Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/023688c4-e5e3-3186-be21-d0d0b6d54be9.roa
File:                     023688c4-e5e3-3186-be21-d0d0b6d54be9.roa (raw, json)
Hash identifier:          E5L0Sj4pp//bLRbdWHkOGUyRpWClTX88MUNSL8W9ldg=
Subject key identifier:   3D:A3:33:F1:CA:80:77:D3:88:4C:12:DC:C4:17:3A:C3:AC:65:7B:51
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0BCA6902C72570249D000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/023688c4-e5e3-3186-be21-d0d0b6d54be9.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        24.106.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:bc:a6:90:2c:72:57:02:49:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=5cd8efa0-b8e1-4c71-8aed-312e7c75d817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:f0:4a:e3:61:e2:6f:71:51:9c:9f:af:65:
                    21:e1:c0:26:cd:ff:70:ec:10:73:69:8a:a6:78:a8:
                    e2:d4:f4:6a:ed:a6:c4:08:55:5d:85:ad:7d:51:e2:
                    f6:e9:31:30:f8:f1:93:7a:d0:6b:7c:c0:22:12:f4:
                    ef:f7:74:9e:9d:b8:fe:a7:16:f6:2d:e7:a6:fe:46:
                    29:d6:1d:28:36:d8:cc:3e:04:67:46:62:98:4a:25:
                    ac:47:5c:db:90:7f:ea:8a:b3:8d:da:ac:7f:31:17:
                    78:74:dd:29:37:f9:d3:e3:a2:ae:f6:46:fe:90:a0:
                    39:53:52:2c:27:06:0d:4f:ca:54:55:f8:92:01:f8:
                    6f:b1:33:12:27:ca:a6:b6:fe:ce:ad:74:7d:38:73:
                    ef:2c:e4:72:20:ac:52:8c:38:b8:45:df:95:9d:ab:
                    9f:ec:cd:97:55:b6:80:d7:9a:68:f2:27:2c:e6:98:
                    76:0e:5d:a0:cd:bb:bf:ce:c6:cd:db:14:35:2a:e9:
                    95:da:61:99:4d:4b:4a:61:c7:a2:bd:8e:bb:9f:68:
                    12:ea:87:86:f4:f9:b7:61:6d:50:82:d1:bf:ca:c9:
                    46:35:17:1c:ac:13:ff:7b:8b:fb:f5:9f:5c:6a:18:
                    3f:f8:87:87:72:0c:64:6a:39:fa:a6:1f:a2:05:02:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:33:F1:CA:80:77:D3:88:4C:12:DC:C4:17:3A:C3:AC:65:7B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/023688c4-e5e3-3186-be21-d0d0b6d54be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.106.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e9:52:7e:47:03:c7:49:f2:80:2c:fe:26:16:a6:5e:d1:77:
         b8:50:08:61:55:47:8f:40:df:26:78:52:c6:b6:92:e7:b5:a9:
         4e:9f:8f:02:53:31:b3:9a:26:1a:51:19:07:4b:4f:83:57:ee:
         e3:b6:3c:dd:27:fd:29:ce:ef:dd:4d:85:25:d1:8f:6a:ed:03:
         3e:97:73:35:fc:eb:8f:ec:da:8d:0f:cc:55:70:43:70:1d:26:
         c9:e2:3a:c7:9c:e9:d0:33:60:82:f9:46:22:a9:aa:bd:7b:28:
         9f:39:f6:8f:59:b3:a0:d4:94:ff:7b:70:38:ae:4c:01:d5:6c:
         30:a5:df:c7:58:97:5f:f7:e6:23:29:cb:fe:66:c1:1a:82:dd:
         ac:ae:a0:f2:a5:6b:0a:a3:99:70:50:a2:0e:94:d8:d6:5b:4b:
         ce:61:90:f2:87:7e:24:47:e4:02:e8:85:41:f8:42:b1:12:27:
         b4:90:2a:27:7a:58:db:78:f1:95:56:05:79:56:d4:bd:7a:ac:
         2d:d6:0f:4e:a3:a2:dc:9a:67:5a:1d:3c:62:c5:9c:61:a0:67:
         45:9b:cf:91:1c:27:34:ae:99:b8:f3:c2:23:12:16:9c:3a:dc:
         34:af:24:af:83:3f:b8:cb:6e:70:f6:45:9f:44:c8:29:f1:41:
         a9:c2:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:20 2024 by rpki-client on console-fra.rpki-client.org