Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1eaf51d5-7ac3-31e5-9e32-fe1a0ea9c52a.roa
File:                     1eaf51d5-7ac3-31e5-9e32-fe1a0ea9c52a.roa (raw, json)
Hash identifier:          SFyJdzcIMapcFojWzrnYSmOJNDyTJL2E5B0CirSRhJw=
Subject key identifier:   CE:15:94:E4:B1:9E:7E:1B:77:01:8B:55:F2:1D:5F:34:B7:17:F1:ED
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A12E42D119505786515AC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1eaf51d5-7ac3-31e5-9e32-fe1a0ea9c52a.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11426
IP address blocks:        173.42.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:2e:42:d1:19:50:57:86:51:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=41008a3e-2214-4b25-8167-673d661db0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:c9:d9:b5:ea:60:16:72:bd:d9:20:6c:5a:
                    e6:e6:e4:c9:e4:37:f1:0a:95:d9:d0:bf:39:bf:67:
                    14:b4:fa:4a:3d:03:b5:a7:04:86:6b:45:37:63:06:
                    88:3c:3c:9a:10:da:8d:f9:67:c9:ad:b5:2d:ae:1a:
                    50:94:86:f9:d9:5e:dd:d5:88:7f:86:b8:12:3d:57:
                    2d:a3:73:71:3b:a4:03:59:ca:a1:57:b8:d7:33:81:
                    dc:dc:f3:81:7c:55:f3:94:b5:89:32:45:fb:e5:27:
                    0f:57:6c:39:2d:b8:cb:7d:fd:cb:af:be:ac:ad:69:
                    85:82:d8:2d:f3:5a:df:2d:cc:dd:58:bd:d4:dc:c4:
                    f7:99:31:4b:75:fb:ab:0f:46:c3:08:a9:1b:34:ad:
                    12:a3:22:85:2b:4e:e1:be:43:12:e0:b5:42:ae:64:
                    d9:46:c0:ae:7c:95:e1:b8:ae:ce:4b:95:67:a5:9c:
                    dd:35:83:0c:5e:a4:bd:e6:bd:86:60:40:1f:36:f1:
                    a8:e0:97:54:56:39:19:c1:b6:08:5c:16:6a:79:5c:
                    27:aa:b8:91:dc:50:b7:f8:ab:bb:61:6e:49:7e:0a:
                    d8:c7:42:41:4a:78:91:ca:c7:4b:47:8e:31:bb:bf:
                    c8:42:b2:87:14:bb:72:cc:67:39:93:71:f4:3e:b1:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:94:E4:B1:9E:7E:1B:77:01:8B:55:F2:1D:5F:34:B7:17:F1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1eaf51d5-7ac3-31e5-9e32-fe1a0ea9c52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.42.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:76:20:ca:9b:cf:ee:be:3a:c5:e4:d1:b2:99:0d:f6:60:
         11:a9:76:e3:01:72:bd:41:4e:6b:3a:41:f1:4b:6a:0b:07:54:
         98:32:dc:47:88:4a:33:93:6a:84:bc:56:af:85:f1:86:7b:cc:
         42:d5:b6:e2:4f:2f:70:98:5d:27:f4:0b:6e:65:ed:e3:b0:52:
         3a:55:46:92:41:e5:0e:91:61:b4:65:19:1f:27:43:02:8f:5b:
         fc:f5:6f:c8:79:19:e2:3c:66:96:ba:76:d4:08:0c:e4:37:5a:
         03:88:ff:29:f0:d9:e7:50:52:5d:ab:9f:dc:f1:22:55:aa:40:
         a2:66:3c:69:ee:99:f0:9d:3f:c6:74:08:a9:a3:f7:32:5a:a3:
         1c:4f:e9:50:9f:9f:6e:a4:6a:7b:de:4d:0e:1b:6d:be:c2:3d:
         41:26:4b:52:a9:24:c8:68:ac:ec:dc:db:51:1d:35:6b:7e:95:
         ad:9d:1e:14:55:47:fb:f0:78:7d:f3:7a:c8:ca:b4:91:34:42:
         56:6e:15:a2:d6:76:a2:f1:eb:45:e6:c2:6a:f0:a4:49:c3:49:
         c0:6b:65:a9:c9:00:e3:8b:f4:05:43:ce:61:86:2e:10:17:ab:
         30:27:c1:9a:20:53:4a:6c:d3:98:b9:84:6b:ac:79:08:3c:0f:
         df:9b:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:31:14 2024 by rpki-client on console-fra.rpki-client.org