Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d8ab9ee3-e66b-3662-848e-313ae58b3ffe.roa
File:                     d8ab9ee3-e66b-3662-848e-313ae58b3ffe.roa (raw, json)
Hash identifier:          xD4rlqE+URUrL8M6kfLdY5uVGubpLa5683I6GdT19ss=
Subject key identifier:   3C:81:F3:2B:F2:7A:62:3D:A0:DD:90:BB:9B:2A:BC:F7:82:91:DC:61
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838312FE223119E58C86E033000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d8ab9ee3-e66b-3662-848e-313ae58b3ffe.roa
Signing time:             Mon 07 Dec 2020 05:00:00 +0000
ROA not before:           Mon 07 Dec 2020 05:00:00 +0000
ROA not after:            Mon 30 Nov 2026 05:00:00 +0000
asID:                     12271
IP address blocks:        24.90.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:31:2f:e2:23:11:9e:58:c8:6e:03:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec  7 05:00:00 2020 GMT
            Not After : Nov 30 05:00:00 2026 GMT
        Subject: CN=9b2d5227-690e-48c0-ac6d-522935e382c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:71:18:be:27:14:dc:9c:85:1a:ad:03:6b:
                    16:37:bf:a8:a7:0b:05:a5:d2:40:c1:d0:08:8f:19:
                    72:2a:76:25:79:e4:ca:33:3d:ec:c6:88:07:13:b1:
                    2b:e4:e6:ce:bb:14:a8:94:44:37:31:09:09:ca:b1:
                    d4:55:92:d5:a6:f9:c8:9f:d3:7f:10:29:90:5f:69:
                    df:09:e8:06:e0:9a:97:ff:10:c7:a2:74:77:47:df:
                    45:96:a3:41:d2:ea:8a:84:66:9c:b3:d8:c5:40:25:
                    cf:fd:90:09:aa:a9:af:ad:0d:f3:26:8d:56:2d:59:
                    d0:c8:3e:5a:5e:d3:28:c9:9f:ea:7e:56:de:77:2c:
                    22:af:12:cc:da:59:1e:cc:23:d1:e2:4c:63:6e:c8:
                    18:ab:89:08:c8:0f:d5:5f:e2:06:d0:ab:ce:24:7d:
                    ed:c2:04:ec:48:57:23:bb:4a:d1:f0:69:28:fa:a2:
                    82:24:e1:42:52:c5:eb:bd:78:db:e3:1f:5b:d7:5e:
                    84:31:66:d0:bc:ff:3f:af:b8:f5:0e:a2:db:10:e1:
                    e1:f8:6f:6a:cf:5d:fd:a0:76:fa:96:d7:44:f0:6f:
                    75:5e:dd:54:25:81:42:fc:c1:b7:f1:e3:83:84:a0:
                    66:f9:2a:15:93:e9:84:a4:32:23:64:75:77:8b:77:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:F3:2B:F2:7A:62:3D:A0:DD:90:BB:9B:2A:BC:F7:82:91:DC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d8ab9ee3-e66b-3662-848e-313ae58b3ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.90.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:bb:80:04:ee:e0:61:57:53:25:8a:a5:66:f2:25:d2:79:da:
         ba:a7:a1:0c:13:6d:1b:58:2a:64:db:90:8f:21:44:5a:6b:0b:
         87:18:f7:a8:6e:46:e7:6d:db:95:d4:f1:e8:5f:fd:be:cf:26:
         13:de:c9:a5:69:e5:06:83:d4:43:67:da:0e:2f:57:12:03:a7:
         ff:c4:a7:22:ac:2c:7d:74:f0:a2:32:6e:2a:1f:88:8b:9d:e3:
         19:f6:6c:83:9f:f4:68:f9:1a:a1:23:94:db:44:0f:64:23:7c:
         6d:bc:18:53:c3:85:17:05:5e:ca:84:52:1e:83:31:80:9e:3b:
         fa:70:0d:3b:ba:e9:f3:1b:cd:7a:96:37:7a:bc:41:25:de:4b:
         2e:2a:d5:19:85:e0:b5:78:99:6e:5b:5b:cc:33:93:af:9e:65:
         4e:6c:02:36:38:69:26:d3:22:f0:c4:a9:f1:a7:5c:72:90:5c:
         79:b1:80:d0:b8:23:a1:42:46:e3:3a:24:da:d7:99:f6:6f:10:
         9f:32:ea:8c:20:30:92:9f:bf:1e:90:95:97:7e:40:e2:a0:30:
         8e:42:3a:cb:bc:b0:f8:c4:3c:52:6c:7c:06:24:f1:df:5a:4f:
         dd:7d:bf:33:40:eb:92:63:53:18:e8:51:ed:89:82:db:d4:59:
         2c:65:db:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:30 2024 by rpki-client on console-fra.rpki-client.org