Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb061cad-684a-3697-b9ca-2044bb35a3ab.roa
File:                     cb061cad-684a-3697-b9ca-2044bb35a3ab.roa (raw, json)
Hash identifier:          uFD+VGpLqBtTvdw8wmComiO0X6cTViVQC5YD2yRFaic=
Subject key identifier:   3B:65:82:07:C9:20:CA:DA:F1:6F:3E:A9:FB:D3:94:C8:96:35:F2:15
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583839927ABDA5D55407D73F9100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb061cad-684a-3697-b9ca-2044bb35a3ab.roa
Signing time:             Thu 10 Dec 2020 05:00:00 +0000
ROA not before:           Thu 10 Dec 2020 05:00:00 +0000
ROA not after:            Thu 03 Dec 2026 05:00:00 +0000
asID:                     11426
IP address blocks:        24.88.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:39:92:7a:bd:a5:d5:54:07:d7:3f:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 10 05:00:00 2020 GMT
            Not After : Dec  3 05:00:00 2026 GMT
        Subject: CN=d0912684-9d3f-4cc4-911c-5abe2d108c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:3e:34:35:90:b5:3f:af:b2:23:47:9c:30:
                    e7:04:f1:78:93:88:52:f2:3e:16:ff:bf:44:a3:90:
                    e0:ca:88:de:f2:a9:f8:0e:11:0a:a2:78:f7:79:2d:
                    5b:52:84:4b:0e:34:69:3b:a4:40:be:c6:be:4f:7d:
                    9d:1c:3d:ca:90:0c:ae:6f:8a:c2:70:0d:97:63:15:
                    51:75:0a:cf:76:9b:ad:58:88:80:fc:c7:50:1d:70:
                    82:66:4c:d8:15:79:c4:51:00:9a:16:21:79:37:7a:
                    35:65:8d:96:70:d3:7e:7f:4b:16:f6:6d:79:cc:cd:
                    d9:e3:5c:86:ed:a2:d0:c3:7b:a5:2a:76:9e:ae:00:
                    e2:ca:e6:7e:a4:10:c4:5a:98:0f:26:16:bb:b5:41:
                    93:fd:e8:28:35:1e:ca:c7:d1:cb:3c:d0:95:3a:d2:
                    4a:dc:72:9e:d2:b2:07:a6:0d:e1:bb:d8:88:73:e4:
                    8f:7b:61:cc:64:f4:68:db:ee:ba:81:66:b8:b4:31:
                    3a:18:46:e0:bc:62:c6:f7:ee:a3:5c:9c:0b:85:5a:
                    e0:e0:86:dc:38:54:8b:c0:90:cd:16:9d:f1:b0:1c:
                    a3:49:21:75:0c:47:eb:87:9f:06:57:27:07:cd:1d:
                    f2:64:3e:63:4b:76:a5:19:1e:d5:cb:48:ee:78:bf:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:65:82:07:C9:20:CA:DA:F1:6F:3E:A9:FB:D3:94:C8:96:35:F2:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb061cad-684a-3697-b9ca-2044bb35a3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:3a:b3:c3:da:5c:49:30:91:eb:b8:28:21:fa:c7:a3:d8:
         a0:5c:d6:92:32:a7:66:25:ef:b8:7c:df:e4:86:2e:81:9e:91:
         82:1b:2c:9e:f0:7b:ff:92:85:da:85:ba:11:fd:24:57:37:ec:
         44:9a:7a:e1:f0:99:2f:71:d5:6f:e8:29:9d:6c:ca:88:02:84:
         99:b0:40:b1:6b:cc:d7:b1:5f:35:1e:84:87:8a:c4:b3:03:e8:
         bc:48:81:b2:1b:a1:12:99:40:1f:78:69:83:1b:4f:6a:a3:0b:
         0a:47:d7:a1:6e:2b:a9:f5:b7:49:35:24:58:e9:c4:df:11:f6:
         49:a1:74:db:25:09:b8:06:fb:ca:be:b5:f5:c2:d8:3f:16:17:
         5c:b1:f1:47:04:be:ee:01:9e:72:4e:17:07:98:34:4c:2c:0a:
         80:df:94:37:20:3c:46:0c:a0:49:d0:95:f7:4e:94:73:fd:4e:
         0d:46:a0:84:c8:b8:b5:7f:f3:0d:55:09:6a:4c:b9:09:8f:23:
         bc:73:5b:5a:c1:86:50:65:f7:2a:12:4d:bc:5a:39:68:46:83:
         5e:d1:dc:46:31:34:a2:8d:ad:5d:f2:b6:11:b2:24:ed:e7:05:
         fd:cf:0a:e7:e8:97:50:a0:d2:59:6f:bb:36:47:ef:b9:9f:e1:
         4e:77:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:57 2024 by rpki-client on console-ams.rpki-client.org