6c:1b:18:54:09:d0:3e:
                    e1:d2:f0:24:55:8d:b4:82:44:1a:df:f6:c0:7c:f8:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:31:41:E2:24:E2:B0:D6:05:86:C4:23:5B:5B:97:E5:44:86:2A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c3a1f0b6-19f6-3fb9-ac5c-134aeee1640b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.11.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c6:02:08:31:22:11:83:dc:7d:5d:e4:92:35:04:42:44:ed:
         8d:30:bf:0e:28:d1:01:2d:07:44:fa:ef:dd:e5:de:3a:fa:e6:
         c0:51:db:bc:55:c6:65:7d:4b:39:e2:61:9d:af:4e:c3:2f:0c:
         5e:d8:a4:a1:46:6a:49:46:5b:94:91:9d:54:66:52:2e:2a:a7:
         ab:35:a3:35:a9:d7:7a:95:4b:58:a0:60:3e:3b:52:b1:1d:25:
         a4:d9:7d:0d:38:85:ad:ec:64:ca:d4:7f:11:62:6a:52:5c:16:
         aa:51:18:ca:d3:5e:4f:ad:37:4b:d2:55:10:cd:90:bf:df:14:
         c7:b5:45:8f:19:38:d6:a0:07:5c:be:61:3b:84:23:3e:ba:0f:
         55:e9:cd:d7:c2:16:15:33:9d:a2:97:50:af:e5:7e:f4:49:05:
         84:f7:53:dd:c2:64:4c:62:2e:d6:f2:d0:b0:78:5d:02:9d:2e:
         f8:2f:f1:88:5a:5d:27:fa:7d:ba:45:50:8a:9d:5f:0c:39:f5:
         bc:bc:7e:4e:c6:84:1b:49:bd:71:1e:9f:fc:53:4b:3f:99:5f:
         aa:79:52:89:29:65:b3:8d:47:90:98:f6:58:9f:ed:7d:7b:81:
         d0:48:75:85:da:fb:90:99:24:90:87:0c:0f:db:30:cf:20:93:
         c3:c1:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:58 2024 by rpki-client on console-fra.rpki-client.org