Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69e38e78-4798-30a0-a05e-2dc1485b2c28.roa
File:                     69e38e78-4798-30a0-a05e-2dc1485b2c28.roa (raw, json)
Hash identifier:          c3xx/a3PdJvZ2lYJx74GflQCIUyAzlD0ksK8tyEBdDo=
Subject key identifier:   2D:E6:1D:BD:60:C9:84:50:A4:77:32:22:E4:F4:C5:A4:AE:D1:84:46
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285847F50C357A0082D0970B4AD4C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69e38e78-4798-30a0-a05e-2dc1485b2c28.roa
Signing time:             Thu 21 Nov 2024 21:57:36 +0000
ROA not before:           Thu 21 Nov 2024 21:57:36 +0000
ROA not after:            Wed 19 Feb 2025 21:57:36 +0000
asID:                     11426
IP address blocks:        98.157.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:0c:35:7a:00:82:d0:97:0b:4a:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 21 21:57:36 2024 GMT
            Not After : Feb 19 21:57:36 2025 GMT
        Subject: CN=917209df-bf2f-4cf8-9eb9-577675ca6904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:69:ed:f4:d9:d4:a4:c9:24:cd:78:d2:e7:
                    dc:40:51:0d:bf:a6:fd:8d:2c:97:90:29:25:f1:52:
                    54:7e:fb:78:35:14:81:7b:2a:dd:ff:ba:c2:b5:5e:
                    56:c7:ce:ad:aa:e6:27:36:1b:02:f0:f9:ee:53:cc:
                    eb:93:15:28:09:7c:44:87:87:3a:82:26:bb:f5:b4:
                    60:7b:d3:71:6a:97:6e:97:b7:ff:ea:52:e4:6f:a4:
                    d5:d5:9a:7f:5b:04:12:f6:da:97:48:a4:64:73:97:
                    98:ce:84:ce:36:d5:87:cd:2a:46:59:e2:cc:ed:0c:
                    f5:c3:1f:a7:79:ba:28:92:35:70:fd:86:e2:da:f8:
                    50:de:f9:11:7b:12:e2:89:8d:8e:ea:b4:be:f1:39:
                    28:55:bd:e3:61:52:7f:82:cd:77:28:cb:a1:e4:08:
                    b5:36:02:e5:a0:3e:4b:76:e9:cb:36:7b:81:bd:a3:
                    a5:7c:c9:ec:b8:b0:86:9c:f6:03:8c:c7:dc:72:53:
                    b1:ee:1a:a0:99:19:6c:2c:c7:d4:99:aa:81:f3:4f:
                    c2:52:8f:bc:02:14:c1:60:e8:1f:4a:b1:74:af:7a:
                    61:3c:53:22:2d:ca:8c:e3:4a:4f:a1:e4:38:ad:cd:
                    f9:0f:34:52:51:ae:b4:fb:0e:b6:b8:ec:01:07:7e:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E6:1D:BD:60:C9:84:50:A4:77:32:22:E4:F4:C5:A4:AE:D1:84:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/69e38e78-4798-30a0-a05e-2dc1485b2c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a3:1e:b5:af:ba:93:d7:bc:65:b8:1a:34:cc:c2:34:b8:43:
         6e:06:d2:19:b8:98:52:2e:70:12:c1:af:0d:63:3d:36:9a:b2:
         88:94:71:b2:e1:96:11:be:b9:c0:6f:01:b9:71:c9:c4:3b:04:
         3f:a6:b8:b3:03:40:6b:0a:cd:89:88:39:48:4c:24:26:5a:74:
         42:93:c0:4f:bb:0d:4f:3d:9a:73:62:67:4d:d3:cc:93:2a:93:
         38:e5:51:0b:ec:3d:62:3d:78:50:98:da:90:2b:f1:0d:22:5a:
         a8:88:33:10:4c:1b:de:9d:e5:86:f4:f5:6e:b3:a5:e4:6d:ff:
         24:37:b7:06:8f:ae:de:fc:e0:82:aa:1b:7d:9d:94:af:f1:fb:
         5f:64:76:28:7d:90:48:96:df:bc:2c:ad:97:97:2a:5b:64:da:
         51:7f:46:b6:a5:83:8f:4f:70:26:a5:97:fb:7d:6b:e6:fb:55:
         fe:a0:12:b9:cb:54:db:3c:d8:b4:ba:d1:d1:1e:84:4b:13:d0:
         e6:a4:c8:20:76:cd:2d:d0:ea:6e:e0:1b:a4:d6:76:ea:1c:8c:
         00:fe:87:c9:ad:9d:02:36:9a:ab:d1:31:44:38:f7:aa:fb:48:
         bc:3a:8f:2d:e5:9e:ec:52:aa:ed:c6:7b:4f:1c:de:63:a4:bc:
         61:6c:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:13 2024 by rpki-client on console-ams.rpki-client.org