Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6acc03c-e513-3e62-8b43-03731c2dc111.roa
File:                     c6acc03c-e513-3e62-8b43-03731c2dc111.roa (raw, json)
Hash identifier:          Vmy3sPaj8m2X9P/2sHmq9RvBUP2QDY+XnyRmwCdPxow=
Subject key identifier:   85:23:B6:9B:6A:94:D6:5B:F4:8B:CA:19:E4:82:25:60:39:53:56:3E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A12E047D1CEDAE3E8B5080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6acc03c-e513-3e62-8b43-03731c2dc111.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11426
IP address blocks:        24.172.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:2e:04:7d:1c:ed:ae:3e:8b:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=bd116bce-dee8-42b3-823a-04e15c8709c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:bd:8a:bf:a7:09:4f:98:f2:f6:89:60:45:
                    a7:75:51:26:8f:59:e9:da:8a:77:57:4f:37:08:3b:
                    00:7e:15:7b:22:70:f2:05:6d:e8:48:20:0a:45:9d:
                    44:57:ad:1d:88:0e:3f:77:e8:65:19:ce:4b:6f:41:
                    57:55:37:80:be:af:1e:0b:80:51:ec:06:95:5f:43:
                    6e:8b:b1:b8:96:63:c7:0f:aa:c4:ea:e8:5f:79:25:
                    34:1d:d2:61:2a:4f:36:bc:37:9a:5d:34:f8:ec:01:
                    15:df:d2:b8:33:20:b1:80:3b:f5:64:74:3d:be:f3:
                    b2:fd:66:11:14:01:d0:46:52:66:3c:b1:64:35:90:
                    7e:3d:c4:13:ae:34:26:08:c8:79:b3:c9:6f:1f:42:
                    55:5d:e6:fe:7a:4d:f3:e3:ba:89:a6:c6:67:ce:62:
                    e1:6c:de:f2:ba:b9:ca:b5:b2:2c:e6:ea:f4:3e:f6:
                    0c:40:d2:b9:d3:f7:4e:d5:5d:3f:d0:46:1f:a4:85:
                    6b:d9:a5:c8:d6:b0:29:05:b1:3c:a2:d2:d6:76:63:
                    55:64:46:f3:0a:28:dc:d6:98:a0:9a:4a:33:f9:b6:
                    dc:75:a7:f1:58:9d:9c:42:91:bb:a0:f6:43:41:7d:
                    f3:fb:8d:0f:50:ac:2c:14:34:f4:ba:2f:3d:5f:4d:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:23:B6:9B:6A:94:D6:5B:F4:8B:CA:19:E4:82:25:60:39:53:56:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6acc03c-e513-3e62-8b43-03731c2dc111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:04:1f:d2:32:3a:36:74:20:e0:ed:f5:3e:3a:3d:d6:64:e8:
         b1:40:14:4a:cb:8b:c9:cc:ae:b7:28:9e:b6:08:d0:09:25:0b:
         c6:8b:69:ad:24:e7:88:30:a0:ab:f2:99:dc:10:c6:99:12:2f:
         94:af:61:15:a5:7f:15:b1:64:46:05:e4:7c:9c:12:f5:eb:27:
         ad:3d:1c:ed:89:34:24:a7:42:db:a5:15:58:c2:28:0a:5c:e7:
         5f:79:1f:6c:d5:51:8a:a2:26:b7:a2:ca:a6:65:79:81:1b:da:
         9c:22:93:76:df:69:e0:6a:40:a9:11:32:aa:67:46:df:0a:51:
         53:1b:7b:21:59:13:7b:d7:2e:55:85:8d:9e:8c:fc:53:29:82:
         6d:94:62:2f:b1:13:1c:88:33:36:9d:6f:da:03:63:9f:35:94:
         3c:29:89:31:aa:2b:4d:81:04:10:d3:20:f2:d9:d0:03:d6:cc:
         4c:02:8d:f3:bf:58:e5:1a:b0:c6:1e:11:a5:ec:e3:04:63:f5:
         de:d0:2d:44:ba:17:e0:9d:03:18:ac:93:8a:c1:dc:48:8f:31:
         44:2d:01:c3:84:ce:2f:bf:a3:2d:75:76:b3:fb:0b:57:60:cf:
         49:c7:87:0f:0c:f5:b0:6f:3b:7e:63:c4:7e:f9:c6:51:e5:0b:
         7f:7a:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:50 2024 by rpki-client on console-fra.rpki-client.org