Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/649edc6d-7194-3a57-9dfd-e223fd26033b.roa
File:                     649edc6d-7194-3a57-9dfd-e223fd26033b.roa (raw, json)
Hash identifier:          i14KuMsurp2vnVUVnuDh1OhrIH6yZjx52uUMz2NxbuY=
Subject key identifier:   70:76:70:64:B7:B0:E6:A2:78:96:8C:0F:CE:5C:B6:A1:61:86:5C:41
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCECCF50E40B6A672E26A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/649edc6d-7194-3a57-9dfd-e223fd26033b.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        24.129.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:cc:f5:0e:40:b6:a6:72:e2:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=1141a02b-453a-4d8e-bf32-ab2e3e096c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:2d:16:d4:94:1e:09:aa:97:0b:57:82:af:
                    a7:7f:fb:e8:1a:63:7f:40:2b:b0:de:43:a0:69:22:
                    aa:14:98:0f:f2:1b:7d:a9:d0:c2:94:24:d6:a5:e7:
                    0e:c9:7d:34:1d:00:b7:32:76:92:ef:ef:a0:e8:80:
                    af:62:6d:f0:52:0e:86:5f:ed:12:dc:3e:cd:7a:2f:
                    a1:4f:14:e8:8a:de:af:20:70:44:17:62:7b:12:4e:
                    15:b7:ea:1e:cc:13:97:77:d8:a2:20:7f:e2:17:20:
                    26:58:b1:dc:06:51:18:ad:b5:5b:df:74:02:7e:2a:
                    6d:66:da:65:6d:73:49:70:5d:72:92:4d:db:83:ed:
                    32:fc:a4:3f:67:9a:d8:32:4e:fc:56:81:f6:71:ab:
                    0f:2e:31:4e:2b:36:eb:a1:3e:04:df:b4:88:b8:82:
                    51:31:c9:fa:69:f1:71:4c:f2:f4:3d:5b:ed:23:d3:
                    a3:3f:4c:00:32:64:31:7c:71:42:c3:1f:e5:b3:00:
                    b2:97:2e:84:a7:6d:e2:d8:b3:40:6c:cf:ef:7c:b3:
                    57:77:5a:0c:2b:5c:40:2a:21:c3:04:6f:ba:35:e0:
                    b1:fc:b8:61:5b:fb:da:3d:6f:0d:34:4d:b9:6e:04:
                    f9:56:05:5b:c4:63:af:de:32:75:b2:0f:1b:07:d9:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:76:70:64:B7:B0:E6:A2:78:96:8C:0F:CE:5C:B6:A1:61:86:5C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/649edc6d-7194-3a57-9dfd-e223fd26033b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.129.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:66:96:65:0f:bc:03:b4:53:83:6f:f0:ad:3c:b5:94:10:
         f7:2c:e1:ec:dc:fa:02:b3:ae:5c:81:12:2e:e8:a0:72:20:97:
         e2:90:2a:f6:e6:3b:ff:3b:35:42:6e:c8:af:ca:1a:cf:ca:b6:
         e6:42:c4:d3:09:48:e9:a5:a1:7d:1f:df:f9:c8:b9:98:47:4f:
         96:e8:d3:60:4c:d2:54:ea:5e:d1:2d:69:d3:34:88:d2:cd:45:
         5f:14:d9:42:58:60:78:57:f4:c5:85:f1:5a:c4:64:9d:96:6f:
         27:d7:98:0f:9f:6d:ea:06:25:ea:9a:74:23:9c:01:17:cc:33:
         92:54:21:28:76:05:f7:cb:c4:05:89:2a:47:d5:e6:08:eb:03:
         88:ab:53:7f:9a:50:3d:6c:d2:a1:f1:7f:e7:24:b8:78:0c:a4:
         dd:bc:c5:ad:41:91:61:25:e9:3d:98:39:e2:4d:1c:f0:3e:df:
         d0:93:77:0a:24:a2:58:4a:6e:38:f7:c3:65:21:a2:8b:e3:c5:
         3f:03:ab:7d:f0:4e:bd:23:e9:1a:ed:9a:26:a3:0b:30:70:82:
         f1:50:e0:90:25:9b:f4:7b:5f:84:00:38:e9:4d:cb:38:3c:db:
         33:e7:f2:62:e7:67:c6:0c:d5:3b:da:ef:c4:75:46:52:d4:ec:
         cb:33:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:28 2024 by rpki-client on console-fra.rpki-client.org