Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a281ddbc-a17b-36d3-a813-4a84acba7db4.roa
File:                     a281ddbc-a17b-36d3-a813-4a84acba7db4.roa (raw, json)
Hash identifier:          A5VP1v/izMtSzW4v/dWS94BS1GUar/7OdC3/qUnNglY=
Subject key identifier:   91:D5:A8:6B:06:6D:4D:69:70:9F:34:D8:CF:7A:D2:2E:B9:49:EE:81
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845909DEE0198DE13753EC2C220
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a281ddbc-a17b-36d3-a813-4a84acba7db4.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     20001
IP address blocks:        24.160.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:ee:01:98:de:13:75:3e:c2:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=09c82858-180d-4f22-95fc-f38cc32a0579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:30:6f:96:36:c7:53:9b:da:a2:57:98:a6:
                    6c:d0:ad:98:4a:ef:5c:e0:1a:88:98:90:46:ea:e4:
                    db:48:a8:86:98:cb:ab:52:96:cb:bb:73:f9:57:a3:
                    87:5e:bb:45:7b:1e:c6:21:95:69:e7:85:91:aa:80:
                    75:8a:40:cc:af:e7:6b:a9:48:c6:20:16:ae:f7:dd:
                    76:96:68:97:18:8b:50:d5:3c:69:e4:2c:95:15:d5:
                    f4:4c:18:59:1e:12:36:b9:8e:0b:ef:62:99:35:7d:
                    27:41:68:da:b7:de:e3:b4:43:9f:ba:19:bc:d0:30:
                    6f:a8:3a:ae:6b:47:61:03:19:0a:2c:ca:14:95:a9:
                    73:69:21:92:b3:17:6a:e5:53:f6:fc:0e:4b:b7:99:
                    39:15:dd:2b:b5:2d:16:a2:2d:50:9a:4c:e6:79:5e:
                    f2:34:f7:10:03:eb:dd:7d:d9:ca:81:68:67:66:fa:
                    96:bf:f0:ea:2a:f1:80:9f:a5:d7:2d:75:96:d2:c5:
                    7c:ab:7c:b7:da:1d:4a:3c:63:a4:24:b3:4d:bf:3d:
                    f3:21:3f:31:e4:bb:a6:43:fb:7b:c7:8e:aa:e1:5a:
                    8c:21:1f:03:f1:65:6b:ee:fb:3b:0e:00:5a:c6:bd:
                    c7:97:7b:91:c6:7d:3f:22:8e:f4:af:db:38:bf:0e:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D5:A8:6B:06:6D:4D:69:70:9F:34:D8:CF:7A:D2:2E:B9:49:EE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a281ddbc-a17b-36d3-a813-4a84acba7db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:57:0a:56:d2:79:36:ac:99:33:a2:de:57:f6:63:d4:b9:d4:
         c9:cc:56:ab:1a:9b:8d:fe:2e:4b:45:50:07:ec:6f:54:f0:1a:
         11:5e:5d:16:0e:ca:41:76:bd:d5:90:26:17:b9:91:52:0b:09:
         37:26:79:2c:12:26:5a:0f:24:0b:5a:57:1d:5e:9b:b4:ce:b3:
         29:e4:2c:8b:95:8a:6a:06:66:6f:8c:f0:81:3f:19:5a:1f:1e:
         fa:9e:2c:9d:e2:b3:7f:c9:8c:20:cf:4f:60:ef:2d:37:a3:dd:
         a2:94:1a:82:d9:19:5a:03:9c:c9:99:5e:7f:04:65:af:80:9c:
         83:85:78:2a:a5:ba:89:82:d7:35:bb:fa:33:a6:dc:b0:19:9f:
         2a:6f:e2:27:29:b7:92:5b:12:2f:bf:3b:bd:85:dd:fd:86:8c:
         a0:51:8e:fb:90:8d:80:c8:a8:10:2c:b9:96:ff:9c:25:97:b5:
         b6:9c:25:aa:de:69:9f:2d:9d:77:f9:f8:89:ec:2e:a6:dc:c3:
         bd:7f:5c:b5:b0:9b:39:28:f1:32:62:fa:4c:5b:b2:bf:47:bb:
         9d:85:7e:15:d7:71:76:a8:00:73:d9:7a:6d:bb:4c:4d:b6:24:
         07:ba:f6:e3:55:1e:be:7a:96:54:97:2b:fe:70:86:b3:a4:21:
         b4:2c:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:54 2024 by rpki-client on console-fra.rpki-client.org