Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/13458937-67bc-38c6-b825-8479dade0424.roa
File:                     13458937-67bc-38c6-b825-8479dade0424.roa (raw, json)
Hash identifier:          bWjnCxu6aZgvlkQHlZ+hzS5hkiuOWqoIpS//mT9jRho=
Subject key identifier:   47:22:10:4A:EC:FA:94:16:49:E1:E3:28:58:C8:D6:A7:FD:BF:28:F3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1360A86309A1A644F5D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/13458937-67bc-38c6-b825-8479dade0424.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11955
IP address blocks:        142.254.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:36:0a:86:30:9a:1a:64:4f:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=67d3f2c7-0f20-4a81-969c-41385ae77d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:19:7b:e5:1b:9c:a7:86:50:3f:21:2a:00:
                    f9:04:bc:0c:9f:20:5d:ce:85:49:ea:40:ee:d2:6a:
                    b0:86:b0:6d:13:1b:92:83:0b:03:d8:3a:99:19:28:
                    ea:52:ab:19:e7:cd:86:60:71:e2:f7:86:1b:a0:d8:
                    3d:6a:ce:a6:f5:f8:eb:6a:b8:0f:0b:5c:0b:0a:7d:
                    67:21:34:7f:62:1d:3b:56:7e:fe:c0:4e:a2:44:a8:
                    cc:12:30:3d:7e:28:02:d9:3b:67:ca:de:7d:97:b4:
                    80:fa:e4:92:88:6c:83:83:69:2d:6c:ed:f1:34:0c:
                    25:db:28:4f:8e:43:c7:17:c6:d8:0f:3e:9d:b0:1e:
                    3e:7f:0a:ac:e5:87:41:30:8b:85:6b:9a:49:32:0b:
                    76:fa:4c:43:ca:80:ad:5b:bf:2b:4f:00:6a:b8:4e:
                    b6:5e:d3:cc:13:8f:79:4b:55:fb:8c:37:2f:e8:08:
                    72:76:eb:7e:b8:31:55:9d:6c:1a:c9:9f:c5:4d:84:
                    a9:1c:1c:48:bd:8c:1a:dc:3a:7f:8d:2e:a9:fc:9d:
                    6b:cf:3a:56:70:79:f4:db:f5:95:4e:27:de:e1:09:
                    a6:2d:d1:96:80:cb:6a:bf:c4:d3:d6:ff:2f:cc:ab:
                    97:17:41:24:d0:63:9d:44:4e:1e:c8:ac:4a:29:e5:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:22:10:4A:EC:FA:94:16:49:E1:E3:28:58:C8:D6:A7:FD:BF:28:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/13458937-67bc-38c6-b825-8479dade0424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.254.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:66:11:10:e5:1c:18:11:60:ad:9e:6d:c1:35:2e:99:98:a8:
         1f:6c:77:ce:06:73:a3:93:08:a7:54:42:8a:bb:17:63:52:e6:
         ee:fd:d3:64:5b:69:f0:d2:d4:50:a4:1b:12:17:2f:a6:d2:37:
         e5:8f:a9:1d:d7:14:3b:e9:6d:93:b5:49:1f:68:43:6b:04:0b:
         ac:c1:a3:de:5d:37:85:76:ed:ad:13:bb:b2:ad:16:f8:c7:91:
         ad:c8:68:e8:e8:a6:1e:1e:8a:ac:17:2c:4c:fe:82:35:bf:cb:
         96:82:d2:3d:36:13:1b:ec:b3:0d:d2:15:2e:62:1f:8d:20:44:
         38:e5:64:62:e7:12:23:e4:ea:eb:b6:15:e2:f4:e7:a1:ac:7a:
         f3:00:4c:f4:e2:e3:8a:da:95:ae:67:74:37:22:c3:70:da:7e:
         81:9d:ed:65:3e:a6:40:87:a5:fe:bd:7e:d7:e8:0f:57:7c:34:
         dc:1c:79:9c:29:4a:01:d7:f4:3e:1c:e9:ac:34:d2:ec:ba:bd:
         3e:46:b3:b2:50:d3:47:77:05:ae:96:9e:d3:42:f7:f2:3e:5a:
         a0:b3:7a:a6:c8:4f:68:d4:aa:67:48:88:3c:ad:ce:38:16:24:
         1e:45:50:99:5c:34:94:ac:0f:fd:dd:2a:88:71:a0:af:4d:84:
         93:12:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:22 2024 by rpki-client on console-fra.rpki-client.org