Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a788077d-77a5-3a71-8219-aaa88687fd09.roa
File:                     a788077d-77a5-3a71-8219-aaa88687fd09.roa (raw, json)
Hash identifier:          FQUuqY3PGif9oATX3dUQgHurcooJWTZ0QktvAMJ1b3E=
Subject key identifier:   01:4B:E3:80:33:82:EE:B1:3F:BA:4E:3C:5D:6A:7F:B3:15:75:43:BD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DD34E881E238A84CD5200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a788077d-77a5-3a71-8219-aaa88687fd09.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        24.43.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:d3:4e:88:1e:23:8a:84:cd:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=fcd9ee52-9ee6-40fb-916b-8ade548debb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:09:d7:3c:37:69:2a:35:c9:52:a2:25:61:
                    f9:2c:60:0f:a6:b2:b9:5a:b6:fb:0f:42:15:ba:0a:
                    8f:90:0d:c9:a8:e5:20:2d:1f:5d:a7:92:e5:81:61:
                    9f:6c:e8:fd:52:0d:69:e9:6c:ae:39:bf:c2:e1:07:
                    21:3d:4c:0a:8e:4a:ca:0c:9a:97:58:ac:b3:ac:25:
                    17:5f:c6:00:d1:d2:f7:f8:99:bd:b2:71:0e:b8:2f:
                    a4:41:eb:61:68:ad:d0:ec:cf:01:b3:48:18:3f:d1:
                    64:44:a7:97:e8:bb:44:29:2a:58:1a:87:fc:a7:30:
                    53:f3:60:f8:6e:1b:e7:37:ed:af:03:55:7c:c5:29:
                    eb:63:b9:94:ba:d9:2f:1f:cf:0a:45:21:b0:3d:66:
                    53:5c:d8:79:21:8c:ef:ac:d1:52:b6:bb:8e:45:9e:
                    11:f2:08:68:15:ac:3d:3d:47:ab:b6:72:13:ed:9c:
                    3d:ac:f5:86:4c:5d:8d:74:27:7c:84:45:c9:ee:56:
                    ed:7c:2f:24:0b:01:dc:b4:b9:d6:30:f4:6e:91:1d:
                    f8:bc:14:35:15:7a:61:37:5b:da:72:cf:59:2e:26:
                    89:fb:8e:f2:32:b1:a3:e6:f3:23:7a:bf:ed:c9:2e:
                    97:a8:98:ca:ae:32:6d:3b:9a:a1:82:78:ec:1a:ce:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:E3:80:33:82:EE:B1:3F:BA:4E:3C:5D:6A:7F:B3:15:75:43:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a788077d-77a5-3a71-8219-aaa88687fd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.43.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:77:48:2b:c8:20:d6:5c:68:5c:b2:44:ec:fe:b1:f9:99:07:
         92:46:62:44:a4:f9:34:c8:ee:bc:bb:c1:6e:98:60:09:77:4a:
         6e:3b:59:7d:25:65:bb:69:45:41:71:25:8c:0f:84:0f:f4:4e:
         94:cb:20:ed:86:9b:9f:c9:e6:d7:8e:1f:9b:f6:ed:a5:e6:c0:
         1e:71:9b:da:bd:0f:06:6d:7d:d7:cc:77:a8:a7:44:9d:41:31:
         85:f9:87:f9:5c:a8:90:2a:09:07:56:4b:a8:70:44:46:e0:f7:
         c8:4a:22:9c:57:77:22:04:99:a7:11:37:2c:3f:86:ce:7f:a0:
         a4:7b:34:99:3c:5b:8e:12:34:e3:e7:7d:0b:25:57:9e:9e:d9:
         b7:c3:d6:4f:e2:a5:43:ec:6e:33:20:9f:03:6e:01:fa:1c:7a:
         e4:c3:ce:ca:9e:77:30:cc:f4:81:85:1b:75:8f:23:0e:83:97:
         2c:b1:18:29:f8:40:a3:8b:d8:ad:39:fa:df:81:72:d6:e1:50:
         35:5a:74:04:35:cc:92:21:ec:67:37:85:e4:c2:7f:89:c4:1a:
         85:a2:36:50:d1:70:f0:b2:ce:6d:0b:df:8f:45:d2:ca:d9:01:
         35:33:e4:5b:67:dd:55:67:e3:17:51:2c:98:18:29:3c:04:e8:
         86:35:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:54 2024 by rpki-client on console-fra.rpki-client.org