Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a9f9f03-c912-3c15-ab04-aba0f0346818.roa
File:                     0a9f9f03-c912-3c15-ab04-aba0f0346818.roa (raw, json)
Hash identifier:          tybjL5k7gZW0w0DZ+SgVKwxKtpZ5efbsfJzj5dAN3jg=
Subject key identifier:   04:DD:56:13:FA:9B:15:38:FE:62:E4:C9:EE:C4:30:4B:D6:5D:17:E1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1338ACDADABCBED5EA200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a9f9f03-c912-3c15-ab04-aba0f0346818.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        173.198.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:33:8a:cd:ad:ab:cb:ed:5e:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e74d0abc-8e4f-447f-a048-eba67dd09831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:fc:b5:1d:29:fb:42:4d:c0:11:55:f4:c5:
                    fb:82:f9:8e:59:4c:a6:9b:30:63:66:4e:85:c3:c7:
                    4f:c7:6a:59:9a:62:6e:59:07:51:80:c8:93:3d:2a:
                    d3:09:54:32:31:91:8b:1c:72:c2:fc:12:67:5d:f2:
                    84:ee:6b:1c:52:c1:f1:e5:aa:56:fb:00:1d:d6:23:
                    23:f8:e3:fd:48:35:05:19:7f:32:d0:04:86:2f:6f:
                    91:18:7a:8b:99:be:00:2c:a8:19:e1:e5:c7:1f:54:
                    21:13:0e:93:4f:98:6b:95:49:6b:b3:8a:a6:c9:0e:
                    ca:94:14:0c:5b:9d:7e:b2:9d:0f:95:eb:c2:4b:f9:
                    f2:b2:e0:0d:a4:5d:d0:a0:9f:0d:9a:66:46:db:66:
                    d1:e0:fe:80:4e:d9:26:31:d2:a3:ea:3a:58:5b:5c:
                    20:4d:69:0e:8d:4d:45:38:08:0e:fe:af:6b:55:a5:
                    58:59:74:20:5f:29:77:6a:93:b7:29:fe:15:25:79:
                    ab:37:42:79:3b:4d:6c:7a:7a:60:60:89:25:6b:6d:
                    ae:d0:6b:10:72:bb:e3:a2:f4:64:de:a4:2d:d9:27:
                    a4:ca:bc:b5:a5:dc:66:6f:4c:91:88:d9:2c:37:90:
                    62:11:3a:4a:74:07:51:d9:99:9b:bb:50:17:b9:c4:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DD:56:13:FA:9B:15:38:FE:62:E4:C9:EE:C4:30:4B:D6:5D:17:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a9f9f03-c912-3c15-ab04-aba0f0346818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.198.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:dc:f0:37:14:f9:8f:b2:4c:23:02:e6:32:d9:f4:46:05:
         fa:53:72:b8:d1:ac:75:5c:d1:2f:9e:6b:2d:c9:c4:2e:fc:e0:
         63:21:69:d8:ce:d4:0a:3e:0d:4a:16:2e:b7:f0:9b:cc:82:e2:
         ba:2a:e7:1d:78:b4:5b:b6:4a:fe:bc:4f:1b:58:b5:7a:20:92:
         ea:cb:3d:68:39:d1:ed:29:e7:cd:79:79:b5:ed:e9:ca:36:3e:
         ae:6d:94:b3:29:f2:1c:24:b7:f0:ed:13:50:63:9f:bb:70:d6:
         64:c5:ec:09:98:dc:d2:da:91:44:89:b0:fd:97:99:60:62:a3:
         ba:f0:ba:3f:ac:0f:a9:a2:51:d8:97:ab:48:90:04:e2:7b:89:
         9e:10:61:f9:a7:f9:61:2e:ff:ef:02:78:24:03:0e:76:17:5b:
         47:7f:69:a9:5f:ec:90:be:e5:f9:8d:4d:ea:d8:01:5b:26:63:
         0a:71:c9:eb:dc:f3:dd:32:2f:d8:c6:8c:dc:51:16:e2:e9:7e:
         2a:07:23:94:19:2b:95:85:53:c4:eb:9b:64:d8:4e:94:62:39:
         e4:54:47:ba:7c:29:35:2e:7c:0a:71:05:29:10:96:8d:00:45:
         08:d3:ad:3e:33:26:d5:58:aa:31:1d:0f:57:29:58:9c:15:c4:
         1d:c0:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:29 2024 by rpki-client on console-ams.rpki-client.org