Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58f87b92-4912-3af5-8df0-87789ff9ac0c.roa
File:                     58f87b92-4912-3af5-8df0-87789ff9ac0c.roa (raw, json)
Hash identifier:          cSkRBoFYwguY/InmN5kNGlO6HtuKQXVzz5i1HKUe9Y8=
Subject key identifier:   F4:BD:9D:58:AF:2D:74:E0:B2:C3:0D:57:B0:41:9F:D3:C9:4D:3A:35
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A11A89B109B73C8467C9C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58f87b92-4912-3af5-8df0-87789ff9ac0c.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        107.14.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:1a:89:b1:09:b7:3c:84:67:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=672ffdb1-d041-468d-8e6f-97772d94a526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:14:0e:b0:54:a1:46:d4:53:94:26:5c:76:
                    89:a6:ee:8d:9d:fe:8c:66:90:f5:dd:f9:81:92:9e:
                    c5:49:9f:b9:6c:63:62:95:69:5a:07:34:23:2b:e9:
                    8a:cd:6e:4c:5e:e8:3f:a9:ce:02:6b:71:03:fd:ab:
                    56:de:e6:9e:e1:60:e1:34:10:b9:f2:99:d6:2e:81:
                    76:86:9e:d5:37:0f:39:5e:05:9c:7c:2e:06:49:25:
                    ed:8c:02:15:c2:38:dc:7c:86:00:ba:c7:30:3f:bb:
                    b3:4d:a5:4b:cd:3d:83:d6:7a:f6:c1:1d:c0:19:4e:
                    a8:38:4b:91:cf:c1:41:ea:d6:9a:51:e7:6e:8c:7f:
                    7d:70:d4:c5:3c:72:7b:c0:56:b9:fa:d8:8e:9e:a3:
                    79:3b:4a:ed:45:bf:68:50:86:4a:50:aa:0a:22:1a:
                    d5:d0:64:29:45:8b:ba:55:b5:e1:d2:f5:0a:e7:0a:
                    ea:10:32:95:71:88:11:19:20:cd:c9:3f:ed:90:fb:
                    1b:ff:ff:90:4d:90:1e:2f:63:0d:5a:11:90:50:b7:
                    5f:75:56:8b:72:6f:e3:19:81:dd:58:d7:c7:ed:ac:
                    90:3a:6f:9f:a2:de:b5:ad:2a:6a:7e:34:8d:13:a4:
                    77:91:60:15:0d:c1:6a:d5:2e:32:fd:54:4f:4d:d4:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:9D:58:AF:2D:74:E0:B2:C3:0D:57:B0:41:9F:D3:C9:4D:3A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58f87b92-4912-3af5-8df0-87789ff9ac0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:2b:11:23:db:a1:2b:45:3a:cd:6d:b1:2f:b2:67:25:8b:
         2c:98:ec:a1:77:71:3f:c8:db:25:79:d5:8a:ea:5e:0e:eb:01:
         10:60:12:bd:02:f5:04:c5:a3:8c:57:cc:d7:24:95:06:3b:e9:
         1e:85:51:b9:60:3e:60:dd:1c:4b:57:6a:b7:10:7d:fe:e4:72:
         b0:f4:a7:86:f4:af:1d:5a:75:dc:02:f0:05:a8:a4:9a:db:48:
         0d:1b:28:bd:75:0b:7d:dc:90:b9:93:71:f0:15:22:7d:e1:45:
         32:1f:d9:fb:f2:e6:67:f5:e2:28:91:cd:f0:60:c3:7d:98:1d:
         85:c9:58:0d:58:07:72:09:e8:b0:f3:bf:fe:1c:20:9a:42:d8:
         69:33:5f:2c:49:8a:09:92:a0:78:c6:43:16:81:d4:58:8e:fc:
         d5:c6:48:20:c9:b6:79:2e:53:d7:5d:b0:bd:1e:dd:79:df:11:
         05:d0:01:6b:29:a9:7a:1a:e3:f6:15:eb:ae:c1:ff:bc:9e:27:
         de:f0:6e:91:f4:d1:2b:fc:c8:f4:ca:3e:a2:84:d9:6a:21:24:
         40:a8:a0:a0:ee:94:9e:59:4e:dc:ca:ef:1a:03:bb:c8:0c:36:
         9e:1d:64:b0:40:38:48:86:02:58:fb:68:30:24:e4:62:4b:b6:
         ba:98:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:27 2024 by rpki-client on console-fra.rpki-client.org