Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1cf390a4-5eaf-311e-9ebc-307846405692.roa
File:                     1cf390a4-5eaf-311e-9ebc-307846405692.roa (raw, json)
Hash identifier:          0251yjlUNkNpJHwX7sp/scu8Jkn+sxJGq9uybCn8OiI=
Subject key identifier:   4D:EC:9D:BD:BF:88:D3:09:EE:AE:B0:BD:CB:5C:01:29:82:6F:09:0D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0BD2AD7B73B346528E000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1cf390a4-5eaf-311e-9ebc-307846405692.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        24.227.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:bd:2a:d7:b7:3b:34:65:28:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=dc4778c4-2802-460d-8b06-3feb0d53a7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:fc:dc:7b:94:f3:a3:10:ad:00:01:a1:a8:
                    b4:54:c4:6c:9a:0a:1b:82:16:47:04:e1:8e:70:d0:
                    50:e1:1c:74:a9:86:60:12:57:b9:fa:b3:f4:ba:1a:
                    8f:c7:51:4f:06:8c:16:b3:3d:d8:ce:b9:39:bc:78:
                    06:0e:44:71:1a:47:e7:d0:b0:e6:ba:97:d6:67:05:
                    18:e0:7f:93:57:99:01:48:d6:4d:88:0a:6a:b0:42:
                    e4:74:67:cb:55:a4:49:94:16:37:dc:ea:5c:04:b2:
                    6e:c2:11:43:6a:e9:28:59:dc:b2:64:07:91:84:37:
                    8b:77:b5:be:b0:3c:0a:dc:41:f5:8b:1f:cf:f6:93:
                    95:41:ca:07:31:b5:01:c3:db:9b:94:fc:c2:6b:63:
                    f3:1a:cb:8f:41:d6:6f:47:2d:44:83:2d:58:7d:4f:
                    23:01:98:32:83:3b:83:95:d3:f9:9e:08:b5:70:51:
                    66:94:85:13:ee:47:46:15:25:f9:bb:d7:01:5e:c2:
                    84:87:c1:4e:f6:a0:8e:90:f6:92:a8:81:6a:71:e8:
                    1c:99:07:64:57:5d:62:1c:c4:94:6c:27:b4:ed:3a:
                    ab:3f:f5:01:aa:6a:38:4e:a5:9a:5a:58:ab:30:e6:
                    b9:ab:85:2d:ed:69:17:c4:3a:4d:ee:f6:0f:95:cb:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EC:9D:BD:BF:88:D3:09:EE:AE:B0:BD:CB:5C:01:29:82:6F:09:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1cf390a4-5eaf-311e-9ebc-307846405692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.227.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:77:b5:30:52:c7:94:29:33:44:26:3a:10:92:8d:e5:30:82:
         2b:4a:81:e2:2a:b7:bc:b9:7f:33:f5:65:08:f1:16:78:c2:53:
         13:72:e5:aa:f8:8c:0b:9d:a4:e5:80:97:8f:d7:87:d3:08:47:
         45:93:fa:1e:34:13:55:b4:7d:98:0c:48:0b:25:c5:7b:bd:9f:
         33:97:5c:b2:ed:48:a9:96:41:ca:ba:f0:fc:0b:d5:37:e2:2c:
         af:9c:f0:35:19:53:fc:46:30:2a:aa:12:a0:3f:60:2f:f7:2f:
         a2:3c:df:3d:7e:cc:c8:f5:5a:59:e6:31:a0:45:03:8c:79:66:
         5e:cc:df:54:6f:c0:8e:a3:30:c8:50:b2:28:22:7e:4f:11:dd:
         d3:92:5e:01:55:5b:cb:7b:89:af:dc:60:df:e0:fc:e7:b8:44:
         0a:4b:40:5e:60:39:a7:0e:b9:94:47:3e:8f:b5:d5:3c:2e:98:
         a9:4e:6c:fd:09:b2:34:16:f3:7e:06:e9:06:97:36:26:da:c6:
         d8:a8:4c:05:88:f5:08:bc:b9:2e:e1:93:f7:d3:8f:63:92:64:
         33:4c:8d:fb:20:68:25:d7:62:c0:c2:3b:a3:93:80:1c:d3:b5:
         e3:c8:6c:19:cf:7d:a8:2a:c9:c8:bd:e6:25:e7:2b:79:24:8f:
         4a:04:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:22 2024 by rpki-client on console-fra.rpki-client.org