Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/db414268-a2c7-3d9f-b6a0-fe1474c8e01c.roa
File:                     db414268-a2c7-3d9f-b6a0-fe1474c8e01c.roa (raw, json)
Hash identifier:          Z8L4CLREmlDx2L7V6hcjmf+0Yfrno+276MxOtiuGkD8=
Subject key identifier:   65:91:14:22:C0:A5:18:7B:B0:E3:80:D8:51:B0:B2:91:71:20:E2:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583831302E8B2653A69228DDA1C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/db414268-a2c7-3d9f-b6a0-fe1474c8e01c.roa
Signing time:             Mon 07 Dec 2020 05:00:00 +0000
ROA not before:           Mon 07 Dec 2020 05:00:00 +0000
ROA not after:            Mon 30 Nov 2026 05:00:00 +0000
asID:                     11351
IP address blocks:        24.194.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:31:30:2e:8b:26:53:a6:92:28:dd:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec  7 05:00:00 2020 GMT
            Not After : Nov 30 05:00:00 2026 GMT
        Subject: CN=eea56624-ce6e-4168-84a9-8dce979ace43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0d:75:74:2d:9a:49:44:11:ba:8b:bf:54:c7:
                    5a:33:e0:f6:2a:fc:f3:e6:14:3a:2b:00:7c:9e:c0:
                    e2:63:a0:5f:db:d0:ed:55:80:f8:13:53:18:e4:08:
                    be:ac:8f:bd:a5:56:b0:bb:6c:93:73:61:64:c7:a3:
                    90:ff:2a:06:01:04:65:b5:fe:b4:61:23:ae:5a:4b:
                    9b:03:a1:62:83:59:15:06:e9:d8:9b:fc:6a:fc:31:
                    5d:be:3a:3e:c9:a8:f4:26:09:44:84:57:cf:26:17:
                    cc:70:ba:4f:00:00:36:ba:64:8e:98:44:29:c3:da:
                    be:d0:27:0f:2d:88:3b:46:62:25:2d:d3:eb:50:ff:
                    23:10:fc:47:40:89:44:ad:09:2c:1c:54:0a:64:6e:
                    8a:67:80:2e:5d:d4:a8:1d:aa:2d:e1:f7:5d:e1:c0:
                    6e:23:cd:3a:24:0c:d1:86:a2:70:6f:e4:bf:4f:98:
                    6d:df:94:54:c4:ec:62:fc:92:d0:46:2a:1c:8d:02:
                    b2:cc:ee:4d:d4:91:7d:ad:37:af:07:92:88:86:66:
                    0e:9b:17:d7:e5:ce:2a:cc:e5:1a:7e:9d:29:25:96:
                    f4:51:e7:19:90:b8:41:b7:5b:35:24:50:22:09:23:
                    fa:6b:e2:34:e7:8c:a0:42:c8:36:a4:00:f9:08:44:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:14:22:C0:A5:18:7B:B0:E3:80:D8:51:B0:B2:91:71:20:E2:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/db414268-a2c7-3d9f-b6a0-fe1474c8e01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.194.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4d:38:4f:49:ff:1f:84:8f:6b:93:95:ad:9d:df:d1:9c:47:
         ec:0f:9c:1f:94:99:92:aa:57:4e:d2:91:a4:22:4f:6a:ab:7d:
         00:23:d3:4d:26:a5:e3:30:92:be:9e:a0:5d:73:25:1c:24:46:
         a6:00:07:6e:a9:34:fb:6b:9a:22:cb:d0:80:01:ca:f1:28:27:
         f1:f6:73:bd:7e:34:67:97:fa:0d:5e:ec:89:ed:ed:50:aa:83:
         ea:51:6b:cb:46:e9:6a:98:45:4c:78:39:35:06:d3:cf:44:b2:
         9e:b1:f4:46:99:0f:ac:96:12:e0:74:9b:4a:25:df:cb:d4:b2:
         f6:21:81:7b:24:85:6b:c4:73:c2:4a:3a:22:44:8f:1a:66:96:
         d5:dc:58:e7:e3:b2:f0:f9:4d:4a:03:a3:ab:5e:a3:d8:64:03:
         89:15:71:2c:5c:99:33:bc:94:87:bf:3b:c8:58:82:85:e8:03:
         e9:83:9e:ed:1d:df:ca:80:a6:aa:27:0b:ae:ef:00:b6:18:c6:
         44:b4:15:6c:3b:e8:16:7a:d4:5f:a4:e6:e3:26:28:a6:49:c2:
         95:ea:46:d7:13:eb:45:1b:29:ae:38:66:1e:8d:8f:8f:10:f5:
         70:41:de:c8:53:b1:e6:57:a8:89:e5:db:17:e3:27:dd:ec:eb:
         d7:27:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:20 2024 by rpki-client on console-fra.rpki-client.org