Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93b7d842-4db9-3162-b5e0-2c8cfb6f7d42.roa
File:                     93b7d842-4db9-3162-b5e0-2c8cfb6f7d42.roa (raw, json)
Hash identifier:          VwdKcrZU6kPCu0NjV3XTD/HEcYka68HqkfgrtkcgDQk=
Subject key identifier:   A5:A3:C8:AE:73:2D:9A:B1:F5:FD:57:93:19:97:66:3A:74:89:34:62
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A082081A4C76B0A3222580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93b7d842-4db9-3162-b5e0-2c8cfb6f7d42.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     7843
IP address blocks:        24.33.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:82:08:1a:4c:76:b0:a3:22:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=12aeb88a-e6d8-4abb-a8be-675ee30d1349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:f3:8d:7e:d0:04:a3:0e:e1:20:e7:1e:51:
                    71:9b:fe:32:6d:7f:de:37:e4:d6:a9:38:50:d9:c3:
                    33:d8:19:c4:1e:b1:f8:4c:81:8a:73:d2:dc:13:19:
                    e3:df:28:0f:6b:23:a7:ea:3c:5e:39:a2:0e:6e:83:
                    26:c1:fe:34:43:70:7c:89:34:cf:ee:42:75:f4:e9:
                    09:76:7d:4e:e3:8f:98:e3:87:7c:16:b9:2f:d4:fa:
                    cc:50:4a:12:e8:c3:e5:50:7d:36:27:09:a3:3d:37:
                    cd:6e:49:04:b7:f5:2b:76:3a:ce:88:c7:b4:0e:2f:
                    83:29:a1:45:5b:fb:db:b5:1d:d2:76:f6:48:a0:05:
                    51:26:a1:f8:b0:8d:59:45:44:92:b4:7c:cd:3f:23:
                    3b:4c:e5:6b:7d:65:cd:9d:39:c8:67:04:97:99:f7:
                    5d:f3:3f:3e:4a:7e:24:39:96:32:8b:bd:49:db:86:
                    65:24:c0:dc:0f:cd:d7:56:9f:82:f1:d4:67:60:ad:
                    bf:c4:9c:98:4f:4f:96:7e:24:80:97:47:8b:69:84:
                    ea:5b:29:59:97:80:f1:8d:9d:47:11:e8:46:d8:fb:
                    26:59:34:69:74:1c:bf:41:b9:d6:51:e0:89:3d:93:
                    5f:b9:e6:a2:fc:31:f8:80:d4:b1:5d:f6:b6:e4:5c:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A3:C8:AE:73:2D:9A:B1:F5:FD:57:93:19:97:66:3A:74:89:34:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93b7d842-4db9-3162-b5e0-2c8cfb6f7d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:6f:26:7b:fc:b7:bc:a8:7e:84:c4:60:1f:28:d1:c2:a3:
         b8:ef:41:fb:61:b1:4f:09:a4:cf:d8:c5:e0:4f:30:16:ff:88:
         eb:62:cf:04:f8:54:62:b4:09:86:b8:48:79:85:14:67:36:7f:
         01:e0:7e:1a:af:df:4e:39:f1:72:48:1f:4a:a5:d9:43:33:d7:
         19:66:0d:d2:6d:cb:a4:0d:09:ce:11:ab:20:99:b9:ec:2f:66:
         cb:84:ec:50:60:e9:50:be:73:d9:c3:03:9b:fe:4c:9f:39:ba:
         19:0c:c2:d9:9e:a3:4b:21:5e:c8:54:25:b9:d8:d6:09:56:62:
         52:a8:b5:fa:2f:a0:0b:f7:6d:bb:b0:ed:67:ee:30:f5:00:db:
         3a:1d:f8:b4:22:f1:8d:26:6b:09:ee:bb:86:fe:11:f5:66:09:
         19:fd:11:18:b8:5a:e7:71:82:b7:13:ba:c2:5f:91:ac:1a:53:
         ae:5d:ec:2e:7f:a2:a6:21:84:a9:3a:c6:bf:85:89:7c:e4:7e:
         21:0a:bd:c0:20:1d:63:d6:52:2e:ba:e8:52:35:d3:c0:f2:ed:
         58:f5:10:91:5d:e7:f0:34:c6:33:94:10:94:ad:59:d8:56:1b:
         88:ca:f5:f8:ff:e4:1e:18:2d:90:f5:9c:df:8b:01:6c:5e:1c:
         73:4e:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:32 2024 by rpki-client on console-fra.rpki-client.org