Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecfe410-a22d-3db2-82eb-a258ea860b3a.roa
File:                     3ecfe410-a22d-3db2-82eb-a258ea860b3a.roa (raw, json)
Hash identifier:          ISy1MZgtI5UA193YKREvIeuZmbwA5A45YjPBNXquJWM=
Subject key identifier:   8A:84:26:F9:E9:C3:A2:07:68:96:30:11:E4:87:D4:F7:BD:3B:83:3F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A09A084BBB56AA2A824900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecfe410-a22d-3db2-82eb-a258ea860b3a.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11351
IP address blocks:        24.29.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:9a:08:4b:bb:56:aa:2a:82:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=9e4d9020-6e4b-44b1-9e23-923937979f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:48:42:e0:f9:c9:d9:ad:ca:c9:0f:e6:de:65:
                    e2:4e:a2:45:a6:cc:b1:9e:84:40:bf:56:96:44:62:
                    48:00:98:8a:3c:42:6b:42:a9:96:21:e9:d5:e1:63:
                    fe:43:8b:7d:44:eb:19:3d:5d:0c:44:4e:4c:55:ae:
                    11:89:8b:01:60:3d:18:cd:5a:a5:bd:44:05:93:83:
                    7c:43:c7:30:7d:37:cf:a3:1b:b3:a7:c6:f0:a7:b6:
                    ad:ae:f6:00:61:2b:5a:55:36:17:c2:c9:57:5d:37:
                    99:f1:65:25:30:2c:b9:12:74:d3:3c:94:66:09:23:
                    9f:6f:24:7a:0e:38:a8:53:10:c3:d6:55:d8:a5:ce:
                    d1:f2:48:f0:8e:88:11:04:ef:83:0b:59:ef:17:d5:
                    27:d7:ed:4a:da:0a:b6:5d:32:e5:b4:e4:9a:b8:b7:
                    00:0d:8d:68:cc:61:9f:2c:52:d7:32:6c:85:4c:a9:
                    9a:df:c5:a3:4b:ea:60:3d:80:f4:92:d0:75:03:e9:
                    c8:6d:3d:28:84:2d:ed:98:1e:bb:1c:0e:11:66:2f:
                    a2:32:53:61:35:89:59:45:51:04:50:ab:b8:dc:db:
                    1a:f6:da:38:4f:af:1b:61:c5:86:00:90:c0:1e:e0:
                    47:ea:fa:40:56:23:8d:27:db:b9:0c:e9:9a:07:90:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:84:26:F9:E9:C3:A2:07:68:96:30:11:E4:87:D4:F7:BD:3B:83:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecfe410-a22d-3db2-82eb-a258ea860b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.29.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:d1:a5:92:94:eb:56:19:e0:4a:c4:c4:6f:00:0e:d4:76:
         f8:49:97:b7:8d:6c:df:38:58:1f:2c:ee:10:b7:58:42:bd:f1:
         39:fe:2d:ce:0c:96:96:69:72:cf:46:65:52:b9:7b:2c:d3:f8:
         68:56:be:9a:ac:e4:e7:2c:ff:47:b1:1a:a4:3b:d3:08:50:47:
         95:1e:15:d8:b9:06:f6:e6:da:6c:48:8c:47:ac:2b:a4:91:fb:
         62:64:ae:08:82:24:6b:24:4d:df:e6:2c:62:0e:d5:55:0f:8e:
         eb:8e:dc:fa:b9:81:ce:c6:d0:69:88:68:26:ae:6a:2b:5d:49:
         cd:81:3c:2c:50:86:36:f4:3d:15:bf:26:ec:5b:c9:91:53:9e:
         19:c4:45:d3:fc:bd:f6:53:24:98:7d:7a:d6:fd:c3:32:f5:76:
         79:d5:84:cd:ee:88:a9:eb:7a:5a:a5:57:7a:b3:11:7e:d5:ea:
         1f:86:95:56:9c:1b:70:3b:0e:cc:58:c5:80:ad:bd:b8:22:3e:
         1a:09:ea:36:ef:8b:a3:a4:51:7f:01:15:13:ea:14:c6:fc:5b:
         8b:70:b7:f7:3b:82:c3:e7:1f:11:98:ca:eb:b7:0b:cc:b3:9b:
         65:d7:95:c4:e0:8a:35:6c:81:73:3d:5f:c2:64:05:04:b0:16:
         d1:31:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:25 2024 by rpki-client on console-fra.rpki-client.org