Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b86ec66a-d8f2-32c1-aa0e-1d03fc30a49a.roa
File:                     b86ec66a-d8f2-32c1-aa0e-1d03fc30a49a.roa (raw, json)
Hash identifier:          pq24Aq9IAvKcn0pqVLSxWwqDXjdqIvGxFXW6H1hlUCU=
Subject key identifier:   DA:CD:1E:D9:19:72:A9:07:2D:57:34:1D:01:A3:4C:BE:A9:2B:31:34
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A081F865F0BE646A4DE680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b86ec66a-d8f2-32c1-aa0e-1d03fc30a49a.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     7843
IP address blocks:        24.33.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:81:f8:65:f0:be:64:6a:4d:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=de4122b9-fcf8-42cf-ab02-ebd7f6453e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a4:8b:3f:ef:5b:90:97:20:3a:33:a8:99:40:
                    10:07:88:db:60:e7:0a:7b:82:06:51:1d:61:cf:93:
                    f0:fb:fd:46:79:e0:3b:39:98:55:68:8e:b6:b8:70:
                    9a:81:0b:d1:2c:20:11:a6:4e:07:4c:9d:ba:0d:1e:
                    a1:84:cd:86:90:c3:ac:08:52:5a:9e:fe:be:39:a6:
                    a8:68:fe:43:07:dd:ad:b6:fb:bb:c8:e5:1d:b1:65:
                    8b:27:e2:17:e2:2b:c3:b3:a0:ac:ba:47:94:35:5c:
                    81:e4:a7:c6:75:e6:8d:d1:69:c6:4b:95:68:e6:8d:
                    53:03:09:4a:ad:e9:67:fb:90:3b:3e:27:e5:85:49:
                    88:d8:8b:b5:9d:51:e2:81:56:fb:e8:02:a7:df:9a:
                    68:f9:db:66:8e:5e:f5:36:b2:53:80:df:41:46:92:
                    35:c4:bd:75:2d:d6:f3:ec:76:fd:be:02:57:29:46:
                    52:8d:b2:18:b0:a2:7b:b5:42:e9:94:44:fd:ed:cb:
                    3a:35:0c:0f:90:92:d7:68:68:aa:ab:5a:e6:9d:fa:
                    82:b2:8b:69:b7:6c:7a:da:7c:dd:3a:b2:45:7c:c9:
                    a6:ae:62:c1:ef:0f:06:8d:cf:aa:ed:3f:10:87:e9:
                    28:cd:1f:0f:71:69:89:9f:db:52:4d:39:59:c7:a7:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CD:1E:D9:19:72:A9:07:2D:57:34:1D:01:A3:4C:BE:A9:2B:31:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b86ec66a-d8f2-32c1-aa0e-1d03fc30a49a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fb:fa:e2:58:d7:a6:d8:6c:48:08:86:71:51:e3:b5:4f:3b:
         cb:8d:ef:2f:26:82:09:f7:f1:b0:9a:28:4f:22:cf:65:be:ab:
         36:c8:da:57:7f:ee:da:e3:f4:ab:1b:48:86:08:c1:33:07:ff:
         f1:13:0f:58:99:ee:f8:12:c7:e3:09:0e:a6:fc:76:25:82:a1:
         d7:ca:54:f6:ef:27:4c:7d:2f:da:a1:9f:29:8b:f9:63:75:ef:
         7f:18:bf:51:23:f1:c3:23:55:95:4e:39:73:74:9c:97:36:a1:
         ea:95:97:02:ef:99:d4:f1:8d:96:3f:af:4a:32:03:6a:fc:8c:
         92:3d:38:cf:f9:12:e7:76:48:e1:e5:48:99:db:07:87:57:84:
         08:01:3b:a7:cd:55:bb:b1:40:9d:be:1e:b6:17:ac:14:a6:df:
         8c:95:10:d7:e9:ba:2e:76:0b:cb:65:fe:1e:93:10:75:da:7c:
         a9:db:c8:08:25:0e:fc:d0:24:fd:8a:77:8c:17:71:29:32:80:
         a2:15:c1:b4:46:f0:f2:23:16:bd:5c:42:f1:c7:d0:9f:af:7c:
         36:c3:35:e5:d0:f2:16:7e:b6:90:18:25:1a:e9:49:b2:14:74:
         e7:12:80:9d:92:eb:d5:22:aa:83:0c:b8:d2:54:57:6b:65:4c:
         55:a9:c9:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioIH4ZfC+ZGpN5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZGU0MTIyYjktZmNmOC00MmNmLWFiMDItZWJkN2Y2NDUzZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aSLP+9bkJcgOjOomUAQB4jbYOcKe4IGUR1h
z5Pw+/1GeeA7OZhVaI62uHCagQvRLCARpk4HTJ26DR6hhM2GkMOsCFJanv6+Oaao
aP5DB92ttvu7yOUdsWWLJ+IX4ivDs6CsukeUNVyB5KfGdeaN0WnGS5Vo5o1TAwlK
reln+5A7PiflhUmI2Iu1nVHigVb76AKn35po+dtmjl71NrJTgN9BRpI1xL11Ldbz
7Hb9vgJXKUZSjbIYsKJ7tULplET97cs6NQwPkJLXaGiqq1rmnfqCsotpt2x62nzd
OrJFfMmmrmLB7w8Gjc+q7T8Qh+kozR8PcWmJn9tSTTlZx6dEIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrNHtkZcqkHLVc0HQGjTL6pKzE0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjg2ZWM2NmEtZDhmMi0z
MmMxLWFhMGUtMWQwM2ZjMzBhNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCHxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFz7+uJY16bYbEgIhnFR47VPO8uN7y8mggn38bCaKE8iz2W+qzbI2ld/
7trj9KsbSIYIwTMH//ETD1iZ7vgSx+MJDqb8diWCodfKVPbvJ0x9L9qhnymL+WN1
738Yv1Ej8cMjVZVOOXN0nJc2oeqVlwLvmdTxjZY/r0oyA2r8jJI9OM/5Eud2SOHl
SJnbB4dXhAgBO6fNVbuxQJ2+HrYXrBSm34yVENfpui52C8tl/h6TEHXafKnbyAgl
DvzQJP2Kd4wXcSkygKIVwbRG8PIjFr1cQvHH0J+vfDbDNeXQ8hZ+tpAYJRrpSbIU
dOcSgJ2S69UiqoMMuNJUV2tlTFWpySw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:31 2024 by rpki-client on console-ams.rpki-client.org