Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93b7d842-4db9-3162-b5e0-2c8cfb6f7d42.roa
File:                     93b7d842-4db9-3162-b5e0-2c8cfb6f7d42.roa (raw, json)
Hash identifier:          PEbH5aw6TQsIXws1DrrEG6KRJlW0puPsdz3NBe/GqaY=
Subject key identifier:   7D:44:8B:8E:FC:F5:1A:D4:33:85:15:72:C9:06:82:78:2D:37:1A:13
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628D978108330E0333F7CD00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93b7d842-4db9-3162-b5e0-2c8cfb6f7d42.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     7843
IP address blocks:        24.33.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:97:81:08:33:0e:03:33:f7:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=89a3aea6-f027-4830-8855-1848b25072a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:ee:8a:d5:76:26:0f:07:25:4a:b6:46:20:
                    33:90:09:f3:18:9c:cc:d5:39:7f:9d:e0:cb:9c:46:
                    d3:90:87:61:db:22:ed:b5:24:18:67:00:aa:8f:c0:
                    dc:30:18:0b:c9:af:b4:b1:60:96:a8:85:0c:0e:87:
                    ed:8a:b6:78:34:85:1e:7b:0b:71:0b:b5:88:31:ca:
                    bb:1a:f6:dc:98:64:f5:19:fa:ee:8a:e8:23:00:38:
                    e3:9f:c0:12:44:56:90:24:ae:cb:06:67:12:82:b8:
                    b6:0f:04:fb:d0:db:39:a8:f8:e9:94:d3:7a:7d:fa:
                    b5:cb:3b:f8:84:94:2d:c5:14:8f:8f:e8:e0:e2:4b:
                    e1:b3:26:f5:ff:af:7a:02:80:a8:b6:8a:07:7c:10:
                    26:b1:df:f2:69:f6:46:cb:a9:f0:91:34:15:54:22:
                    81:f0:1e:dd:53:7c:e3:12:07:08:ef:db:f6:89:73:
                    7a:b8:8a:dc:75:84:69:4d:eb:32:4c:2c:a8:12:57:
                    1a:13:26:bc:8b:85:7c:36:b3:f7:62:90:49:2c:2e:
                    d5:7d:d7:d1:f2:91:89:56:c7:b7:aa:b8:aa:1e:8c:
                    68:56:d2:7a:92:19:26:33:6f:a1:39:9c:38:c7:21:
                    c5:fe:db:78:35:7c:63:28:4e:f4:b7:22:5f:96:63:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:44:8B:8E:FC:F5:1A:D4:33:85:15:72:C9:06:82:78:2D:37:1A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93b7d842-4db9-3162-b5e0-2c8cfb6f7d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:30:f4:4d:5a:df:d7:64:b1:fd:18:2e:83:ea:9d:0f:85:c9:
         25:47:66:ce:76:4b:a3:cf:d2:b7:6c:84:86:24:9d:af:ea:46:
         02:27:fd:bf:b7:37:6d:d1:b1:5b:f6:01:f2:95:f3:88:e7:48:
         f1:0b:5d:5e:f6:0f:74:55:15:66:b0:85:58:8e:58:fb:79:f4:
         14:d7:68:65:94:1c:cc:fb:3d:02:41:21:a8:3c:a2:f1:74:ff:
         6b:5c:a3:a1:10:81:8b:bb:ed:bd:6c:c1:8c:ce:3f:d5:aa:ea:
         b1:3a:2d:a4:88:52:cc:c1:8e:54:a6:fd:d9:86:29:aa:1d:75:
         0c:48:a4:a6:d5:de:aa:08:7f:ce:80:7f:fb:96:78:ad:70:18:
         a8:17:ec:fe:c6:b9:27:6c:f2:ba:35:42:29:c1:95:42:e1:10:
         83:5e:37:c8:e8:94:c8:70:ec:da:6f:ff:62:33:b8:b5:70:f7:
         d8:c9:ed:b1:65:53:34:86:fa:af:63:be:93:c0:2a:2e:d1:ea:
         99:8d:5c:8f:3a:69:06:b1:62:18:18:01:75:af:32:10:7c:07:
         37:a4:bf:39:bc:40:01:37:d9:cd:d9:67:fd:b6:13:1c:25:8b:
         67:e7:13:e1:42:f3:b5:11:99:06:8c:03:0f:5a:62:60:58:fb:
         1d:7b:4a:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijZeBCDMOAzP3zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
ODlhM2FlYTYtZjAyNy00ODMwLTg4NTUtMTg0OGIyNTA3MmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukbuitV2Jg8HJUq2RiAzkAnzGJzM1Tl/neDL
nEbTkIdh2yLttSQYZwCqj8DcMBgLya+0sWCWqIUMDoftirZ4NIUeewtxC7WIMcq7
GvbcmGT1GfruiugjADjjn8ASRFaQJK7LBmcSgri2DwT70Ns5qPjplNN6ffq1yzv4
hJQtxRSPj+jg4kvhsyb1/696AoCotooHfBAmsd/yafZGy6nwkTQVVCKB8B7dU3zj
EgcI79v2iXN6uIrcdYRpTesyTCyoElcaEya8i4V8NrP3YpBJLC7VfdfR8pGJVse3
qriqHoxoVtJ6khkmM2+hOZw4xyHF/tt4NXxjKE70tyJflmP8SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1Ei4789RrUM4UVcskGgngtNxoTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTNiN2Q4NDItNGRiOS0z
MTYyLWI1ZTAtMmM4Y2ZiNmY3ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGCHyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQw9E1a39dksf0YLoPqnQ+FySVHZs52S6PP0rdshIYkna/qRgIn/b+3
N23RsVv2AfKV84jnSPELXV72D3RVFWawhViOWPt59BTXaGWUHMz7PQJBIag8ovF0
/2tco6EQgYu77b1swYzOP9Wq6rE6LaSIUszBjlSm/dmGKaoddQxIpKbV3qoIf86A
f/uWeK1wGKgX7P7GuSds8ro1QinBlULhEINeN8jolMhw7Npv/2IzuLVw99jJ7bFl
UzSG+q9jvpPAKi7R6pmNXI86aQaxYhgYAXWvMhB8Bzekvzm8QAE32c3ZZ/22Exwl
i2fnE+FC87URmQaMAw9aYmBY+x17Sp4=
-----END CERTIFICATE-----
Generated at Wed May 1 15:56:04 2024 by rpki-client on console-ams.rpki-client.org