Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a1c5199-f34c-3cbb-a7e5-1b1c6d576662.roa
File:                     4a1c5199-f34c-3cbb-a7e5-1b1c6d576662.roa (raw, json)
Hash identifier:          fHg2zJ2Tf5UO0BKr2cy3la8qiobKn6sq/WU1cs/klpY=
Subject key identifier:   BF:50:3C:9E:1F:64:B0:95:ED:CB:FA:3A:54:5D:91:79:F1:52:53:08
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCEF32067B6F698C2FEA840
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a1c5199-f34c-3cbb-a7e5-1b1c6d576662.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     10796
IP address blocks:        24.172.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:f3:20:67:b6:f6:98:c2:fe:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=037d3d2a-2e51-4f2e-b7be-38d5ebb7e5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:0b:0d:38:72:f0:13:3d:b0:a0:de:da:65:
                    8e:e7:5f:e0:46:4a:20:0a:db:8f:ab:3f:bf:2e:8f:
                    f7:1a:2c:f8:16:be:79:e6:11:66:e8:9d:0d:fb:29:
                    96:dd:9c:ce:6f:83:76:7f:2d:00:98:46:7d:ed:68:
                    67:5d:76:8b:eb:27:4c:b2:ae:61:3d:19:7a:29:a7:
                    d9:5c:99:db:92:31:9a:f5:75:72:b6:5b:24:d9:56:
                    f9:77:44:a9:46:df:c3:fe:63:d8:18:86:f7:dd:3f:
                    d2:a0:93:8c:4b:ce:56:0b:e6:58:2b:b9:6b:6e:38:
                    43:55:00:70:14:43:42:ea:ce:99:57:f9:e0:f5:f6:
                    33:ef:32:aa:18:3e:01:5b:0a:a6:6e:39:4d:96:29:
                    80:76:82:10:35:67:ea:7b:65:fb:9a:4f:10:fa:24:
                    e4:e1:2b:aa:55:42:14:d6:0d:c8:94:f1:01:6a:b6:
                    dc:59:d9:a5:15:0e:0f:3d:7b:d6:75:93:30:ef:1c:
                    f8:4e:9f:ef:0c:fb:b1:ef:61:b7:20:ee:0d:16:f6:
                    22:de:5a:9d:00:30:65:f7:38:96:7c:58:0b:b5:37:
                    2e:18:9e:88:1a:db:7d:47:f3:b3:b4:0c:93:a9:1c:
                    b7:cc:72:2a:5c:71:68:c9:e0:c4:0e:6c:5b:9e:7b:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:50:3C:9E:1F:64:B0:95:ED:CB:FA:3A:54:5D:91:79:F1:52:53:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a1c5199-f34c-3cbb-a7e5-1b1c6d576662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:90:df:00:c4:42:e4:e9:70:fc:18:15:50:d0:50:83:2c:
         77:d1:87:c3:74:f4:6e:ad:d5:af:5a:1f:2d:e7:aa:be:cb:42:
         c5:ab:03:8c:ff:a7:06:57:41:a0:8c:59:9f:cb:3e:2f:22:b2:
         c6:6f:1a:a4:84:ab:92:5f:17:54:8e:78:92:10:c6:ef:90:c0:
         20:4b:99:c4:8b:02:40:4e:ca:40:3c:05:67:ad:43:06:a7:98:
         91:4e:48:c6:55:92:63:a9:e6:c9:96:d4:c1:02:e8:c7:91:8e:
         72:06:d3:b5:10:46:64:d3:ff:3d:4b:98:c1:12:72:88:3b:aa:
         73:87:f9:4b:01:cd:76:b8:7c:7b:ca:59:0c:0b:64:30:16:89:
         8f:05:2c:f0:e4:3f:0c:b0:ea:4e:be:3c:b0:39:bb:d7:26:cd:
         ee:eb:4f:e9:b0:75:58:53:5c:f1:36:de:4d:0a:98:40:25:bb:
         76:82:c5:96:aa:7c:9f:86:7f:55:75:b6:41:98:65:ae:98:47:
         56:49:b6:88:c4:35:95:02:07:8d:c9:cb:c5:d6:bd:72:ef:be:
         11:ab:fd:16:b3:92:51:24:8c:c3:d4:dd:91:ab:57:a3:1a:e2:
         e6:3e:16:73:19:6e:41:a1:c1:3e:7e:e3:75:e5:4c:58:c5:ea:
         77:78:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:19 2024 by rpki-client on console-fra.rpki-client.org