Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/677d32ae-b9f5-30d8-843a-d6c712329054.roa
File:                     677d32ae-b9f5-30d8-843a-d6c712329054.roa (raw, json)
Hash identifier:          QpFnkGWdePwgYHsRP2YyEyDCydz4/dJWjjeaXTdeEbg=
Subject key identifier:   9F:25:EB:27:54:AF:F8:95:E5:CC:E8:37:D7:81:42:D9:C2:C7:2C:61
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A1336F274895B106814860
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/677d32ae-b9f5-30d8-843a-d6c712329054.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        24.173.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:33:6f:27:48:95:b1:06:81:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=704c4d9b-b420-464d-ad3d-7b31f2460c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:01:26:cc:58:6f:9f:c2:01:c2:96:92:f7:
                    f4:30:63:01:5a:f4:45:36:63:0d:b2:0e:df:84:55:
                    4e:68:58:f3:66:2d:8f:c6:55:9d:65:a7:e1:17:f3:
                    4f:6a:8e:a7:c0:28:4a:56:cf:6f:eb:2f:34:ec:2b:
                    f9:da:5a:7f:06:0c:62:de:32:70:32:f2:2b:ce:b6:
                    d0:ec:31:22:ff:e5:b1:1b:a9:8e:6b:0b:a6:2f:88:
                    2c:3a:84:fe:f7:cf:88:63:70:99:4c:67:cb:01:d0:
                    85:27:90:fd:63:88:7b:68:24:45:61:26:1b:d2:02:
                    a6:d0:8a:bb:4a:49:c2:5a:5f:98:cd:71:18:25:22:
                    2b:8f:96:29:da:0d:1e:3f:f9:0f:8a:b4:f5:d6:18:
                    a3:27:bc:6e:c8:ca:49:0f:b5:fd:bb:ab:f5:4f:1f:
                    a4:e3:0b:64:19:5e:e6:28:89:7f:70:bc:06:52:80:
                    09:55:62:47:a7:b2:96:46:37:80:fb:ef:00:5b:d3:
                    20:db:da:49:72:35:d6:8c:36:c5:15:88:d4:c1:cb:
                    81:2e:d4:6c:94:00:6d:f7:85:0b:15:a5:99:d7:54:
                    8d:8d:d9:5c:45:70:91:3c:25:c9:94:34:ad:bc:1c:
                    da:bc:bf:59:05:6d:2a:ce:8f:35:77:75:23:fb:36:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:25:EB:27:54:AF:F8:95:E5:CC:E8:37:D7:81:42:D9:C2:C7:2C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/677d32ae-b9f5-30d8-843a-d6c712329054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.173.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:17:57:7c:86:ef:b3:e4:f9:69:0f:21:7a:9b:8c:cc:7e:ae:
         80:36:e7:76:ae:6b:51:5f:72:d4:2f:c4:0f:0f:2a:d6:cb:af:
         99:0a:99:a7:3a:8d:92:1a:71:51:0d:fc:a9:50:4d:af:9e:69:
         5f:27:d5:6e:4f:fb:09:b2:3d:26:d0:cb:e3:07:bf:36:d2:ae:
         1e:2b:27:97:9e:31:5a:62:7e:2a:42:80:f1:88:b5:50:4a:c7:
         db:49:e5:51:c3:e7:c3:9d:79:f5:45:72:db:4e:b0:9f:28:b9:
         64:bb:79:1e:3d:c7:36:32:0f:04:4f:f6:23:7c:e8:d2:af:1d:
         17:96:ad:e6:4d:59:72:b9:88:70:ed:e0:90:54:de:01:2b:82:
         e6:43:43:64:a9:12:ae:d3:c2:01:12:54:f7:54:ef:54:75:4d:
         42:5d:ef:14:28:f5:df:16:e8:02:31:2e:85:90:5e:46:85:60:
         92:ca:c9:e6:ae:18:f4:e1:2f:11:ae:83:e5:cf:32:3a:0c:49:
         8f:45:db:c0:18:1a:91:74:a9:2a:ec:57:de:92:de:d2:a0:00:
         c9:c5:8a:6f:a3:1a:43:22:0d:7e:3b:c5:1e:18:e2:00:d7:42:
         22:0b:24:e7:41:89:b4:bf:48:37:c0:af:df:7d:86:e4:59:9a:
         53:28:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:28 2024 by rpki-client on console-fra.rpki-client.org