Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2fc1632e-4040-343c-89be-d4d3f06e46ae.roa
File:                     2fc1632e-4040-343c-89be-d4d3f06e46ae.roa (raw, json)
Hash identifier:          hKk2TEydszvfnMdB2B9GmTQ1eGy33oqzPHdB42E5STw=
Subject key identifier:   3E:6A:70:B6:5F:B8:9E:A0:0F:A2:E0:CE:E6:CE:A9:1A:D2:C5:4D:66
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E5758249B339746E7D400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2fc1632e-4040-343c-89be-d4d3f06e46ae.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11426
IP address blocks:        24.25.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:57:58:24:9b:33:97:46:e7:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=8a4a6811-1960-4be4-a436-2dbea8a3828f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:b4:b3:72:50:88:8f:9a:80:21:b7:3c:b3:
                    1d:7d:26:1d:35:87:51:30:51:c0:03:3e:42:0b:f8:
                    37:1c:29:c6:cd:7b:d3:e2:e8:fd:32:ed:18:32:00:
                    47:4c:52:1c:e5:c4:ca:4e:6c:45:a5:0f:0c:fa:7b:
                    8e:4f:6e:e9:da:de:6d:59:8a:94:5e:4f:50:cf:f2:
                    7f:2c:fb:2c:22:6c:aa:c1:53:4a:f0:f2:c3:5a:9c:
                    8f:05:07:9f:94:10:1f:37:3f:64:ee:31:a1:ad:82:
                    3a:9a:ec:6a:7b:a2:07:45:35:28:78:a6:49:b5:ae:
                    50:e9:c9:6d:1a:18:08:28:dc:78:a1:1e:e7:12:f5:
                    87:3a:27:e2:3f:fd:7b:25:0d:89:73:cd:9e:e2:dc:
                    8f:5e:f9:a5:8e:5d:44:ec:97:b0:fe:30:24:5b:4f:
                    1c:52:30:c4:00:82:15:20:b6:ef:53:0a:e8:92:db:
                    63:49:29:b0:b6:63:3f:1b:8a:ce:b7:f1:60:b3:c8:
                    91:44:99:a0:ab:0e:1b:59:83:2f:53:72:c3:76:79:
                    c1:59:02:5d:5f:20:43:92:9e:1d:7a:c5:a3:53:2d:
                    2d:0d:44:c5:4d:45:24:fe:34:ce:5d:47:c5:9d:4b:
                    39:e8:58:d1:24:7a:2d:71:5f:8d:16:fd:7b:f5:c8:
                    16:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6A:70:B6:5F:B8:9E:A0:0F:A2:E0:CE:E6:CE:A9:1A:D2:C5:4D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2fc1632e-4040-343c-89be-d4d3f06e46ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.25.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fa:5c:a4:b7:15:3a:8b:71:a9:a3:13:b4:d9:e2:bb:a7:92:
         a7:d1:fa:db:9d:3b:83:87:83:d2:2e:60:ab:b6:3c:e9:92:08:
         ff:ea:1c:55:0f:d5:c6:fe:13:cd:71:ee:cb:e7:ab:40:08:a1:
         63:d3:2a:b7:d9:77:66:2b:be:f1:46:21:92:43:db:27:4c:30:
         b8:c8:5e:86:1e:d1:f2:65:f0:f2:94:5f:d9:f2:8f:57:dc:db:
         dd:b4:05:29:bd:92:1e:5e:ee:12:60:f6:39:38:5c:e3:6d:70:
         dd:4d:3c:39:a8:47:93:90:07:44:8d:51:3d:ae:ce:d3:07:e3:
         41:42:f4:e5:55:71:11:b1:e0:f0:1f:e7:7c:ec:34:8b:5f:11:
         42:ed:42:17:23:1a:76:ef:d4:5b:cb:81:ee:8b:30:91:db:91:
         a3:29:ab:a5:06:02:bb:54:95:82:ca:2b:d3:ec:8c:0e:8e:53:
         9e:1f:29:db:56:85:1b:6c:1e:fa:e9:a3:58:0b:7c:8a:82:2a:
         fa:df:79:a9:bd:8e:f8:ec:28:5f:a9:0e:11:91:43:e2:ad:f8:
         81:fa:7c:8d:61:32:b8:6f:32:ed:a4:83:e9:52:a9:c5:b5:93:
         45:15:1a:4c:86:65:9b:86:15:3e:48:a5:4d:88:16:65:c8:f9:
         82:80:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 16:12:57 2024 by rpki-client on console-fra.rpki-client.org