Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6acc03c-e513-3e62-8b43-03731c2dc111.roa
File:                     c6acc03c-e513-3e62-8b43-03731c2dc111.roa (raw, json)
Hash identifier:          pKDBMlwKTR6iY3pA9nzo+0LCLmR6bMAJAVCg4JgjiVc=
Subject key identifier:   BC:A4:32:31:3A:C3:58:AF:81:7E:6D:90:1C:1C:02:8A:24:F0:56:1F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E5A15A4828A5CE23D6400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6acc03c-e513-3e62-8b43-03731c2dc111.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     11426
IP address blocks:        24.172.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:5a:15:a4:82:8a:5c:e2:3d:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=0367fca0-bb91-4d26-8411-90c4019632d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:c2:ea:8a:88:a5:ce:64:b5:97:36:0f:51:
                    c2:81:85:ec:4d:1b:28:ce:ca:65:9d:82:d2:d9:9e:
                    12:7d:19:26:71:96:65:5d:a3:40:36:e9:7a:10:53:
                    0c:75:2e:0c:b9:7d:71:c6:92:e7:f9:6a:21:6e:2f:
                    06:6f:b9:a6:57:c3:b5:d0:6c:e3:40:fa:29:d6:4f:
                    b1:cb:59:45:43:96:55:e5:38:78:2d:2f:94:19:f0:
                    f4:85:3e:3e:bd:db:35:b6:05:80:7d:82:b1:cf:67:
                    53:8f:4c:9e:9d:2b:d2:0d:fb:5c:19:d5:62:1c:0b:
                    9b:c2:88:81:75:36:13:fb:af:d1:0e:bb:4d:96:91:
                    96:a9:c5:72:d0:e0:2a:11:db:33:fb:a8:06:c3:0c:
                    1e:55:cc:c7:7d:d2:c8:aa:c2:5f:85:5c:f6:9a:2b:
                    d1:75:7c:a1:0c:2b:c4:75:ba:7a:eb:e7:cf:93:e4:
                    d0:13:f2:98:74:5b:43:11:35:6c:01:37:56:e9:e1:
                    2d:66:7a:a4:e4:6c:f6:db:c3:84:5a:4c:1b:6e:77:
                    cc:b2:ba:41:e6:3d:cd:33:29:78:a3:1b:21:6d:e6:
                    02:71:d0:95:b5:39:27:a6:19:9f:03:0f:cd:a8:47:
                    f0:93:2a:f1:2f:c4:60:5f:17:e5:eb:8e:e5:59:70:
                    6e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:32:31:3A:C3:58:AF:81:7E:6D:90:1C:1C:02:8A:24:F0:56:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6acc03c-e513-3e62-8b43-03731c2dc111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:e3:96:75:9e:9f:6d:bd:a1:88:76:d6:3b:5f:61:6b:1a:
         6a:a4:95:7f:fd:39:b3:53:da:81:59:34:0b:26:a9:f8:ed:a4:
         d6:d6:5c:7d:f4:3c:b4:7c:ea:e8:c8:42:c3:7e:97:0b:4e:04:
         90:24:0d:b3:b6:b0:df:c0:67:88:9c:bc:2c:84:a4:2c:e9:33:
         6d:35:f7:9c:86:f2:e3:7c:0b:7f:d8:fb:64:7d:74:f3:09:bf:
         38:00:b8:aa:da:2d:3b:c2:ee:f7:94:68:cb:59:5b:a9:00:2f:
         5c:82:50:0a:84:d2:34:48:ae:cc:35:95:e4:c7:1e:84:82:17:
         34:98:e0:78:ec:1a:52:58:4c:a7:fc:74:fb:62:67:b7:4f:e7:
         2e:c7:60:8c:7a:d9:e2:b0:d2:f6:67:73:b9:d8:d3:d3:37:07:
         61:14:14:cc:c2:ac:38:63:3d:77:48:5b:91:34:9e:89:33:c1:
         af:38:40:f9:a6:ea:f6:ab:43:10:e3:fd:32:bd:bf:bc:3f:68:
         8a:57:7e:d5:8a:bf:29:d2:15:97:20:91:a6:ce:3c:ea:b6:c2:
         b7:d4:60:7a:d0:b1:39:42:be:12:28:b4:25:f6:a2:8c:af:77:
         16:71:61:bd:17:1b:f8:45:92:93:d8:f8:a4:f5:c6:a8:1a:06:
         79:69:66:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:00:57 2024 by rpki-client on console-fra.rpki-client.org