Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d9591d74-2577-3498-a9ce-6694e2f9e754.roa
File:                     d9591d74-2577-3498-a9ce-6694e2f9e754.roa (raw, json)
Hash identifier:          4fxzMrX23I+m+Ze+eULQyGidP/ZzaJR4hpUJ0QiUEPQ=
Subject key identifier:   34:F3:CB:3C:C7:6F:3D:8B:10:FF:29:82:D5:A7:D2:6C:2E:9B:FA:18
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DDD2EE301075917496480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d9591d74-2577-3498-a9ce-6694e2f9e754.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     33363
IP address blocks:        24.227.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:dd:2e:e3:01:07:59:17:49:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=81602ce5-57aa-4227-b945-07ff5d3686aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:f9:7e:51:de:12:5e:61:6e:45:b9:04:ee:
                    01:63:27:d9:78:5d:23:0c:3a:1f:a2:7f:e0:b2:3b:
                    72:2a:e6:84:79:71:a3:b9:f8:86:8d:1f:37:29:48:
                    9c:1f:81:9e:27:94:ed:e0:ec:e0:83:35:83:1b:9c:
                    93:3d:6e:8d:bd:12:88:3c:18:36:81:c2:a8:be:15:
                    74:21:17:08:15:ae:70:8a:11:5a:cd:4b:b1:d1:7b:
                    43:49:15:de:53:e3:46:f3:e1:b8:6a:93:1d:3d:e3:
                    dc:b3:63:52:df:66:68:9f:e4:5e:74:bb:5a:83:d8:
                    b8:92:b0:36:9b:57:12:a6:e4:92:6f:1a:e5:64:3c:
                    9c:6c:b9:8c:e2:34:54:45:90:a8:23:eb:17:61:e9:
                    e1:26:f2:94:17:a1:c9:19:db:d2:6f:ae:8f:29:9d:
                    67:d9:5d:65:0a:88:0f:a5:35:8f:8a:c0:f6:bf:04:
                    0c:70:77:ed:e1:0e:39:6e:40:77:b9:51:05:c4:aa:
                    3c:11:50:5b:2d:48:7b:a7:1d:17:8b:e1:0b:f1:2c:
                    8f:f7:47:4c:c0:78:9f:91:e1:58:36:2a:22:d2:89:
                    88:46:8c:17:d6:a3:bb:87:49:da:a5:c9:b7:0b:a4:
                    57:2c:ef:8d:86:f9:e8:67:08:5e:47:fe:c0:41:fb:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F3:CB:3C:C7:6F:3D:8B:10:FF:29:82:D5:A7:D2:6C:2E:9B:FA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d9591d74-2577-3498-a9ce-6694e2f9e754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.227.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:07:70:f7:89:c0:cd:25:9b:37:c8:47:d4:3c:8e:5b:ac:
         e6:aa:99:08:6a:01:7c:a4:b3:20:09:8a:52:31:b9:79:48:f4:
         94:e5:5a:d3:02:df:59:b4:bc:d0:61:bf:51:54:ff:17:04:66:
         ab:75:e7:c2:a6:dd:78:fb:15:6f:3e:75:ec:e6:b0:8c:45:00:
         b0:75:42:0f:6d:15:0e:2d:31:0d:81:7c:b0:9b:93:50:20:e2:
         a8:96:dc:7e:39:0f:21:0e:db:2e:fc:b7:b2:95:9d:5b:7f:34:
         88:35:60:8f:3c:80:bf:7f:25:79:4d:c3:8b:64:77:2c:94:a8:
         8e:73:b3:57:cb:12:a6:f2:41:53:7c:0f:08:d7:a3:87:e6:54:
         7a:22:2a:19:fd:0e:8a:c0:51:ab:f2:8c:5c:df:29:76:6d:04:
         49:d4:e6:b7:7c:cd:f3:4a:b5:8c:74:84:46:ed:3c:3f:f2:a4:
         11:58:a1:10:9b:63:76:c9:40:3f:7f:e1:d0:8f:16:79:9c:66:
         6e:a4:51:cc:a4:4d:e6:9d:a4:c8:b4:08:21:79:2d:eb:f1:a8:
         94:16:b3:4d:54:e0:b7:48:d7:7f:9f:2f:c8:5c:9e:ff:52:f6:
         28:5f:e4:9e:8e:b7:19:79:c5:d2:b6:76:ed:33:46:95:6e:cc:
         aa:01:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:30 2024 by rpki-client on console-fra.rpki-client.org