Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/897a73c1-5ad3-38b1-9462-5a746f3cefc1.roa
File:                     897a73c1-5ad3-38b1-9462-5a746f3cefc1.roa (raw, json)
Hash identifier:          jGoAjNsy3gp4Lelkse0bo3X3wAlMeeI7ci9545tMmsU=
Subject key identifier:   D3:9C:19:E0:34:B0:25:0A:D6:88:A7:99:15:48:2E:68:43:14:CD:18
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0AE4A062DF62CC6EA7740
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/897a73c1-5ad3-38b1-9462-5a746f3cefc1.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     16787
IP address blocks:        24.24.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:ae:4a:06:2d:f6:2c:c6:ea:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c4008e19-0dcd-485f-8ff9-b18b76034f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cb:88:80:85:fe:13:fa:33:d7:ec:b2:9d:c0:
                    a3:c5:10:2d:a3:70:34:f8:00:4b:26:98:af:3a:20:
                    aa:d6:4e:7a:4f:c2:4e:ab:6f:b4:c0:9e:98:12:ba:
                    ad:e3:33:02:5c:e0:99:a2:ab:09:c9:f0:d4:cc:65:
                    95:56:4b:4b:f7:c6:84:36:8c:12:1a:7e:33:d9:cb:
                    74:52:66:47:0b:d7:bb:2e:9f:18:78:ae:e3:32:35:
                    c5:75:96:6b:5c:a0:4b:69:16:10:c6:11:05:dc:0d:
                    b0:65:4e:ab:a4:c4:ad:da:b7:a9:d0:d8:7e:69:ca:
                    5e:5b:86:05:9f:ad:20:d4:82:6b:cc:8e:e6:68:14:
                    5f:d4:05:1a:42:32:56:cf:d5:06:1a:f4:7a:af:e5:
                    c1:10:b0:60:29:9e:c0:80:29:89:b4:b4:a9:65:1e:
                    97:db:e7:49:3f:12:55:71:04:c0:13:1f:6f:ca:d5:
                    ac:98:59:ec:03:d0:5f:ce:bd:82:da:45:98:92:d3:
                    61:14:8d:72:0d:01:dd:4a:7f:6f:8f:02:1f:93:61:
                    b8:f7:e7:47:8f:a9:9a:d7:c6:31:47:21:a2:51:37:
                    f9:8c:06:85:c0:1f:2f:05:65:6e:07:f3:e4:f2:e0:
                    ca:88:b3:fb:ba:f3:7c:65:6b:16:b0:b7:1b:ad:33:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9C:19:E0:34:B0:25:0A:D6:88:A7:99:15:48:2E:68:43:14:CD:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/897a73c1-5ad3-38b1-9462-5a746f3cefc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.24.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:0f:72:12:cf:dc:fa:1a:e9:47:0b:57:9b:79:14:52:c0:
         c0:69:01:09:20:51:ae:b0:25:38:e3:24:ca:69:39:95:fa:61:
         47:7b:a8:f2:c7:2f:54:90:ba:ea:0f:27:d9:fa:da:15:1d:f7:
         6f:6e:8f:9c:e9:5d:df:7a:6e:3d:d7:a6:5a:d0:81:ef:7a:51:
         83:a2:83:35:f2:bd:fc:45:89:30:75:b5:a8:38:4b:a7:a7:6f:
         3a:98:0c:9f:08:dc:20:0a:51:11:55:92:f5:38:0e:ed:f6:12:
         ef:77:89:ea:c4:bf:eb:79:a9:2a:55:bf:f4:f8:74:e6:2d:58:
         1c:a0:7c:bd:ea:b5:4b:39:2d:55:45:eb:01:3e:04:b3:93:30:
         00:f9:da:65:70:29:96:df:16:87:70:c2:64:b3:17:d5:18:15:
         ff:f2:c4:26:c0:8c:b6:e8:7f:46:13:8d:fe:eb:cb:1e:c5:16:
         d8:59:68:50:3a:34:b9:e8:a2:0b:e9:9b:39:9c:8c:e4:8c:57:
         07:84:0f:90:c1:98:f5:51:39:fc:28:50:9b:d5:cb:58:f6:2a:
         62:be:ec:f8:3b:ae:f3:a3:84:d4:0f:fb:be:66:95:71:69:5d:
         cf:f7:be:fd:c6:b7:73:29:6b:d2:33:d5:c5:6e:2e:98:f1:03:
         fb:4c:ce:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioK5KBi32LMbqd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YzQwMDhlMTktMGRjZC00ODVmLThmZjktYjE4Yjc2MDM0Zjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsuIgIX+E/oz1+yyncCjxRAto3A0+ABLJpiv
OiCq1k56T8JOq2+0wJ6YErqt4zMCXOCZoqsJyfDUzGWVVktL98aENowSGn4z2ct0
UmZHC9e7Lp8YeK7jMjXFdZZrXKBLaRYQxhEF3A2wZU6rpMSt2rep0Nh+acpeW4YF
n60g1IJrzI7maBRf1AUaQjJWz9UGGvR6r+XBELBgKZ7AgCmJtLSpZR6X2+dJPxJV
cQTAEx9vytWsmFnsA9Bfzr2C2kWYktNhFI1yDQHdSn9vjwIfk2G49+dHj6ma18Yx
RyGiUTf5jAaFwB8vBWVuB/Pk8uDKiLP7uvN8ZWsWsLcbrTMTqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOcGeA0sCUK1oinmRVILmhDFM0YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODk3YTczYzEtNWFkMy0z
OGIxLTk0NjItNWE3NDZmM2NlZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGBh/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+lD3ISz9z6GulHC1ebeRRSwMBpAQkgUa6wJTjjJMppOZX6YUd7qPLH
L1SQuuoPJ9n62hUd929uj5zpXd96bj3XplrQge96UYOigzXyvfxFiTB1tag4S6en
bzqYDJ8I3CAKURFVkvU4Du32Eu93ierEv+t5qSpVv/T4dOYtWBygfL3qtUs5LVVF
6wE+BLOTMAD52mVwKZbfFodwwmSzF9UYFf/yxCbAjLbof0YTjf7ryx7FFthZaFA6
NLnoogvpmzmcjOSMVweED5DBmPVROfwoUJvVy1j2KmK+7Pg7rvOjhNQP+75mlXFp
Xc/3vv3Gt3Mpa9Iz1cVuLpjxA/tMzro=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:31 2024 by rpki-client on console-fra.rpki-client.org