Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96e4cd8a-4518-39f8-8f70-deaab990e083.roa
File:                     96e4cd8a-4518-39f8-8f70-deaab990e083.roa (raw, json)
Hash identifier:          HAjJxa3cK5UlK4+h3sfZi/o1/I+kbb3aJ+EIr59jz8A=
Subject key identifier:   4B:BD:8E:F5:68:86:E4:A4:54:1C:C6:CB:8F:EA:3B:40:43:FA:37:88
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A6F31B52DF0E3BBC9180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96e4cd8a-4518-39f8-8f70-deaab990e083.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11955
IP address blocks:        69.23.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a6:f3:1b:52:df:0e:3b:bc:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=a1b40b62-76df-4884-b291-87b7c66ae564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:46:7d:7e:64:2c:2c:e4:e7:a4:ea:93:6e:
                    29:50:a4:69:e8:d9:ed:95:88:bc:28:ea:fd:dd:b7:
                    17:de:6a:83:fa:4f:87:5c:2a:6b:96:d1:6b:eb:dc:
                    94:32:7f:23:41:78:a7:02:10:eb:25:e7:7d:eb:c8:
                    a5:9a:52:d8:0a:c1:34:42:4d:0c:35:19:b7:ed:13:
                    99:7a:30:ec:5e:1a:79:96:9d:12:b9:19:c4:5c:80:
                    aa:e8:bc:18:a2:e1:ab:e5:f0:d9:c0:2e:2a:ea:40:
                    dc:b2:81:2d:4e:3b:9d:80:76:76:b9:d4:28:2f:0a:
                    b9:4f:19:81:13:7a:2e:96:49:fa:12:39:56:23:59:
                    34:db:f9:97:aa:3d:e5:e8:5d:33:65:48:ea:82:3e:
                    b5:14:f5:38:93:a7:17:08:7d:9d:a9:48:69:e9:12:
                    1a:08:7c:38:a7:01:85:22:a6:da:2d:66:00:0d:06:
                    d8:d4:bc:38:79:b2:9a:05:f0:d6:45:b4:c1:64:b6:
                    20:5c:51:f6:5b:cc:3c:0c:c8:53:9a:29:27:0e:ab:
                    12:f7:1d:53:bc:5b:c9:2a:17:b3:54:5c:17:cc:59:
                    f8:85:85:ca:25:25:34:62:15:df:52:d0:7a:f0:6c:
                    c1:ca:75:be:8c:b2:cc:06:4e:1e:84:9b:4b:45:b2:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BD:8E:F5:68:86:E4:A4:54:1C:C6:CB:8F:EA:3B:40:43:FA:37:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96e4cd8a-4518-39f8-8f70-deaab990e083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.23.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:32:78:0c:e1:b2:48:cc:7b:14:88:11:36:c1:4b:ef:05:
         91:12:cc:15:e8:0e:29:04:ac:28:9b:92:56:07:c6:78:4e:3e:
         44:09:d8:b1:09:4a:c0:07:7b:e4:ab:06:4b:20:32:6a:7b:cd:
         3e:ef:20:89:f8:f0:4e:bd:fd:8a:a2:a0:97:56:72:01:4b:60:
         0c:08:80:20:b6:33:20:6a:b1:86:a8:83:4e:95:fd:ca:a0:09:
         92:d6:da:e2:0b:c9:86:b5:10:39:e8:fc:62:b5:7c:e4:5b:22:
         26:e8:b0:29:ae:20:b7:9e:17:fd:a9:d4:45:4e:b7:42:1e:34:
         41:7c:4e:72:fb:15:2f:d9:85:92:83:40:50:70:13:29:9f:b7:
         fc:86:aa:46:03:fa:e2:2d:39:9a:c2:e9:d3:56:a5:34:b5:bb:
         8e:fe:47:a6:06:ce:06:d4:f6:d9:64:55:dc:d5:d8:63:27:bc:
         4f:80:9a:a9:6d:da:aa:b7:34:64:29:59:a9:4b:23:05:90:9f:
         f1:e4:86:81:f4:be:e6:5c:8f:f5:36:da:c8:97:2d:6e:d0:fb:
         13:15:65:fa:f2:7e:c6:6a:c6:81:ea:1a:ed:74:fc:bc:02:d8:
         1e:69:3d:df:75:de:0a:de:f6:f9:f8:c2:a9:9b:0b:6c:46:87:
         2e:d6:b7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org