Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9cd2d929-eb91-30f2-920a-4eacfda2342f.roa
File:                     9cd2d929-eb91-30f2-920a-4eacfda2342f.roa (raw, json)
Hash identifier:          oShnAwQPRvdym0FlmsSTjh1ShxxNN7Ba6axuQJwg8Ms=
Subject key identifier:   CD:6C:D3:72:2F:E7:04:04:C7:D6:6F:B0:DC:66:3E:68:66:51:82:89
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0BE1505A29E748F698D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9cd2d929-eb91-30f2-920a-4eacfda2342f.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        24.73.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:be:15:05:a2:9e:74:8f:69:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=0ecdba23-ac4c-4638-a08f-211f5a70acde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:01:e1:ad:5e:59:32:4c:b4:ea:92:02:4a:86:
                    ce:ca:66:31:b0:75:e2:e7:0f:82:b6:87:c5:53:9f:
                    6f:9e:e4:19:04:93:57:f9:f7:a1:bd:4a:93:4f:79:
                    70:5c:d8:c9:e1:55:ac:d6:53:73:45:b7:96:0f:a5:
                    dc:72:e9:68:37:f3:35:fc:91:9f:fd:19:49:7b:ee:
                    6a:b2:c2:08:c4:6e:b7:c5:72:6a:88:18:42:08:14:
                    6e:c2:a4:d2:90:84:e9:9d:5e:22:b9:6a:25:cb:2d:
                    aa:e6:1c:35:1c:7e:75:bd:ba:dd:5d:9c:d7:5a:50:
                    72:6c:32:96:0a:b8:43:3d:a1:4c:c0:c6:2d:f1:90:
                    3e:8a:12:d5:c5:33:60:00:16:4a:49:ef:76:6a:4b:
                    a0:40:aa:f3:0b:76:33:0e:be:11:f7:6a:4f:44:4b:
                    37:90:7c:ed:43:9b:ed:cd:72:2c:af:ae:1c:6f:e0:
                    df:5b:66:ec:17:c2:27:8c:eb:dd:51:aa:da:92:d1:
                    a2:c5:bf:f1:95:ee:45:2b:b2:c8:da:78:7f:8c:05:
                    1f:26:be:3e:ee:39:4b:14:91:1f:31:41:5a:e1:da:
                    99:94:7a:9e:cd:29:fc:75:73:14:cb:91:33:9e:0b:
                    42:36:eb:c2:70:d8:71:b5:be:9b:55:40:e1:02:bf:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:D3:72:2F:E7:04:04:C7:D6:6F:B0:DC:66:3E:68:66:51:82:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9cd2d929-eb91-30f2-920a-4eacfda2342f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.73.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:31:0e:83:1b:66:97:ff:89:90:ec:2b:4f:67:1d:05:9c:13:
         c1:bc:dd:0e:0e:1e:cd:9e:95:15:37:87:73:30:8a:1e:2d:c1:
         c6:70:2e:8e:71:fc:6b:60:08:66:3a:62:f7:37:57:c4:d4:fd:
         f5:16:3c:4b:83:63:5a:f7:54:aa:e9:7e:32:d7:4a:21:ac:70:
         f0:38:4b:07:47:3b:c6:a7:84:af:b7:2c:a0:f9:5e:0b:9a:24:
         d8:e5:82:a6:8e:ec:37:5d:21:c2:28:29:47:36:2b:10:be:d2:
         82:44:a7:34:64:dc:91:33:61:70:ee:31:67:b6:dd:a8:94:a8:
         46:61:7d:3a:62:a6:a4:59:1a:64:87:12:45:64:2f:94:b8:38:
         62:18:4b:0b:68:37:a7:80:92:53:b9:ff:15:cd:d0:1a:f1:96:
         8e:32:b7:30:bb:32:89:2c:d5:5f:46:76:76:c5:d7:8b:22:45:
         d2:f8:4f:41:85:73:f7:a0:91:cb:4a:1e:9e:b9:a6:ec:41:cf:
         4d:e6:bc:e4:2b:a9:bb:19:37:a9:c1:38:39:1b:b8:32:2a:93:
         12:2c:c2:c9:d7:ed:d5:89:d3:15:de:92:84:b7:79:e9:3d:7b:
         ba:a9:2a:f0:b2:f7:b5:2d:00:16:c8:75:e1:d3:45:07:08:63:
         e4:67:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org