Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4597645e-e397-3aed-beb7-1051790b8e3c.roa
File:                     4597645e-e397-3aed-beb7-1051790b8e3c.roa (raw, json)
Hash identifier:          10EmBI0dS4IAZ7g1vRKY9ttf6ZlT+IVIil4/hO9dFrg=
Subject key identifier:   F2:9F:FA:87:63:CD:35:C7:4C:69:CE:08:58:02:F5:41:DE:F3:FE:B3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A08E963C4763A0DCF69C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4597645e-e397-3aed-beb7-1051790b8e3c.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        67.52.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:8e:96:3c:47:63:a0:dc:f6:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b389d0e7-7524-4020-b8ca-3351212cfa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:64:8b:68:44:95:2a:26:c1:41:62:98:8a:
                    6f:f4:01:45:3d:05:6d:2c:a9:14:92:ce:09:9a:2b:
                    d7:99:06:af:25:11:29:84:3d:3b:d8:34:19:b7:d4:
                    a5:c3:8e:0d:53:cf:9c:93:87:09:25:48:6a:16:0c:
                    c6:0a:a9:5a:f0:11:7f:80:dd:03:af:59:09:92:32:
                    ed:86:ba:2a:f1:11:d9:a4:08:d4:a3:77:47:1d:3b:
                    47:a3:a9:ed:df:a7:75:6c:2c:5e:57:6b:37:64:33:
                    a5:ab:99:ab:0e:4f:c3:2d:ff:10:31:24:76:ea:ef:
                    25:32:a5:12:32:14:75:b6:e9:a7:d9:85:82:8c:1f:
                    4d:bf:33:6b:f8:29:f0:25:58:72:51:3a:66:8f:5a:
                    f8:1f:2e:ec:b3:f3:84:4c:5b:1e:3e:25:48:76:56:
                    45:d4:8e:33:09:70:3f:51:d9:2c:7c:a1:d6:f1:23:
                    a3:39:bf:f2:8b:7a:cf:09:25:09:13:d2:62:27:27:
                    55:00:38:9e:4f:9e:89:bf:04:75:b1:19:43:fb:1c:
                    51:26:3f:a9:f7:63:5b:88:ed:40:e6:a7:9f:7a:3c:
                    a3:53:97:bc:af:37:82:fa:c9:9b:89:53:3f:7f:9e:
                    18:30:40:10:e5:e2:78:6f:56:c6:fb:2b:8e:d0:23:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9F:FA:87:63:CD:35:C7:4C:69:CE:08:58:02:F5:41:DE:F3:FE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4597645e-e397-3aed-beb7-1051790b8e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:db:9c:a6:3e:e8:f1:52:96:80:37:23:bf:14:b2:b6:14:
         fe:84:14:f4:d3:2a:32:1c:e8:d5:c3:4e:2a:7a:ed:97:6b:5c:
         6c:0b:f5:6e:b5:b9:a6:d6:80:9c:97:c3:30:23:57:5a:d2:07:
         e0:49:99:ea:83:ce:ea:bf:e1:bd:15:8e:02:49:07:7f:83:2d:
         94:80:c6:6c:5a:a4:40:83:3b:c5:ef:9a:69:0b:f6:39:e6:8f:
         ba:df:66:63:02:1f:81:47:2c:01:f3:96:96:2d:e7:23:7e:70:
         bf:6e:c8:2f:0e:9a:73:23:b4:a4:a8:78:9e:a2:00:5d:9e:dd:
         f8:f1:b9:83:97:86:83:58:50:2b:c1:ea:51:b2:99:06:08:32:
         a4:a3:d4:16:3b:99:f4:cb:73:8d:1a:d3:7c:92:4f:5c:b0:7a:
         3c:f7:ae:43:9c:0c:3e:7d:e5:22:18:21:9d:bb:0a:24:35:ff:
         a7:39:a2:7f:4b:b2:7c:6f:84:78:2a:7b:de:2a:13:39:f5:6c:
         ec:ba:fc:58:fd:1e:d0:97:38:7b:9e:45:63:47:74:d5:fe:6d:
         e5:e3:54:07:f4:db:0d:60:65:71:e1:b5:35:81:c6:1c:42:6b:
         d4:16:fe:75:1a:2f:20:a8:c0:c9:37:a7:33:e1:7d:90:3b:be:
         08:a6:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:26 2024 by rpki-client on console-fra.rpki-client.org