Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85f2c5c2-3be5-39d9-89b3-8da0025933ad.roa
File:                     85f2c5c2-3be5-39d9-89b3-8da0025933ad.roa (raw, json)
Hash identifier:          JmytRwBX7P5InP+g2UfDhJHnby2wlqXC73Qk3bJ1vkg=
Subject key identifier:   81:9E:81:DA:13:DF:0C:F8:A5:4F:6F:7E:B2:3D:00:02:C1:E5:CF:42
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858373D3F095772C0D5CBE4F776E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85f2c5c2-3be5-39d9-89b3-8da0025933ad.roa
Signing time:             Wed 09 Sep 2020 04:00:00 +0000
ROA not before:           Wed 09 Sep 2020 04:00:00 +0000
ROA not after:            Mon 09 Sep 2030 04:00:00 +0000
asID:                     16787
IP address blocks:        24.33.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:3d:3f:09:57:72:c0:d5:cb:e4:f7:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  9 04:00:00 2020 GMT
            Not After : Sep  9 04:00:00 2030 GMT
        Subject: CN=d558aa27-3154-40d3-a957-46213fec8c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:d0:46:f7:c6:e7:d4:ad:eb:5b:94:3b:38:
                    c1:a6:6a:a6:96:56:cd:6f:0f:0a:a7:4c:b1:14:14:
                    5d:f6:16:85:74:a4:37:c9:59:c0:e6:f6:6c:40:05:
                    fb:f3:d1:7d:7d:ab:80:c4:a8:db:a5:3a:03:a4:50:
                    b9:3e:ce:e4:d5:0b:7b:14:7c:c2:59:6f:26:a8:8a:
                    00:ca:c1:c9:c7:42:59:03:7b:15:82:0b:ca:99:a4:
                    6c:52:a5:dd:c5:22:79:e5:ad:bf:41:54:77:a9:8c:
                    e5:d5:21:6d:64:3d:ed:ea:a5:b0:64:28:9f:a6:94:
                    c5:68:1e:a2:02:b7:47:cb:79:ad:c8:18:b4:20:c0:
                    ba:4b:cd:a6:88:31:3f:98:c9:ac:83:b8:df:0c:2e:
                    bf:4f:ec:49:65:64:1b:cd:81:90:f1:49:26:e7:ad:
                    bb:b0:fa:36:35:e7:ee:f1:95:c6:dd:62:89:24:82:
                    01:4b:1e:ef:c1:45:d3:d9:d2:e2:bd:de:59:53:c5:
                    43:ce:9f:2f:4c:74:bb:53:97:5c:9d:68:ae:06:b0:
                    2a:f5:fe:eb:c3:e0:f6:bc:78:9c:6b:59:b9:e1:54:
                    60:d8:f1:98:f7:cb:fe:6b:f0:92:fa:2d:45:66:97:
                    e7:cd:a7:de:5e:96:e6:6a:8b:f0:b1:25:86:2a:18:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:81:DA:13:DF:0C:F8:A5:4F:6F:7E:B2:3D:00:02:C1:E5:CF:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85f2c5c2-3be5-39d9-89b3-8da0025933ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:21:85:f3:41:02:fc:a1:74:21:8f:7d:95:42:a7:8a:d6:
         dc:87:83:75:be:df:7c:40:69:99:00:9f:15:b9:a9:d9:be:40:
         dc:a6:ae:e0:20:16:e6:1d:a4:40:1e:48:97:01:32:31:91:bc:
         d0:0f:0a:c4:82:13:dd:5e:66:d5:e9:02:70:6b:f1:c5:1c:8c:
         d7:16:1d:76:38:27:18:37:b4:49:47:a7:a3:76:83:60:ed:04:
         3a:18:5c:93:ef:c0:7f:24:a8:5d:60:54:54:15:8c:b3:0d:92:
         1e:fd:22:7c:d3:f9:1d:a5:01:70:c0:09:af:d3:f6:19:3d:6b:
         99:9f:86:ac:6d:4a:65:10:88:f1:b8:75:dd:ca:ea:f0:45:24:
         cf:10:1a:1b:01:df:29:73:f9:e2:28:fc:87:94:08:03:04:4a:
         e0:8d:8b:b1:20:95:ac:e0:68:7a:cd:7c:a2:86:d2:cc:79:11:
         4e:40:52:2f:10:5b:8c:e6:f5:5a:15:92:0d:21:ae:65:ab:1e:
         39:b5:6e:f5:0a:01:42:67:2f:0c:ef:50:df:68:a1:06:3e:ca:
         4b:37:ad:9b:17:97:03:90:32:02:88:33:f3:3d:6b:14:30:cb:
         a5:45:96:2c:57:a5:6c:f3:aa:48:77:34:f3:d3:ed:0e:0d:22:
         d3:f6:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:21 2024 by rpki-client on console-ams.rpki-client.org