Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/080f4873-1f09-3994-b01f-12ec03da6dc9.roa
File:                     080f4873-1f09-3994-b01f-12ec03da6dc9.roa (raw, json)
Hash identifier:          NaBZ2ZHyp54xpAyMbbRjRTG78arNh/9vH+Q3rrDDpC0=
Subject key identifier:   C3:2A:0B:B8:6A:BD:41:64:5D:A7:70:B8:67:E8:7E:24:DA:69:57:EB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0B3250A0A479B61B81E30
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/080f4873-1f09-3994-b01f-12ec03da6dc9.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20001
IP address blocks:        24.199.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:b3:25:0a:0a:47:9b:61:b8:1e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c63b0655-2e00-4f7f-9fb3-85af70987e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:c6:92:15:0d:68:00:e5:da:7c:7d:c6:64:
                    af:5a:e3:99:5f:71:4c:5b:ca:d6:6d:57:b9:d6:14:
                    6d:b4:ff:9c:9a:18:b2:e5:dd:37:af:73:c6:a1:8b:
                    c7:f4:89:5d:3f:40:62:e5:ec:bc:ad:66:24:c3:49:
                    85:08:39:0b:17:e1:ab:ea:87:7e:03:20:a1:b4:44:
                    25:9e:9f:84:64:65:48:2c:01:7f:8c:08:81:cd:d0:
                    25:54:b7:20:a4:89:3d:a1:f9:79:97:f4:71:00:02:
                    b3:ad:01:5f:ab:2e:fb:fd:62:fb:3d:da:4b:1b:d0:
                    80:6e:82:e6:83:bc:b1:db:48:2b:3b:47:41:78:09:
                    99:1e:02:8c:d4:42:82:e8:88:b0:b6:fd:31:30:ff:
                    78:79:83:98:ec:bd:c3:58:7d:28:d6:e0:f6:91:db:
                    d9:3d:17:7c:1e:29:71:bc:86:cf:4d:5e:ba:e6:fa:
                    63:5b:e0:91:37:30:0c:a6:be:75:d0:47:84:c3:89:
                    df:a5:7f:5b:55:04:99:37:bb:97:5e:40:6c:ac:12:
                    aa:44:3b:72:fb:34:ba:7f:9b:b1:f2:40:1c:33:aa:
                    d7:cb:8c:c8:4f:3e:8b:b2:b8:3d:9c:f0:d5:36:43:
                    73:eb:b7:72:3c:29:2f:0d:30:b8:ae:98:5c:c6:8b:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:0B:B8:6A:BD:41:64:5D:A7:70:B8:67:E8:7E:24:DA:69:57:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/080f4873-1f09-3994-b01f-12ec03da6dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.199.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:fa:d4:0a:aa:8a:8c:d5:83:be:79:a9:a4:52:78:1f:02:
         64:19:8c:23:83:51:53:3c:78:e6:b1:d3:8d:3a:87:70:48:28:
         81:49:b2:7b:99:90:a4:d8:4a:96:f1:61:ad:81:6b:13:76:38:
         d8:58:a5:2e:9d:cf:77:eb:7f:88:b0:ff:5a:32:e8:27:80:82:
         ec:cb:50:bc:2e:73:fa:36:87:49:01:2c:a3:af:91:d9:01:e8:
         79:66:b1:6d:7d:9a:15:c9:73:ab:f1:14:79:ec:94:e3:7a:2a:
         57:68:7f:9a:77:9a:e8:81:20:5a:f2:70:e6:e2:06:6a:bf:18:
         c3:a6:44:6e:78:8b:93:12:45:94:17:2d:c3:a9:65:35:46:cc:
         71:be:8f:fd:99:05:9f:1e:67:1d:a9:c7:fb:46:a1:d5:37:51:
         a8:47:15:2e:c4:92:23:82:5d:42:4f:88:25:f6:1f:e0:80:ed:
         86:95:03:4e:1b:8e:cf:49:a2:d3:f1:49:22:b5:c6:67:9b:b2:
         33:e3:fe:99:7d:46:b1:8a:54:b3:0e:55:5d:dd:09:d3:6d:23:
         89:28:26:73:21:d6:5d:77:84:86:08:f5:19:a6:c0:c4:1b:6c:
         b1:ca:4e:bc:2c:15:43:a6:8d:2e:a8:8e:69:46:a4:d7:c3:dc:
         19:7e:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:21 2024 by rpki-client on console-fra.rpki-client.org