Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99678c98-d3dc-3a9b-a959-c4d048d35a1e.roa
File:                     99678c98-d3dc-3a9b-a959-c4d048d35a1e.roa (raw, json)
Hash identifier:          uYZFbJEB3i3zdrftP+T6W2M3IooMht2630h0sbxHq3k=
Subject key identifier:   25:C7:BE:93:FB:49:42:5B:24:86:8E:D4:E7:5E:58:43:AB:EC:63:59
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A08B19E8FA2E34C46CDF50
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99678c98-d3dc-3a9b-a959-c4d048d35a1e.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        24.106.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:8b:19:e8:fa:2e:34:c4:6c:df:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=26c9ff69-139b-438f-b313-b7b3cd697389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:7f:f8:dd:c6:0f:d7:79:22:c8:4b:28:79:
                    bb:f4:db:4a:14:9e:8e:e7:44:3d:ee:29:26:b0:06:
                    41:c2:75:bb:f5:b2:ca:54:4f:a0:da:d4:8a:80:9a:
                    94:b9:56:9f:af:a3:4a:7a:be:ea:2b:4d:f5:7b:90:
                    eb:73:e4:cc:a4:bb:15:0a:e8:a3:49:5c:dc:95:db:
                    68:41:30:af:b3:52:3a:d9:33:33:56:6f:98:6e:a7:
                    d6:e2:ad:22:c3:c2:66:37:01:ad:54:c5:2e:a2:68:
                    3b:b2:f7:42:54:91:3c:18:95:b5:88:bd:8e:a6:57:
                    46:af:b4:48:d4:6f:a3:d8:75:67:6b:7e:5d:45:18:
                    17:09:87:ae:bc:26:32:a7:d8:44:d9:1e:cb:f6:de:
                    a4:a4:2f:63:ff:28:67:63:98:49:6a:86:6d:b1:b5:
                    34:eb:f2:0c:22:c4:57:0a:f3:fd:35:6b:50:3a:a9:
                    29:dc:97:62:c7:fc:3b:28:f2:a2:a9:a6:fe:b2:96:
                    43:34:5a:fb:0b:60:13:f6:b3:03:22:06:23:23:06:
                    f4:3b:eb:19:d8:d4:f5:82:37:c7:4b:4a:95:59:e8:
                    5d:71:51:2b:2b:55:6a:76:bc:c8:f1:99:59:90:b7:
                    70:bb:9e:6b:93:da:37:03:2e:1a:d4:58:ba:f5:ff:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C7:BE:93:FB:49:42:5B:24:86:8E:D4:E7:5E:58:43:AB:EC:63:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99678c98-d3dc-3a9b-a959-c4d048d35a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.106.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:38:a1:86:c7:1b:b7:ba:b6:b3:f6:7e:01:c5:ba:d9:66:9e:
         01:c2:5b:76:7c:be:37:9a:b5:67:37:0b:c5:eb:f2:9b:b7:06:
         a8:8d:1f:a1:41:35:20:3d:ce:1c:40:71:8a:b0:ed:09:09:38:
         d3:0f:97:7a:48:ac:40:66:13:dc:02:31:2f:bb:e4:f0:e2:f4:
         f5:2f:66:b1:45:d3:22:de:2f:88:61:62:f2:c4:0a:7d:fe:fa:
         83:65:d2:85:c1:76:21:de:5c:49:fc:55:90:a9:a1:b2:a4:ea:
         4d:1d:7a:1a:46:fc:b2:24:4b:ce:e6:71:6d:08:e9:e1:5d:b1:
         9c:0d:99:0e:57:de:4c:bb:7c:e4:0e:10:b7:f1:ac:38:68:54:
         20:80:ee:d7:62:6a:cc:6e:e9:9c:24:3d:4d:ce:81:83:a6:95:
         e5:bb:a5:57:e1:18:20:15:62:e4:17:8d:1c:7e:36:85:db:77:
         4d:90:d5:f2:bd:8a:b5:58:a9:e0:93:eb:38:22:36:4f:85:b9:
         21:22:c9:51:8e:78:3d:be:53:f0:84:70:78:6e:6b:ba:14:c9:
         f3:b4:a2:3f:01:19:02:53:f6:49:42:e9:6a:9a:57:82:18:8b:
         b9:78:df:3e:7d:11:2d:71:ab:1b:c4:73:bb:3d:06:1a:51:79:
         ce:b5:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org