Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d42692b7-cd3f-3627-a096-10ff515e829a.roa
File:                     d42692b7-cd3f-3627-a096-10ff515e829a.roa (raw, json)
Hash identifier:          V9g2lWLxXc2EnRdCVDhhhcccFeKGxGGPYD2JObIaU8s=
Subject key identifier:   2C:32:9B:23:DA:DC:86:7E:D6:6E:18:3A:46:3A:48:6B:B4:FB:93:AC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A5F5EB3AF96D58C30550
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d42692b7-cd3f-3627-a096-10ff515e829a.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11427
IP address blocks:        71.41.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a5:f5:eb:3a:f9:6d:58:c3:05:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=00158a38-79e1-46fe-85d7-62f71c382f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:e6:55:61:30:09:d8:ee:cb:a6:ce:99:11:
                    7f:a7:1f:85:de:5a:af:e0:f5:b4:69:c0:68:06:d2:
                    c8:ae:9a:03:91:5c:4d:53:4c:1e:03:d5:e5:2d:e1:
                    85:14:c8:ef:67:12:65:c6:87:54:db:22:c3:2c:25:
                    50:71:e2:58:53:b0:cb:f6:35:bc:53:70:29:5a:16:
                    c7:65:12:83:81:4c:52:80:de:b5:45:1c:91:4e:ec:
                    e7:0c:07:92:75:15:a4:c5:f6:3b:ee:ec:7f:a4:a7:
                    c6:4f:6f:e2:60:89:46:78:47:10:1d:8b:30:a3:67:
                    01:c0:5a:f0:36:a2:75:e2:f4:48:55:2c:f7:77:74:
                    22:da:15:10:7c:a9:db:e4:6a:3f:48:d8:40:c5:0a:
                    df:68:b4:40:76:7a:8b:51:80:b7:7e:9c:ce:31:74:
                    75:be:10:53:5e:a2:27:9e:b9:37:5d:52:54:cf:5b:
                    32:35:4a:cd:64:ec:15:d3:fb:9f:d0:01:a7:96:a1:
                    44:b1:6d:36:d8:51:0a:ec:bf:31:ef:e1:41:91:e3:
                    16:10:73:de:a4:f8:c9:33:2f:f3:72:1f:59:ee:f0:
                    29:95:7a:b6:df:5c:b9:43:d5:1c:d1:45:2c:b3:e2:
                    20:97:3a:2b:34:61:37:b3:ae:6d:96:ee:ae:b3:93:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:32:9B:23:DA:DC:86:7E:D6:6E:18:3A:46:3A:48:6B:B4:FB:93:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d42692b7-cd3f-3627-a096-10ff515e829a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.41.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:99:34:1f:8d:3e:f7:1e:f1:08:aa:7d:24:42:06:5f:9d:8f:
         d3:65:46:33:40:84:2c:19:6d:83:8a:f5:03:a7:28:3f:c5:59:
         63:1a:5a:48:21:1e:4b:da:26:7b:34:95:31:80:c4:a8:82:a1:
         ef:85:a7:f9:2b:9a:23:53:bc:4d:ff:3c:f3:9c:ab:f1:1e:83:
         cd:68:d8:52:0a:2c:9c:5f:78:60:e7:84:8d:01:16:5f:76:d4:
         fe:5d:1d:d0:b1:da:90:3b:a3:8d:78:e8:a7:f5:50:70:98:c0:
         f5:77:71:19:7b:15:32:2d:2a:72:36:b3:90:ec:9b:07:01:f9:
         9a:c2:18:fb:1d:80:30:69:11:f1:f0:fd:aa:5b:40:23:c1:9b:
         04:d1:f3:fc:c2:cf:ae:42:60:0c:a4:ea:05:65:fd:c3:e1:24:
         b1:ec:60:01:41:39:e4:59:1a:00:fa:77:23:55:73:6b:60:ed:
         60:f8:48:48:bc:8a:4b:5b:8e:ac:12:c8:e5:ca:e5:cd:34:2c:
         61:15:5e:5f:83:63:ad:3b:ca:9a:40:0d:24:68:be:83:8d:eb:
         63:01:93:17:7d:fe:79:da:b4:ec:7b:b9:2a:1a:e5:52:7f:fa:
         17:11:bc:6a:d2:75:c1:a1:d6:6e:05:f4:93:aa:27:e9:81:fb:
         d9:ba:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:38 2024 by rpki-client on console-fra.rpki-client.org