Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c2410a9-19af-30f0-b661-cd45b9c87d6a.roa
File:                     7c2410a9-19af-30f0-b661-cd45b9c87d6a.roa (raw, json)
Hash identifier:          cxs44VJfg7FIa40n2EBYBYTSbDR55cR6ZCyMToFn018=
Subject key identifier:   77:31:03:C2:C9:3C:57:25:BE:9A:9B:D3:76:B0:6F:88:A9:3D:50:3A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF1E8FC0A57D89DD7653F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c2410a9-19af-30f0-b661-cd45b9c87d6a.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     12271
IP address blocks:        24.29.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f1:e8:fc:0a:57:d8:9d:d7:65:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=af45f372-3373-4e2a-932e-76681b7282bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:4d:a2:d6:6c:30:cb:39:9f:0c:db:52:40:
                    e2:26:94:d3:f3:6a:d2:1e:c9:8f:79:ee:be:12:e0:
                    14:95:ce:99:df:83:8f:a6:a7:b6:87:96:20:c5:29:
                    40:15:6d:df:d9:7a:00:1a:f0:6e:a5:50:8f:1a:15:
                    f1:fb:76:f5:07:f2:ce:34:36:d1:02:14:96:3e:d2:
                    ae:47:c5:e6:30:4b:e6:ab:76:30:61:10:10:f8:c6:
                    61:b1:35:76:4e:dd:29:bc:5c:f6:bd:6a:ea:4a:a7:
                    5f:24:0c:c1:04:9f:a4:4f:6d:5e:70:cd:57:f2:c8:
                    fa:fb:d4:04:15:a9:03:e9:a2:1b:e7:4f:fb:fe:23:
                    d2:23:92:4b:e5:c5:fb:2f:96:dc:12:f8:ba:f4:a4:
                    a4:6d:93:fc:6e:5f:74:c9:2b:cd:55:00:5c:7d:39:
                    76:54:1e:ed:f3:4f:8b:f3:e8:25:b8:b9:2c:bf:ac:
                    08:73:99:72:ce:7f:11:33:a5:30:69:d0:4d:83:ec:
                    e0:9d:8e:fc:75:6c:85:5e:f8:aa:88:99:88:d9:65:
                    41:e2:bd:51:bd:80:23:17:8c:4b:8f:27:b4:a0:c7:
                    40:71:59:43:8c:d9:f5:5c:53:f8:48:54:70:fd:7f:
                    6b:35:a8:1f:48:db:a6:2a:4c:36:83:2a:24:14:57:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:03:C2:C9:3C:57:25:BE:9A:9B:D3:76:B0:6F:88:A9:3D:50:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c2410a9-19af-30f0-b661-cd45b9c87d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.29.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c2:95:b8:21:dd:ac:d7:c0:d8:78:9c:7c:b0:d4:e8:c1:e5:
         6f:19:89:46:68:a6:85:4c:2c:d2:fd:68:a3:c5:e3:c8:b7:fc:
         72:ef:a4:16:95:b6:a5:20:90:90:0c:31:76:f1:4c:34:d4:45:
         61:23:71:35:1a:ad:82:bb:e5:a8:e6:6f:07:5f:f0:81:82:cf:
         e6:9f:bd:d6:58:e5:5b:41:c7:9b:f2:68:0a:06:47:fc:7a:b5:
         2b:8e:c9:44:95:c3:ab:2c:14:5c:3d:88:9d:d7:39:78:15:25:
         80:16:d0:8e:a5:3d:87:6f:d0:36:3e:ac:70:05:ff:53:95:02:
         0f:7e:72:76:2d:d8:ef:d1:66:5e:dc:99:f5:41:fb:6d:67:4d:
         63:78:96:f6:79:5f:f7:c1:b3:1e:76:9c:68:47:bd:97:e6:54:
         db:aa:53:63:e0:6b:78:0c:ca:68:22:5c:03:02:e8:d1:96:f0:
         7c:b1:df:e9:10:98:a7:72:4c:9a:f6:39:0c:11:ad:b1:93:9c:
         22:c6:a6:ea:c1:8e:d1:8b:ad:b0:f5:68:08:c4:03:1c:93:a6:
         3b:56:1f:89:e7:7f:02:24:9f:05:24:3e:f8:39:99:e5:7d:29:
         7a:9c:ae:2c:00:80:34:a5:f0:d2:e1:94:d3:9c:bf:a6:3f:16:
         d7:6d:e7:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhP8ej8ClfYnddlP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIwMTIxODA1MDAwMFoXDTI2MTIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWY0NWYzNzItMzM3My00ZTJhLTkzMmUtNzY2ODFiNzI4MmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLJNotZsMMs5nwzbUkDiJpTT82rSHsmPee6+
EuAUlc6Z34OPpqe2h5YgxSlAFW3f2XoAGvBupVCPGhXx+3b1B/LONDbRAhSWPtKu
R8XmMEvmq3YwYRAQ+MZhsTV2Tt0pvFz2vWrqSqdfJAzBBJ+kT21ecM1X8sj6+9QE
FakD6aIb50/7/iPSI5JL5cX7L5bcEvi69KSkbZP8bl90ySvNVQBcfTl2VB7t80+L
8+gluLksv6wIc5lyzn8RM6UwadBNg+zgnY78dWyFXviqiJmI2WVB4r1RvYAjF4xL
jye0oMdAcVlDjNn1XFP4SFRw/X9rNagfSNumKkw2gyokFFeupQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcxA8LJPFclvpqb03awb4ipPVA6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvN2MyNDEwYTktMTlhZi0z
MGYwLWI2NjEtY2Q0NWI5Yzg3ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGB2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDClbgh3azXwNh4nHyw1OjB5W8ZiUZopoVMLNL9aKPF48i3/HLvpBaV
tqUgkJAMMXbxTDTURWEjcTUarYK75ajmbwdf8IGCz+afvdZY5VtBx5vyaAoGR/x6
tSuOyUSVw6ssFFw9iJ3XOXgVJYAW0I6lPYdv0DY+rHAF/1OVAg9+cnYt2O/RZl7c
mfVB+21nTWN4lvZ5X/fBsx52nGhHvZfmVNuqU2Pga3gMymgiXAMC6NGW8Hyx3+kQ
mKdyTJr2OQwRrbGTnCLGpurBjtGLrbD1aAjEAxyTpjtWH4nnfwIknwUkPvg5meV9
KXqcriwAgDSl8NLhlNOcv6Y/Ftdt5/8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:30 2024 by rpki-client on console-fra.rpki-client.org