Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa
File:                     df917ed4-e5df-3a02-b420-36fbcf4f9511.roa (raw, json)
Hash identifier:          UmpF8osqfafldeH7FDqhqs2CL/NBiesDm8YtyyGuPX0=
Subject key identifier:   FE:FF:2F:BC:FC:99:74:76:DF:D4:3D:FB:6D:1F:22:06:DA:D8:DE:FA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0BA7094971546B7D5A900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        97.96.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:ba:70:94:97:15:46:b7:d5:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=1dceaad0-a288-479d-86e1-8213c8039254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:9f:1f:56:10:6e:0c:05:82:16:42:26:6e:
                    7d:7e:71:05:63:21:29:fb:54:fa:44:01:66:9c:c3:
                    ca:86:a8:26:74:db:ab:ef:f3:7d:d6:be:57:df:ec:
                    87:29:ce:ea:0e:2d:82:4c:7d:b3:f8:16:fb:de:2c:
                    06:d6:a8:1c:43:d4:80:44:2e:88:25:e6:2f:77:c9:
                    3c:15:b1:0a:c5:18:b8:40:45:5d:fc:43:54:e0:ab:
                    7f:27:4f:be:a2:ea:71:6a:60:28:cf:04:78:8a:46:
                    d6:5f:c7:c2:ae:68:ad:e0:3c:84:02:fb:10:8b:fe:
                    a1:45:79:55:29:04:fb:90:8d:68:3b:ae:e3:21:dd:
                    51:fb:25:58:a5:85:6c:3b:ee:86:75:ac:21:57:70:
                    7a:8e:d9:74:94:e4:c3:3c:7b:c2:a4:3b:08:bb:83:
                    8f:ba:57:9c:eb:78:13:6a:09:0d:35:67:df:d7:e1:
                    eb:3c:4e:8a:5d:3b:cd:81:67:93:06:f1:77:87:a0:
                    80:c2:de:00:86:31:b2:ec:02:05:60:f0:04:57:90:
                    d7:44:e8:ff:4b:34:0a:2a:11:9f:68:b9:36:3d:e0:
                    6e:e5:c5:2a:06:c6:13:7f:68:d0:ef:0a:57:bf:ea:
                    d8:5b:5d:5e:dc:c5:e0:80:1e:42:41:18:56:e6:4f:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FF:2F:BC:FC:99:74:76:DF:D4:3D:FB:6D:1F:22:06:DA:D8:DE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.96.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:17:f9:f0:c6:28:34:31:87:80:2d:bc:a7:67:ab:a8:51:
         40:14:bd:6e:e0:2a:62:c8:df:cd:aa:4e:a9:e2:ff:8e:5b:97:
         28:3c:aa:0d:6a:3e:f8:fc:05:13:ab:78:b6:7f:2d:98:0b:f3:
         49:1e:a1:72:8c:72:13:a5:69:89:ab:74:39:cb:9d:e4:63:fa:
         48:68:1f:b4:c4:fc:78:77:10:12:4f:34:8c:3a:d4:92:30:d4:
         c2:ad:c2:13:3b:83:cb:b2:a7:ad:fb:a5:00:38:91:bd:0a:dd:
         8b:de:42:08:65:b7:43:98:f0:2a:cd:95:ee:a9:b5:c6:a8:61:
         9d:f7:9b:ad:f9:28:df:c4:55:e3:2a:7a:43:dd:c4:0b:db:06:
         45:02:27:ab:d5:90:f4:8f:4f:6c:89:4e:5e:cb:2d:54:36:4c:
         42:3c:26:fc:d5:1e:f9:94:34:39:7e:61:be:c5:43:b9:f7:9c:
         e8:61:c3:01:4c:55:4c:fa:94:30:37:62:6e:8b:c0:b9:91:f4:
         f3:c5:16:0b:9d:2c:ff:09:47:67:25:d1:d4:41:df:f3:67:cc:
         d4:a8:e2:dc:c1:a7:45:5d:30:ce:9f:41:7a:a2:64:53:f2:6f:
         7e:50:52:e0:7a:36:42:ab:49:60:c9:d5:fb:0d:25:b0:82:28:
         e6:92:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:39 2024 by rpki-client on console-fra.rpki-client.org