Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0aff09d3-0071-343d-a5e9-0eaf1609f9be.roa
File:                     0aff09d3-0071-343d-a5e9-0eaf1609f9be.roa (raw, json)
Hash identifier:          oXRMsHQrSTRXHoDogQxPx5JBShJPPol8rG6kkmHxTLM=
Subject key identifier:   13:E1:36:A2:60:2E:5D:75:2D:AE:C9:A2:74:98:DD:CF:DD:A9:B5:52
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A13BA3CB5D602890FF63E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0aff09d3-0071-343d-a5e9-0eaf1609f9be.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     19914
IP address blocks:        67.52.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:3b:a3:cb:5d:60:28:90:ff:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d790866d-7b05-45f0-a540-f9641b052837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:f6:c2:6e:99:42:e2:b6:b0:88:a1:57:f9:
                    d0:fa:51:2a:3b:c9:68:f3:94:58:00:e3:52:e8:cf:
                    24:eb:86:ac:02:9e:6b:cf:c7:10:57:7c:09:0f:6f:
                    b7:26:54:8e:03:e7:e7:d8:fc:90:aa:a1:5d:f5:4f:
                    9d:5d:58:40:c1:ed:9f:23:92:19:a4:e8:22:0b:a6:
                    37:dd:2c:c5:e1:7b:56:1a:c5:59:b7:c3:55:85:44:
                    0b:52:69:f8:8d:3e:ba:93:51:ce:6e:28:b4:bf:93:
                    89:98:f7:45:92:e6:85:a6:78:96:db:e9:a6:d5:f5:
                    18:25:43:62:aa:ed:11:6b:28:e6:13:0f:8f:b0:af:
                    8f:2a:13:c3:f7:a2:86:79:81:ce:64:04:df:df:f3:
                    0a:6b:02:34:da:f1:54:a7:8d:bb:50:34:a1:2f:cd:
                    ee:19:aa:1f:e6:07:35:27:c8:c5:18:52:e9:12:5c:
                    2e:d2:1b:61:e8:81:75:ef:f6:94:7d:5c:46:5c:e6:
                    a3:6f:2c:ac:e1:a2:cd:ee:36:0d:82:a4:a4:5f:d7:
                    ba:21:49:8d:ee:4e:8c:3c:c9:e1:27:07:ff:85:77:
                    ad:c7:25:b3:bc:8c:92:41:99:ad:81:ca:e9:46:47:
                    da:19:4e:ac:ea:8b:e9:9c:73:b1:2a:14:61:4f:89:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E1:36:A2:60:2E:5D:75:2D:AE:C9:A2:74:98:DD:CF:DD:A9:B5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0aff09d3-0071-343d-a5e9-0eaf1609f9be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:cd:40:a9:cb:c1:74:70:7a:bc:a6:64:74:bf:9c:e9:f0:
         57:88:f0:c4:38:52:13:e0:33:71:f7:75:2a:04:01:94:12:82:
         70:9f:4b:a8:1e:ba:f4:3d:a2:5c:82:23:0c:70:e0:03:90:d0:
         0f:6e:e0:5f:be:e0:90:50:3c:d1:51:28:15:10:26:5a:2a:e6:
         3f:6e:1f:b2:cb:ef:77:06:b8:a8:45:f5:ac:49:f5:98:7c:a6:
         4d:35:e1:d7:c9:90:95:ca:e5:85:52:d0:c2:35:3a:5f:76:3c:
         98:e2:04:50:0d:2c:be:a3:b1:87:f9:b6:66:55:38:a5:a6:a9:
         ff:3f:db:10:23:5b:79:d4:e9:c2:29:8d:d4:65:ed:28:22:ed:
         38:26:06:2c:99:28:59:06:e7:63:b8:62:f9:30:1f:d9:f7:ed:
         a6:26:c8:fa:b5:42:6f:4a:f4:12:d4:a0:09:80:95:c5:fa:da:
         b0:71:d8:30:cf:60:ab:a8:d9:34:f7:db:55:c2:94:57:1e:e1:
         71:7a:44:37:5d:56:ad:15:df:09:2f:97:fa:1d:09:9b:44:95:
         7e:f2:f7:eb:85:79:ca:da:a8:73:e5:2b:92:0a:7b:89:7c:e0:
         97:81:c6:8d:e4:60:2c:a7:e6:52:e9:20:56:e3:e7:ac:05:4b:
         77:ee:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:50 2024 by rpki-client on console-ams.rpki-client.org