Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/13ca620b-50ea-38ec-a3aa-500742097ddd.roa
File:                     13ca620b-50ea-38ec-a3aa-500742097ddd.roa (raw, json)
Hash identifier:          Txwk+HLhzVLn8bLDux9ksU00KoLTtquJUr4fgTj/5EQ=
Subject key identifier:   23:BD:A8:16:65:4A:0F:C5:37:79:20:76:4B:2E:EF:3F:D8:37:69:1B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A145D2C1A3DDB769B95060
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/13ca620b-50ea-38ec-a3aa-500742097ddd.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     46771
IP address blocks:        96.11.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:45:d2:c1:a3:dd:b7:69:b9:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a09aa69b-e933-4dfe-b71d-665cff347ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:dd:e9:dd:45:05:75:8d:c8:2e:89:05:4c:
                    f4:ee:92:e4:2f:ac:de:af:36:83:c8:33:05:28:75:
                    d9:fe:06:9a:a6:36:1f:56:1f:23:06:8d:32:83:a4:
                    c8:03:82:09:f7:ee:c3:05:fd:96:96:ab:b4:dd:aa:
                    1d:ea:e0:8a:52:91:95:7e:88:05:da:c5:e4:df:74:
                    5c:d6:d1:64:ba:c9:c4:ef:3a:e1:9f:6a:1d:4f:6d:
                    30:96:e7:ec:d2:5d:45:8a:0f:0b:de:20:00:d2:f1:
                    70:95:e1:3f:07:99:a5:bc:94:6c:83:85:78:bb:49:
                    80:25:50:3f:ec:42:24:e4:1b:a4:f3:06:5f:64:82:
                    d2:63:8f:a2:eb:d7:89:ad:cb:a6:e3:19:aa:4b:ec:
                    f0:98:47:3a:d9:f6:c6:92:9f:ca:c7:d3:bd:45:a5:
                    ff:af:fd:73:7a:8b:d5:f7:76:5f:e1:c4:61:bd:30:
                    f4:ae:8c:56:2a:78:b3:4d:f3:20:bc:3e:cf:dc:8b:
                    53:1a:07:ab:95:b0:82:a5:f9:2e:33:90:75:f4:ae:
                    13:3a:80:3d:bb:de:32:bb:88:eb:c6:91:76:04:c9:
                    dd:a4:ec:46:5e:e2:eb:cc:a7:8d:4d:55:39:01:56:
                    63:21:f0:0c:48:55:d2:88:20:96:7e:4b:ac:cd:1a:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:A8:16:65:4A:0F:C5:37:79:20:76:4B:2E:EF:3F:D8:37:69:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/13ca620b-50ea-38ec-a3aa-500742097ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.11.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:8a:03:e9:26:33:9a:9c:c4:d7:e2:b1:bf:c4:da:07:2d:
         60:31:0e:08:ce:e5:ac:d9:41:1c:31:02:85:74:13:0c:90:69:
         23:7b:a6:20:23:ba:7f:ea:14:e5:90:a5:e9:d2:64:6a:12:e7:
         d6:ec:a9:35:aa:a8:37:40:c6:9c:1c:8d:97:72:ec:b0:38:5c:
         67:dd:c5:ae:a0:63:a4:18:7a:09:2a:3a:3f:5f:5d:5b:18:ed:
         fd:e9:26:86:94:90:35:f1:aa:28:81:0c:4e:f8:96:fc:80:3c:
         46:e5:af:75:37:9d:e2:c4:ce:9a:d2:f7:2d:c4:4d:9b:a8:67:
         7f:f3:ff:bb:4b:75:35:d9:d0:1a:0f:48:03:08:7a:27:e8:fe:
         6c:5e:2e:0b:1c:4c:e8:9e:af:0f:a4:9e:0d:58:64:54:d8:94:
         49:e5:9c:e1:63:e5:e0:f4:e0:c5:ea:7f:59:97:57:51:c4:8a:
         69:53:e2:5b:8c:47:27:4a:57:ba:1c:c7:d4:2e:76:ce:2d:6d:
         28:06:0b:34:74:4e:2d:23:32:ac:90:54:8b:a4:24:08:57:ac:
         f1:c5:28:5d:e8:f9:d6:d3:12:82:2d:85:50:16:ab:41:60:a7:
         a8:9f:7c:b1:ff:6a:4e:ab:68:59:51:52:f4:f9:10:23:f6:23:
         6a:34:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:22 2024 by rpki-client on console-fra.rpki-client.org