Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4e762ac-6951-3f72-82b0-0c7a521f6cdb.roa
File:                     d4e762ac-6951-3f72-82b0-0c7a521f6cdb.roa (raw, json)
Hash identifier:          6XQJHcNY/1kOhM/osODtJ6RGD6Z6gdrN6TUIY2MHeQw=
Subject key identifier:   D4:C0:8D:41:A7:34:E1:C1:47:AC:37:FF:21:91:4B:46:07:45:A6:D4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A12C32C9B14327619E14A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4e762ac-6951-3f72-82b0-0c7a521f6cdb.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11426
IP address blocks:        24.211.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:2c:32:c9:b1:43:27:61:9e:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f44b3537-7280-4bb2-bdd6-6c6a29ce801e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:32:6b:e2:6a:ba:64:a4:d8:a1:2b:4c:c0:
                    d0:10:1b:78:05:62:44:e6:d6:25:8d:fc:fb:84:37:
                    f8:db:ac:d7:3d:b2:e7:b9:a9:a4:09:60:f1:93:79:
                    64:4f:b1:1e:d6:37:92:ad:6d:68:6f:23:50:fe:e0:
                    1a:cc:2f:c7:2e:95:37:17:f9:27:62:cc:67:a1:fc:
                    d0:c0:65:9e:74:08:d8:b8:a7:d5:e9:6e:41:d3:0f:
                    ee:55:90:8c:5b:dc:47:b0:f3:61:c7:a7:d7:cb:7b:
                    d7:4f:81:9e:3c:cf:d8:76:af:cc:fc:7f:b4:48:26:
                    63:6e:f3:32:e3:4f:73:0b:93:cc:2e:71:be:85:03:
                    f3:9f:bf:63:66:d4:1f:6b:2f:60:5f:1e:a0:5d:9d:
                    da:83:9c:1f:e0:ed:cc:fc:94:73:8e:34:2e:09:4f:
                    72:a7:47:fa:8f:69:ba:18:c6:15:ec:be:da:8f:f5:
                    e3:4d:40:8a:dc:7d:b5:b7:a4:cc:44:e9:af:05:a6:
                    40:c1:71:31:86:a9:2f:71:35:89:1d:62:60:50:69:
                    26:8f:79:ab:56:c1:04:15:e2:74:62:59:a4:a3:57:
                    40:70:a8:2f:c2:21:94:9e:36:35:78:cb:d4:82:45:
                    94:63:f1:04:43:63:84:c2:45:27:e3:52:1e:8a:33:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C0:8D:41:A7:34:E1:C1:47:AC:37:FF:21:91:4B:46:07:45:A6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4e762ac-6951-3f72-82b0-0c7a521f6cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.211.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:07:0f:2b:d1:38:37:45:0c:c1:73:32:4f:c3:ff:fb:5e:8e:
         3c:63:a3:08:18:65:31:8b:c6:66:99:f1:24:2a:29:17:37:f6:
         4c:72:1b:8e:d9:a4:28:75:d2:6b:87:12:e0:f2:ca:6d:14:3b:
         ae:d8:6b:6b:60:80:34:2a:17:74:af:21:d0:96:1c:30:3a:4c:
         e9:32:a7:86:7c:6a:33:54:e4:88:13:84:9b:a6:4f:08:c2:d5:
         c3:82:64:50:8a:fa:18:28:d4:03:53:f1:7b:8f:aa:cc:40:31:
         78:48:94:58:f4:ea:05:37:1f:15:b2:e5:eb:3e:15:83:44:ed:
         ff:5b:94:ae:3b:b3:5e:4f:fe:1f:5f:34:ee:4f:26:a7:52:12:
         3b:0b:5a:d8:36:6f:b7:f6:d3:39:02:78:92:4c:f0:af:26:4e:
         b6:39:a2:98:c7:2a:0f:c6:69:77:d6:e0:bb:b1:87:54:9f:fc:
         4b:0f:53:a6:98:30:20:15:a0:dc:85:75:bf:2f:e6:36:50:d3:
         26:ec:3b:03:81:3c:08:98:a0:8a:92:83:23:27:b4:5e:94:49:
         bf:c3:31:8d:37:42:25:79:6a:b3:33:de:25:99:6a:a6:01:ee:
         e4:96:7c:3a:e6:ee:0e:25:67:09:33:11:fb:3e:a5:7a:02:1e:
         5c:04:b2:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioSwyybFDJ2GeFKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZjQ0YjM1MzctNzI4MC00YmIyLWJkZDYtNmM2YTI5Y2U4MDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OQya+JqumSk2KErTMDQEBt4BWJE5tYljfz7
hDf426zXPbLnuamkCWDxk3lkT7Ee1jeSrW1obyNQ/uAazC/HLpU3F/knYsxnofzQ
wGWedAjYuKfV6W5B0w/uVZCMW9xHsPNhx6fXy3vXT4GePM/Ydq/M/H+0SCZjbvMy
409zC5PMLnG+hQPzn79jZtQfay9gXx6gXZ3ag5wf4O3M/JRzjjQuCU9yp0f6j2m6
GMYV7L7aj/XjTUCK3H21t6TMROmvBaZAwXExhqkvcTWJHWJgUGkmj3mrVsEEFeJ0
Ylmko1dAcKgvwiGUnjY1eMvUgkWUY/EEQ2OEwkUn41IeijN34QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTAjUGnNOHBR6w3/yGRS0YHRabUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDRlNzYyYWMtNjk1MS0z
ZjcyLTgyYjAtMGM3YTUyMWY2Y2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGNOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEHDyvRODdFDMFzMk/D//tejjxjowgYZTGLxmaZ8SQqKRc39kxyG47Z
pCh10muHEuDyym0UO67Ya2tggDQqF3SvIdCWHDA6TOkyp4Z8ajNU5IgThJumTwjC
1cOCZFCK+hgo1ANT8XuPqsxAMXhIlFj06gU3HxWy5es+FYNE7f9blK47s15P/h9f
NO5PJqdSEjsLWtg2b7f20zkCeJJM8K8mTrY5opjHKg/GaXfW4Luxh1Sf/EsPU6aY
MCAVoNyFdb8v5jZQ0ybsOwOBPAiYoIqSgyMntF6USb/DMY03QiV5arMz3iWZaqYB
7uSWfDrm7g4lZwkzEfs+pXoCHlwEss8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:51 2024 by rpki-client on console-fra.rpki-client.org