Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b5e33a30-0fa8-3ed1-b578-b76f07986210.roa
File:                     b5e33a30-0fa8-3ed1-b578-b76f07986210.roa (raw, json)
Hash identifier:          vryQcpFAoxoKESslUWE4EQYll/v8pVTxa7a7aWQCb/U=
Subject key identifier:   06:EC:88:33:08:31:51:39:60:4B:9C:F9:A0:5C:34:2C:79:0E:19:5F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E5420B94B889A6DF65980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b5e33a30-0fa8-3ed1-b578-b76f07986210.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11351
IP address blocks:        24.25.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:54:20:b9:4b:88:9a:6d:f6:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=0573ed74-2a53-4558-861b-a03b51b02d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:95:cf:74:87:ed:74:3f:ac:98:b6:98:81:70:
                    48:4c:8f:14:9c:03:84:0d:7f:22:31:ca:ed:ff:67:
                    b9:d1:85:a9:dd:4f:e3:bf:dc:94:55:f4:f0:8e:99:
                    ca:0c:59:94:fd:ae:02:83:a1:b6:39:53:61:e4:09:
                    96:2f:81:92:98:66:25:a0:a2:23:cd:98:6f:a9:c4:
                    b9:62:e6:34:0d:ba:44:62:53:62:0d:e5:b8:37:a2:
                    73:65:38:bf:6f:73:8c:d7:a4:e9:d2:69:16:7e:82:
                    51:bd:74:4e:e0:ed:ad:88:f6:eb:20:ea:97:4d:2b:
                    52:9d:29:79:54:20:75:8a:ee:a5:d9:d3:30:6b:78:
                    54:5b:e0:d6:fd:5f:a4:e4:39:ce:1c:6c:0c:3a:20:
                    29:b5:77:a8:10:74:be:23:ec:0d:84:42:52:d4:9d:
                    60:e3:6d:11:63:ba:a7:a9:23:7c:ca:83:01:af:f0:
                    f9:fc:38:26:7d:b6:9e:19:f2:a6:f4:50:94:4d:f1:
                    0e:d5:27:0d:18:ae:1b:b6:2a:66:59:75:41:ab:ae:
                    d8:8c:1f:6d:80:ae:c7:55:77:65:92:f1:f4:f9:2f:
                    01:e9:e9:c5:50:5c:5e:ed:ca:32:60:3d:9b:5f:d4:
                    6d:4c:13:b9:27:14:97:da:b6:28:3b:ff:d1:d7:30:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EC:88:33:08:31:51:39:60:4B:9C:F9:A0:5C:34:2C:79:0E:19:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b5e33a30-0fa8-3ed1-b578-b76f07986210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.25.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7d:a3:77:9f:6a:4f:b1:72:6d:5b:5a:4b:0b:98:69:d0:49:
         32:60:93:16:fa:31:b4:e9:4a:a7:9e:88:9f:18:80:1c:4d:50:
         eb:a4:f5:f0:48:b4:bc:b3:4b:9c:28:5e:7d:dc:50:48:7d:2d:
         23:ea:43:90:35:85:6e:7d:39:fb:a1:68:17:53:d5:e5:ae:93:
         78:ad:57:01:ad:cf:62:54:14:26:d1:8e:7d:74:ef:20:82:3f:
         7a:71:29:12:4f:3e:f8:51:5a:a9:9e:1b:36:ff:d8:99:c5:42:
         4a:ff:89:c8:a2:cc:09:54:71:39:3a:9e:29:8a:e1:4a:a1:86:
         91:b7:d9:47:92:81:be:83:73:af:3d:ed:48:2c:5a:ef:1c:27:
         79:cf:82:02:ef:a7:23:da:9f:92:25:10:9b:0e:af:6d:a9:b2:
         77:7d:59:d3:e3:ac:46:7f:e8:34:d9:76:ec:02:d8:42:1e:ba:
         7f:a7:67:35:b6:9a:09:c4:f0:63:9e:fb:cd:c9:dd:72:aa:3b:
         d8:e8:a8:6f:c9:d0:1b:b9:ea:41:ab:30:0d:3e:ef:35:8b:7a:
         86:fd:77:c3:8a:f8:81:6d:f5:96:2f:01:15:a4:57:a5:8e:c4:
         a2:a0:44:85:5a:0d:d0:55:11:9a:38:da:91:8c:fa:28:8c:20:
         13:94:b9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:18 2024 by rpki-client on console-fra.rpki-client.org