Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2685094d-f389-348b-b486-0f15312b0906.roa
File:                     2685094d-f389-348b-b486-0f15312b0906.roa (raw, json)
Hash identifier:          vtHkDonJ/Hwh2dJMX91yY/WZUYNvH2FHNp2P4d2jLoU=
Subject key identifier:   63:17:69:E2:3A:91:05:A3:85:04:22:94:8F:B9:98:3F:F8:9F:8A:77
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E59338FFA4D879925C720
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2685094d-f389-348b-b486-0f15312b0906.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11426
IP address blocks:        198.20.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:59:33:8f:fa:4d:87:99:25:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=8ab0c55c-ea0a-4903-9fac-131b6ca75ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:d4:92:77:2f:78:09:dd:37:97:39:9c:29:
                    0d:8b:80:37:88:5b:d1:f3:97:1b:ea:82:29:b2:af:
                    a9:da:4f:78:08:1a:86:6b:07:9b:83:7e:f5:5f:24:
                    59:4f:4f:42:98:8e:2a:02:31:87:95:1e:f1:ac:25:
                    62:32:d8:b1:b6:23:22:e2:12:e4:1c:e2:7e:4c:7a:
                    2e:15:48:f2:06:71:88:7e:80:54:e0:5c:a6:74:08:
                    03:a1:f6:48:9c:c9:bc:bd:dd:f4:31:35:28:a3:da:
                    df:2c:37:cd:48:fc:17:23:48:d3:be:98:b0:ce:7e:
                    00:e5:04:90:35:12:cf:0a:03:6e:d4:7c:e0:06:34:
                    12:65:c9:77:fc:8f:80:55:a1:cb:af:92:dc:93:00:
                    d6:ab:05:05:c6:82:ac:50:88:2a:b1:f8:b7:4f:03:
                    eb:02:19:a4:42:94:a0:28:ff:de:38:2b:11:4a:88:
                    41:d5:e3:bf:cb:94:8f:8c:a9:24:53:49:95:ef:94:
                    e6:44:f1:f3:7e:9c:bc:7d:bf:f0:c2:88:14:5f:58:
                    2a:bc:02:90:89:42:51:de:9a:4f:f5:4a:fc:23:7e:
                    fe:4a:9c:8a:9c:13:2f:18:a1:bf:1a:95:af:d7:34:
                    63:e2:c0:ef:5e:30:14:c7:fa:20:fa:51:cb:bd:79:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:17:69:E2:3A:91:05:A3:85:04:22:94:8F:B9:98:3F:F8:9F:8A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2685094d-f389-348b-b486-0f15312b0906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:e3:78:24:f1:93:66:e0:78:ed:27:2f:ef:7e:d0:08:af:
         a6:79:2f:dd:8b:32:1d:d2:cd:ca:fa:9e:40:b2:1e:00:e1:e0:
         00:2a:8c:77:4f:cb:68:d6:49:43:0e:bb:62:6a:46:76:8e:60:
         58:81:df:7f:2e:43:10:32:83:f9:2e:31:30:bf:22:aa:5b:b3:
         b7:79:a7:65:00:f6:73:cb:f5:ab:53:63:13:c6:d8:c4:f3:ef:
         58:a3:e1:d8:9e:da:6c:1e:c4:ed:86:e6:3e:5d:a2:23:e0:23:
         f0:9f:f7:0a:c6:5e:71:e0:09:98:91:bf:83:d0:97:b2:18:08:
         75:41:26:35:8d:9f:ff:8d:db:b8:ba:ad:04:8a:c4:1f:b4:52:
         10:df:f8:40:ca:00:a1:ca:53:35:9b:96:6c:63:82:19:c5:55:
         68:8c:39:49:e6:96:44:66:ac:77:1a:80:ba:ca:56:b0:52:cb:
         58:a4:12:22:00:2c:70:1b:17:8b:c1:10:89:20:23:c4:21:73:
         fb:70:a6:f2:9a:28:d7:f5:4c:6c:69:16:98:1c:04:a1:03:c4:
         3c:15:0c:52:1d:69:6c:54:5e:16:4d:20:d8:1e:79:eb:fc:17:
         02:90:97:e6:38:56:fc:86:38:81:38:0c:c2:b9:55:74:c0:fc:
         a8:c8:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:37:16 2024 by rpki-client on console-fra.rpki-client.org