Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/675c8c90-a3ed-3d24-bc77-389e02676067.roa
File:                     675c8c90-a3ed-3d24-bc77-389e02676067.roa (raw, json)
Hash identifier:          nlkgvlOM9IZW9eeQDmwnG2L+soEztFJ2EJZra4BzmU4=
Subject key identifier:   B1:EC:19:E3:B3:01:11:42:B5:C7:5E:7E:C9:50:33:6B:90:32:EE:EB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF2487D4D81AD86A9A8EC60
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/675c8c90-a3ed-3d24-bc77-389e02676067.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     11427
IP address blocks:        24.28.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f2:48:7d:4d:81:ad:86:a9:a8:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=b4c77967-0e97-4f0f-ae2c-1e012632a793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:22:33:dc:5d:ff:58:3c:fd:28:4c:c5:63:
                    8c:6e:0a:ff:e6:42:be:cf:fa:44:21:d5:50:c4:a2:
                    c9:54:d6:7e:be:4b:ce:7b:97:4d:96:27:56:4d:61:
                    78:3d:af:bb:31:65:d3:39:7e:5f:44:91:b3:26:0e:
                    4b:4e:90:c2:b8:34:79:7a:56:39:ba:2f:51:80:6a:
                    2c:36:cb:42:3b:d7:bd:fa:bf:1a:0a:64:52:ec:70:
                    e4:a9:56:7f:74:fb:68:23:29:3e:a4:5a:89:8d:42:
                    5c:15:af:fb:72:49:f6:0d:1d:70:c8:20:c2:22:59:
                    03:f0:be:42:65:41:b5:d2:80:17:87:17:b0:a5:ad:
                    47:f8:45:93:74:2e:d6:ae:9d:ad:18:51:36:2c:8f:
                    22:71:da:cf:19:7e:ed:83:d4:35:43:94:aa:c5:32:
                    20:d4:c9:e6:39:9f:03:97:fb:b0:4e:26:54:c9:96:
                    68:28:f9:00:6b:f9:48:4b:42:04:20:82:7b:7e:97:
                    69:dc:4c:d4:4d:7b:a4:31:a2:e7:d2:07:d9:f4:55:
                    c5:3e:60:58:c1:a3:d8:3b:d7:55:12:d0:32:fd:0c:
                    72:9c:2d:cc:77:45:de:56:bf:9b:3a:cf:56:ef:ec:
                    96:e3:43:e4:36:9b:fe:1b:28:71:bf:0e:66:e0:29:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:19:E3:B3:01:11:42:B5:C7:5E:7E:C9:50:33:6B:90:32:EE:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/675c8c90-a3ed-3d24-bc77-389e02676067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.28.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:40:1a:88:74:96:e9:60:80:74:6b:91:f9:0c:f3:e5:7c:21:
         73:2f:8c:62:f6:8c:ee:3a:8f:84:2f:07:9d:87:bf:9e:2f:b8:
         33:87:52:5d:1a:c7:a3:7b:11:2b:e5:d9:5e:7a:bb:3d:51:f2:
         41:06:1e:8a:a3:31:85:eb:48:fc:5e:56:78:12:a1:51:a9:18:
         bb:68:d1:c7:69:ff:be:e3:5a:aa:05:e1:47:95:b2:27:ef:07:
         dd:82:db:e8:48:39:6c:ee:17:7e:5e:98:e6:01:d8:7b:fc:47:
         30:46:f8:18:cd:f1:71:1d:cc:70:87:46:17:9e:35:fd:db:1e:
         7b:ac:0d:17:3f:a1:01:6c:27:42:c0:96:76:41:01:b6:42:83:
         6b:1a:7f:29:8c:31:c8:2c:43:39:a6:e2:fa:61:70:44:cb:59:
         2e:b9:e0:64:ce:2e:1f:9f:67:05:e0:ed:0f:86:25:42:3c:a3:
         95:2b:49:ba:e5:5f:ea:72:41:f1:60:b9:22:9a:3a:a7:63:eb:
         12:24:d4:c7:12:02:34:86:61:18:42:f9:8a:81:d1:64:ec:e1:
         8c:6b:97:5b:a1:2a:8a:32:66:60:73:e5:f5:86:d9:f7:7a:5e:
         e5:f2:8d:75:38:f6:4d:51:ec:df:22:15:91:dd:e3:54:cb:8d:
         f7:59:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:49 2024 by rpki-client on console-fra.rpki-client.org