Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d12fdd9f-9d5b-39fd-935a-4cf949eb1123.roa
File:                     d12fdd9f-9d5b-39fd-935a-4cf949eb1123.roa (raw, json)
Hash identifier:          +DQdZysx9q09IAZqun/tiNDgis+fPtls+EPyB4NoPDM=
Subject key identifier:   05:CB:BC:0A:77:45:4B:57:E0:94:3C:A1:E9:90:19:30:6E:68:91:C7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A0EB3973E9E98F870000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d12fdd9f-9d5b-39fd-935a-4cf949eb1123.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11426
IP address blocks:        24.172.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a0:eb:39:73:e9:e9:8f:87:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=e3698f54-af54-47a3-be8a-78e9f6bf06b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:c7:ed:b5:e1:b2:f6:de:a2:67:ed:6c:3e:
                    2e:81:0c:cf:e2:24:0d:4c:4b:27:24:91:bd:a1:11:
                    06:78:d8:5e:02:f7:8f:0f:6b:cf:e5:2a:69:78:66:
                    ac:94:d2:a8:12:56:ff:7d:e6:03:e7:15:b6:00:47:
                    e6:7b:98:20:63:05:66:35:3d:0c:13:26:22:21:c8:
                    a1:2e:35:e9:13:bd:0a:17:eb:ac:65:49:4c:47:64:
                    e8:da:46:54:74:04:7b:67:fe:c8:49:82:bf:b2:b2:
                    69:d2:ef:6a:65:d0:fa:17:46:1e:2a:41:7e:fb:6f:
                    fe:b2:15:5c:71:4a:44:08:a2:c9:97:56:c0:be:11:
                    c8:3c:14:92:2b:dd:0f:1b:3b:a4:d3:38:69:d4:41:
                    93:f3:27:00:dc:b9:77:77:07:cc:27:80:55:e6:7b:
                    53:20:43:b3:3d:54:d0:1a:92:a7:04:8d:6d:ae:d3:
                    c8:e5:6e:84:d7:e9:0e:68:e6:80:be:47:ba:7f:82:
                    bf:e4:cb:3e:13:d6:72:32:2e:7a:60:91:e9:95:d7:
                    b4:20:34:b5:7a:43:e0:4a:3b:ac:dc:00:f4:9d:ae:
                    35:ff:9d:40:e5:cd:f9:1d:92:e2:08:b6:21:fc:90:
                    2e:0a:51:29:72:9d:0f:5c:94:f3:58:aa:ae:5f:c7:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:BC:0A:77:45:4B:57:E0:94:3C:A1:E9:90:19:30:6E:68:91:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d12fdd9f-9d5b-39fd-935a-4cf949eb1123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:19:3a:de:06:d7:20:d1:23:80:11:7f:4c:ca:38:0b:bf:
         c6:45:a3:e7:dd:b1:f7:3a:ab:7a:df:c8:5e:06:d2:99:c6:93:
         db:ee:9d:87:74:07:df:a6:ed:4e:0c:69:02:72:fa:05:23:98:
         e0:e3:47:86:80:1a:43:9c:3c:8d:2b:67:6a:d2:f2:f2:72:d4:
         42:81:27:47:eb:ba:49:41:04:68:f7:0c:69:59:a7:40:87:a7:
         c6:24:92:9e:c3:52:68:63:23:37:b9:eb:76:e3:8b:4c:7b:81:
         f6:e6:4c:6d:70:db:16:f4:4f:5d:36:86:78:74:78:32:5e:f0:
         a0:3d:ec:97:98:8d:fc:4d:23:ef:0b:73:b8:18:7b:c3:93:1e:
         93:dc:45:da:64:3e:52:07:5f:ed:47:fe:07:c2:b6:80:df:52:
         d8:ef:09:9c:3e:3b:f3:6c:1f:c0:71:a8:d0:0e:ff:34:40:0a:
         e0:4d:bd:1a:55:a1:74:e7:f4:6d:f6:51:ec:5d:d2:10:98:24:
         ae:b4:d6:6d:c2:d5:6a:34:66:e0:5a:db:0e:4d:d9:73:82:1b:
         ef:15:f9:7b:1a:24:ab:50:a6:35:bd:5e:5c:47:26:26:10:6b:
         f1:9f:47:2b:f9:b7:81:4f:2e:9a:ac:54:4f:08:fc:62:dc:76:
         ad:21:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:51 2024 by rpki-client on console-fra.rpki-client.org