Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cac9c090-97f5-3d8d-89fd-e86b9147a85b.roa
File:                     cac9c090-97f5-3d8d-89fd-e86b9147a85b.roa (raw, json)
Hash identifier:          xVR1IkR28+fWZDymlnWO4mC7wH7IDgNbB8jQO1zWkec=
Subject key identifier:   45:5A:57:D2:CB:E8:D6:5D:B3:00:1C:15:BE:00:68:CA:9E:26:73:C3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0B97488BD34D0B8002480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cac9c090-97f5-3d8d-89fd-e86b9147a85b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     27325
IP address blocks:        24.227.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:b9:74:88:bd:34:d0:b8:00:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=eb7c6666-c689-41af-889b-eb1b2719f9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:23:2c:a0:a1:77:1f:98:e2:aa:55:95:c0:
                    f5:05:17:76:1a:df:a4:fa:24:34:23:80:e7:2a:37:
                    8f:6d:61:20:5a:08:ff:47:ba:26:25:f0:af:64:07:
                    87:ab:e5:34:56:19:00:5d:5e:2f:54:cb:cf:d9:6f:
                    a7:6d:c9:5a:e2:e6:89:ac:5a:c5:b3:c2:53:2e:97:
                    48:90:09:ab:89:eb:93:85:1b:aa:ac:3e:ae:c7:d3:
                    79:fe:e9:65:8b:34:9d:a3:2d:73:50:ed:b8:6c:df:
                    e4:be:82:c4:1a:ec:90:13:c3:49:12:e2:4c:b3:dc:
                    86:f0:8c:37:af:8d:04:8a:83:2c:1a:2d:6f:0c:49:
                    cd:bb:98:3e:16:31:92:4f:2d:ab:81:f0:de:ea:cc:
                    08:d1:63:f2:b2:d5:dd:ec:22:df:f6:bb:b7:83:3e:
                    47:c4:50:08:a3:0b:31:e2:e3:e9:f7:fb:74:e8:df:
                    fa:55:36:99:82:37:13:0a:cd:ff:d1:4a:f6:f6:18:
                    ff:6c:ae:b7:7c:32:92:8a:72:ba:69:a0:1e:e5:ce:
                    2e:0b:58:f5:99:e2:e0:de:94:f7:e7:7e:70:7f:8b:
                    1a:b3:97:e1:43:c2:70:10:ef:e3:48:f0:38:4b:15:
                    05:50:c6:19:6a:0d:ad:e3:20:47:6a:0f:85:1d:25:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5A:57:D2:CB:E8:D6:5D:B3:00:1C:15:BE:00:68:CA:9E:26:73:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cac9c090-97f5-3d8d-89fd-e86b9147a85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.227.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:bf:e5:b2:6a:5c:f4:d8:79:26:91:47:61:68:a7:e0:c6:
         ff:0d:97:5f:56:e5:b3:a3:80:6f:a9:72:14:36:21:bf:89:04:
         18:19:7d:25:a1:89:af:a2:e3:15:74:cf:72:7a:58:55:7a:3b:
         60:4e:dc:42:f6:27:ad:3b:b7:e3:c4:d2:cc:3c:2f:f6:72:1f:
         54:16:0e:de:2c:f8:cc:2c:0e:84:5b:05:78:32:da:88:6f:d8:
         23:3f:4c:ac:ad:10:af:4a:89:e7:f9:7f:14:a7:3b:8f:61:fb:
         2a:26:ff:89:38:ee:30:30:f9:d9:bc:5b:9a:8c:10:33:7f:39:
         61:db:38:7d:0b:f1:8c:60:96:71:98:14:6c:82:71:85:b7:ec:
         8e:a5:97:28:0d:de:24:e2:03:05:30:5e:02:98:57:1e:1c:ca:
         b0:23:ee:cf:b3:20:40:f5:84:e0:6d:cb:df:c1:a9:cb:4f:77:
         7e:0b:1f:4b:38:d5:6d:a5:12:1b:a8:6e:c1:cc:b2:28:db:4f:
         b0:4c:58:8e:77:7a:a4:50:9d:b5:5f:24:05:68:aa:f5:b9:0e:
         b6:91:cb:7a:c0:a1:4f:56:91:77:68:bd:54:23:ec:3d:2b:9e:
         c3:10:07:d5:2e:a6:9d:38:81:5a:63:e1:42:ba:41:ef:a9:12:
         c0:ff:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:37 2024 by rpki-client on console-fra.rpki-client.org