Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a518ecbf-5de2-3b7e-9373-5ae656630d6e.roa
File:                     a518ecbf-5de2-3b7e-9373-5ae656630d6e.roa (raw, json)
Hash identifier:          2L4+X7OXLpx79YXAr9d2o43cjj1sFgl/MMJlRRk1Lyc=
Subject key identifier:   27:81:9E:34:DB:DA:DE:9B:6F:18:66:FE:63:4A:45:30:5F:B4:DB:9F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF1EF6C8A58993BA87D2C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a518ecbf-5de2-3b7e-9373-5ae656630d6e.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     12271
IP address blocks:        24.29.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f1:ef:6c:8a:58:99:3b:a8:7d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=311a5ebe-eb67-417e-ad66-72b3845ae454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:64:03:26:bb:20:d8:da:5c:7c:e1:8f:93:64:
                    93:79:6f:67:e8:6b:f0:b6:64:b1:50:ea:a3:81:bd:
                    30:1f:17:84:59:a0:16:76:8a:30:53:cf:d0:2c:c2:
                    3c:73:28:8e:d7:f5:5d:08:82:bb:cb:0f:ee:c1:b5:
                    a5:b4:bd:1a:a3:2d:cb:da:1e:f4:79:ea:58:86:5b:
                    57:db:10:c5:f6:43:c5:cb:c7:cf:d6:d6:3a:cc:f3:
                    39:0b:78:05:67:f2:fc:29:bb:cf:24:70:99:dd:ff:
                    dd:ad:82:3e:b8:02:bc:63:b5:c0:ee:10:89:92:55:
                    5b:ab:97:4b:e5:44:1e:18:18:40:3f:98:91:28:23:
                    c3:6e:34:c3:e7:93:8f:ed:cf:a4:25:e5:81:7d:6e:
                    86:64:16:72:19:17:35:8f:3b:b8:6d:dd:39:67:94:
                    97:da:0c:fc:06:1b:15:69:a6:62:f4:39:05:43:b7:
                    7e:b8:b1:5c:9e:2e:1f:a5:44:74:e4:8a:8e:7e:e5:
                    85:a4:03:57:a4:eb:f2:01:1d:82:e9:71:e1:1c:64:
                    ef:5a:cd:fa:74:07:31:6b:08:9a:99:ff:a5:ef:2b:
                    67:a3:aa:4c:04:aa:28:36:d1:e2:e7:02:66:43:5e:
                    6e:54:5b:ea:33:fa:fa:73:3f:0f:6b:ac:68:7b:2a:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:81:9E:34:DB:DA:DE:9B:6F:18:66:FE:63:4A:45:30:5F:B4:DB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a518ecbf-5de2-3b7e-9373-5ae656630d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.29.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6c:ba:01:ca:f9:f7:19:5e:bb:a0:19:85:a2:37:78:05:20:
         27:43:3b:2d:b4:1b:9e:4d:66:25:e0:05:14:a5:00:f3:68:08:
         88:87:03:24:1b:f7:7e:af:1f:9f:59:0f:76:8e:8e:ad:b2:85:
         c5:b8:25:3a:02:ef:ec:c8:65:90:ea:66:c4:92:eb:68:b3:2b:
         6b:fd:57:cc:e0:30:22:61:bf:e5:43:09:80:ab:af:7d:54:6e:
         cb:cd:54:61:a4:44:cc:0d:c7:7b:f0:75:b3:7f:71:7e:e7:55:
         b8:cd:15:2a:3d:50:f8:a4:5b:bc:40:24:37:85:de:09:4b:55:
         9c:5b:6a:5d:25:9d:b7:6c:c5:14:31:6b:56:dc:8d:8d:00:31:
         f1:c3:c6:28:86:91:e3:77:20:cf:1e:17:73:11:b6:d4:ea:8f:
         70:94:2c:63:9f:9d:8f:93:60:d4:96:01:c5:b3:0b:a7:a2:d7:
         3c:02:41:22:72:4e:23:1e:a3:f0:51:91:fe:3b:21:a7:89:33:
         44:45:48:16:60:e6:82:0b:0d:bb:4c:ad:e0:ca:88:5d:e9:bc:
         28:5a:ec:13:81:14:cc:c9:a4:01:94:cd:ee:10:cb:44:9d:a3:
         55:0f:34:b4:aa:39:be:33:b0:b2:da:1f:d4:e6:5b:47:c8:ef:
         2d:4b:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:27 2024 by rpki-client on console-ams.rpki-client.org