Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59f14424-24c2-3680-ade4-d5263abc5a02.roa
File:                     59f14424-24c2-3680-ade4-d5263abc5a02.roa (raw, json)
Hash identifier:          2v9eSqxczBx3OAKLadPWlY634UGr4ZhzsASNSDzpPlA=
Subject key identifier:   36:82:1F:9E:45:CB:44:6D:1F:D1:9E:03:D9:B5:EF:8F:09:28:06:AB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A2A61AB761EE7BEED100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59f14424-24c2-3680-ade4-d5263abc5a02.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        24.160.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a2:a6:1a:b7:61:ee:7b:ee:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=53fbf7ea-ab33-4606-8a74-b778005ec7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:e8:dd:fd:7b:09:3d:a3:9f:88:79:0b:aa:
                    eb:c4:43:11:1a:f6:b2:fc:78:d3:94:b4:fd:9a:68:
                    0e:04:b4:e5:e8:19:10:7e:52:0f:a6:d4:a6:b4:dd:
                    b2:21:3a:f7:d1:67:dd:73:3c:87:90:bd:b5:e5:1e:
                    e1:32:df:78:3f:7f:66:b1:6b:8e:76:f6:a4:14:1a:
                    57:32:a6:fe:5f:82:93:7a:31:8d:c8:ff:2a:fb:78:
                    ff:15:6a:4d:28:ba:de:8b:64:91:86:e2:fb:73:d7:
                    00:63:36:e6:66:2c:6c:12:a6:78:34:a4:70:a0:e1:
                    cd:01:75:3f:24:d7:62:f6:20:a0:59:9e:3d:d8:e4:
                    fe:0e:20:2a:d0:2e:64:ea:9d:1b:69:b5:ca:00:56:
                    2e:bb:46:27:59:0e:45:09:a9:72:3b:4a:80:1a:7b:
                    12:23:f3:0f:cb:8e:82:99:0a:45:7d:d7:35:c5:83:
                    04:14:a6:a6:f5:fc:c5:ee:db:5f:d4:70:40:79:d9:
                    61:57:d5:44:91:73:d7:d4:97:55:9c:b2:9c:29:db:
                    01:94:1a:9b:4e:fc:47:a8:ed:f5:c5:70:76:d1:2f:
                    29:2b:4e:61:0a:ee:b4:ff:04:36:91:c2:27:1c:92:
                    a5:c8:85:e9:84:8f:cf:63:62:74:fc:aa:33:c4:89:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:82:1F:9E:45:CB:44:6D:1F:D1:9E:03:D9:B5:EF:8F:09:28:06:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59f14424-24c2-3680-ade4-d5263abc5a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:66:a7:ef:df:0e:9c:5f:47:1c:0c:a6:46:eb:79:e8:e6:4d:
         8a:07:9a:fe:2b:a7:c9:f8:40:9c:9b:43:89:f1:57:9a:8d:0a:
         53:5e:d7:f5:8e:b1:aa:3d:f8:bd:9b:b7:9d:e4:7c:13:67:a8:
         05:17:cb:22:40:a6:71:76:6c:39:fe:58:b7:7a:cc:dd:be:76:
         27:f8:9e:2e:c5:8a:5d:5f:43:f9:fc:a7:65:0a:4f:15:ea:b8:
         a0:b2:86:8c:ff:9f:43:a1:49:45:12:48:36:f7:7e:ef:d9:a3:
         b8:ea:12:e3:f0:cb:b4:5e:79:8b:30:e2:68:97:ea:cb:f2:e4:
         3d:0c:79:4f:97:db:14:e6:ec:3a:2f:d7:5a:b5:52:11:dc:8e:
         9a:97:6a:30:fb:33:1c:ec:0c:05:11:11:68:6d:93:31:c3:f7:
         f3:f6:21:9d:48:1c:01:72:cb:0d:9e:c6:ec:85:c9:b3:10:16:
         8f:52:a2:88:fe:17:e4:19:4c:e1:43:f7:79:23:b3:82:14:96:
         3b:aa:3c:a9:73:79:32:6f:9a:e2:4a:f1:c0:c1:a2:a0:1a:75:
         aa:b5:50:8b:97:f7:e4:9a:b0:86:32:66:5e:6f:cc:b0:a5:20:
         c1:75:06:fe:b9:02:f9:ee:8d:fa:86:cc:97:65:b8:4c:46:7a:
         be:3a:d4:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioKKmGrdh7nvu0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NTNmYmY3ZWEtYWIzMy00NjA2LThhNzQtYjc3ODAwNWVjN2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQLo3f17CT2jn4h5C6rrxEMRGvay/HjTlLT9
mmgOBLTl6BkQflIPptSmtN2yITr30WfdczyHkL215R7hMt94P39msWuOdvakFBpX
Mqb+X4KTejGNyP8q+3j/FWpNKLrei2SRhuL7c9cAYzbmZixsEqZ4NKRwoOHNAXU/
JNdi9iCgWZ492OT+DiAq0C5k6p0babXKAFYuu0YnWQ5FCalyO0qAGnsSI/MPy46C
mQpFfdc1xYMEFKam9fzF7ttf1HBAedlhV9VEkXPX1JdVnLKcKdsBlBqbTvxHqO31
xXB20S8pK05hCu60/wQ2kcInHJKlyIXphI/PY2J0/KozxIkDtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaCH55Fy0RtH9GeA9m1748JKAarMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTlmMTQ0MjQtMjRjMi0z
NjgwLWFkZTQtZDUyNjNhYmM1YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGKCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFmp+/fDpxfRxwMpkbreejmTYoHmv4rp8n4QJybQ4nxV5qNClNe1/WO
sao9+L2bt53kfBNnqAUXyyJApnF2bDn+WLd6zN2+dif4ni7Fil1fQ/n8p2UKTxXq
uKCyhoz/n0OhSUUSSDb3fu/Zo7jqEuPwy7ReeYsw4miX6svy5D0MeU+X2xTm7Dov
11q1UhHcjpqXajD7MxzsDAUREWhtkzHD9/P2IZ1IHAFyyw2exuyFybMQFo9Sooj+
F+QZTOFD93kjs4IUljuqPKlzeTJvmuJK8cDBoqAadaq1UIuX9+SasIYyZl5vzLCl
IMF1Bv65AvnujfqGzJdluExGer461OA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:27 2024 by rpki-client on console-fra.rpki-client.org