Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3eac3cc1-77d0-3fd5-8b6d-dbbd33f5a809.roa
File:                     3eac3cc1-77d0-3fd5-8b6d-dbbd33f5a809.roa (raw, json)
Hash identifier:          Z0X6mWLXem/zv9IDNuISYsJgPEDJGMQJr0gyufmOj0U=
Subject key identifier:   CC:1A:84:25:D2:09:9E:37:CB:30:BF:8B:2B:F2:30:E7:16:50:1D:23
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E7325EC2EB7753D05B740
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3eac3cc1-77d0-3fd5-8b6d-dbbd33f5a809.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        24.73.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:73:25:ec:2e:b7:75:3d:05:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=da799f78-fb5a-46a9-92ec-989b159d370b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:2b:4a:8d:6a:43:42:6b:0c:7f:14:e4:8d:
                    5e:28:53:4f:09:2f:cc:0d:33:70:bc:40:a8:97:34:
                    38:d0:1b:90:6f:21:95:86:05:e6:49:b9:4e:f1:32:
                    45:d3:0a:7e:7d:84:05:66:1c:38:3c:e6:97:27:ba:
                    65:5e:9d:ee:87:ac:91:3e:89:4a:5e:66:1f:a7:65:
                    87:a8:9e:09:85:9b:bc:6e:d9:d8:30:83:e8:8e:e2:
                    63:74:80:5e:b5:28:ce:7a:e4:0b:7f:3f:dc:3e:41:
                    94:63:38:79:53:8a:82:55:a3:77:59:c3:ff:d7:5d:
                    0b:bf:29:7d:31:05:5a:7c:bb:61:61:2e:e8:1c:af:
                    77:6a:28:87:6c:a8:7a:fc:ba:8c:ac:2b:d8:b2:58:
                    55:dd:8a:c8:bc:05:99:92:4a:86:6f:6e:e9:bb:cd:
                    ed:32:6d:7b:31:16:1f:28:7a:3c:da:e5:d8:2c:a3:
                    5b:83:a1:4d:4c:92:9e:36:8c:d6:bb:79:78:c9:16:
                    9e:a8:65:50:4a:0d:b7:62:b4:3f:42:ba:78:18:c7:
                    03:96:98:6f:5a:07:9c:08:1f:92:af:a9:70:05:ad:
                    bd:24:93:50:79:eb:60:fc:d1:fe:54:ea:30:1f:c9:
                    71:a3:b8:86:e0:15:b6:9d:ac:30:20:41:d7:ff:db:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1A:84:25:D2:09:9E:37:CB:30:BF:8B:2B:F2:30:E7:16:50:1D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3eac3cc1-77d0-3fd5-8b6d-dbbd33f5a809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.73.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:7e:c6:c0:5e:c7:58:53:7a:88:d1:34:15:88:19:4a:64:
         10:a0:22:9e:92:05:23:39:f3:d5:8f:40:01:7a:fe:81:a7:4a:
         71:c6:6d:1e:48:ea:31:41:3b:12:9e:89:23:c5:41:22:d9:18:
         e6:c7:1e:a3:a9:2f:ac:79:90:f0:70:23:d9:d0:47:86:f4:ce:
         a5:6a:ca:46:a6:3b:34:6c:c7:2c:ff:2b:f8:bf:42:41:53:94:
         ce:64:f2:2d:3e:45:8a:e3:8c:5e:9c:e6:af:90:bb:04:13:f1:
         f7:3f:cf:69:79:d7:88:26:85:39:b5:35:d8:98:2d:cc:6e:55:
         63:51:77:97:c7:63:34:28:27:bc:3d:ec:59:d4:f8:42:b3:37:
         64:85:71:cc:3d:df:43:45:21:3b:81:e6:6a:7a:bb:67:86:f4:
         b9:81:a9:34:0f:8e:6c:9b:b2:12:f9:36:9b:a1:00:bc:63:a2:
         d5:5f:a5:34:c0:e5:bd:75:5d:03:45:e3:48:77:10:62:df:89:
         90:5c:78:85:b0:ff:f0:1d:7c:9f:07:a0:ab:96:a5:37:d2:45:
         e1:37:65:fb:0e:ce:d8:02:f9:92:2c:52:a7:cc:04:50:f2:3a:
         99:c7:21:4a:7b:0a:f4:e2:24:af:da:7b:b3:0b:1e:61:72:68:
         9c:3d:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:36 2024 by rpki-client on console-ams.rpki-client.org