Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/48426684-cfb8-3292-b5a7-a5fd0772a21d.roa
File:                     48426684-cfb8-3292-b5a7-a5fd0772a21d.roa (raw, json)
Hash identifier:          NzTztRdgJylKd2BPrjrABiQOVLc27yO/mtE7O2DoOJ0=
Subject key identifier:   7A:31:18:12:0B:3D:AD:E4:F3:5F:D6:C3:AB:5C:F6:D0:E0:1D:28:0D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF10B3C49C2CAC59C215B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/48426684-cfb8-3292-b5a7-a5fd0772a21d.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     13343
IP address blocks:        24.166.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f1:0b:3c:49:c2:ca:c5:9c:21:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=b05a9fe7-006d-4904-9445-d524743379ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:8a:bc:89:11:76:35:ca:a0:3d:56:e9:fc:
                    20:be:3f:e3:cb:11:89:a0:b7:e7:b4:1b:8a:31:36:
                    42:2e:74:82:57:18:73:51:32:27:0c:71:72:93:58:
                    56:b5:73:a3:bf:18:9e:59:74:02:a1:17:23:ed:1d:
                    10:a1:b1:f5:0e:7f:f7:f7:4c:77:37:c7:ff:91:3d:
                    32:16:ec:88:5a:ca:ab:d3:7f:2c:cd:da:d4:e2:f3:
                    a7:ff:66:25:c3:87:cf:3d:52:8b:e6:a3:ad:e2:44:
                    68:ee:ba:40:c1:2d:af:3d:17:03:53:a6:c5:e5:65:
                    81:fe:a9:ed:5f:f2:42:5d:e1:0c:4b:44:23:f6:77:
                    2c:c7:d4:97:5b:29:26:a1:51:fe:93:70:d9:22:7e:
                    e3:df:ea:c8:ef:d5:88:4d:75:d6:c0:2c:fd:b4:80:
                    d4:c1:dc:04:86:71:9d:bf:b0:79:73:69:2a:cc:94:
                    6c:d9:7e:f1:ee:67:33:26:8d:0c:8c:5d:70:e2:71:
                    0c:79:7d:7c:9c:bf:b1:61:72:98:8d:bf:73:0d:23:
                    c4:e7:3e:55:5e:3a:b8:ef:7f:3f:4f:54:4c:67:1b:
                    ee:7f:59:cc:03:28:a6:b9:be:43:d3:b1:8b:d8:49:
                    14:0b:96:c1:56:f7:7a:1d:2a:ac:0d:39:d9:78:87:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:31:18:12:0B:3D:AD:E4:F3:5F:D6:C3:AB:5C:F6:D0:E0:1D:28:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/48426684-cfb8-3292-b5a7-a5fd0772a21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.166.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:9e:4d:c4:13:be:38:aa:41:ef:a8:6b:bd:ae:95:fc:7d:
         a9:7c:bc:1b:ae:32:d7:cb:9b:fa:a6:1c:e3:b7:06:ee:9e:c3:
         3c:da:67:d8:0a:14:da:8a:49:55:87:aa:a2:2e:eb:91:e0:a6:
         ea:8f:fe:ed:a8:3e:50:5a:84:72:b0:21:2d:4b:ca:e4:8d:1c:
         d8:a9:89:94:8e:2c:73:1f:9d:7d:2c:cb:d1:85:4b:5f:09:4c:
         01:a3:2d:7e:01:55:b8:c7:97:ac:1b:8c:46:f5:49:36:c6:03:
         f6:01:a1:8b:4c:40:42:cd:c0:9b:2d:e4:f2:08:fd:c9:62:1d:
         e5:0b:ea:8f:37:b8:89:9e:c7:ec:e1:43:14:03:e4:13:eb:29:
         83:ba:63:bf:96:41:8d:f5:ec:91:2e:7b:85:c7:fe:ab:4c:27:
         d1:3d:21:36:34:3c:4b:10:8a:32:3b:12:ab:ee:81:15:b3:db:
         61:68:78:86:28:11:c4:68:45:a4:97:d3:68:7c:46:a2:4e:a4:
         6d:e7:8b:12:d1:33:62:a2:e4:09:20:3a:0d:d8:32:6c:3d:bc:
         5e:3a:2c:e7:fd:dd:df:9d:8a:c5:84:ad:24:f9:1d:b1:f0:3b:
         7a:c2:47:a9:7b:77:1a:bf:07:fc:0a:f5:25:12:df:9f:1d:fe:
         19:99:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:57 2024 by rpki-client on console-ams.rpki-client.org