Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e18d6fad-2fc4-3ee3-80f3-75a7b5b06e37.roa
File:                     e18d6fad-2fc4-3ee3-80f3-75a7b5b06e37.roa (raw, json)
Hash identifier:          iQ4Z2Ia+/+/HHT7iF+5gUAqO2fa3mLSg+l8S2/VRXzQ=
Subject key identifier:   E8:DE:EE:87:E5:B6:73:3E:C7:A7:3B:F4:13:C5:D7:B6:AB:2D:2B:21
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838312FEEED5B989101D9143B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e18d6fad-2fc4-3ee3-80f3-75a7b5b06e37.roa
Signing time:             Mon 07 Dec 2020 05:00:00 +0000
ROA not before:           Mon 07 Dec 2020 05:00:00 +0000
ROA not after:            Mon 30 Nov 2026 05:00:00 +0000
asID:                     12271
IP address blocks:        24.90.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:31:2f:ee:ed:5b:98:91:01:d9:14:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec  7 05:00:00 2020 GMT
            Not After : Nov 30 05:00:00 2026 GMT
        Subject: CN=0fd9ecc6-cd10-48eb-bd89-80afcfe314bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:db:03:ed:13:67:c7:a6:55:e5:cf:d2:6d:
                    13:40:03:48:98:89:bf:8f:a8:ba:fa:25:5d:05:02:
                    b2:4f:b8:17:60:92:90:c3:3a:02:07:04:98:c0:3a:
                    60:29:30:51:42:7d:e9:9c:4e:b0:5a:d9:b7:62:05:
                    a0:85:0b:bc:04:3d:77:7e:c3:f6:5a:a6:08:95:98:
                    7a:46:ef:33:5b:db:21:f5:f6:1f:14:c2:4e:70:cb:
                    b8:16:6c:f9:b2:36:1b:7d:56:91:54:d4:2a:05:5a:
                    85:a7:34:c4:62:df:80:9a:28:da:8d:29:c6:da:30:
                    d3:74:ab:24:ee:9f:7c:5e:56:48:52:fe:96:d5:f0:
                    eb:db:33:95:5e:90:71:75:fa:86:53:45:78:75:d8:
                    29:d2:cf:92:c7:2e:94:1f:aa:91:e7:6e:71:bc:54:
                    20:a2:82:d9:f5:e3:10:ea:53:0f:a5:5e:31:7d:2c:
                    48:b2:16:9d:10:f3:ff:18:07:01:f0:b7:58:b2:91:
                    d4:6e:5e:bb:93:e3:00:2e:32:43:ec:12:db:92:84:
                    bb:02:15:ee:1f:2b:ce:f6:c2:c8:21:01:84:64:ae:
                    ac:80:d3:d1:46:6f:23:6a:a1:80:7d:35:76:cc:4d:
                    18:c0:e1:f7:2b:5b:6f:9f:23:64:f3:67:a3:9d:9f:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:EE:87:E5:B6:73:3E:C7:A7:3B:F4:13:C5:D7:B6:AB:2D:2B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e18d6fad-2fc4-3ee3-80f3-75a7b5b06e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.90.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:57:ad:4c:32:c9:93:b1:00:bd:8d:25:6b:52:65:ae:d8:
         6d:8e:c1:24:4f:c2:e5:de:36:e5:01:43:d3:15:e7:63:5a:fd:
         ec:89:04:7b:3a:b9:e9:fc:3c:5c:31:f1:3c:4f:45:59:5c:99:
         14:ab:f7:82:d4:5b:b3:31:20:62:6e:e3:16:dc:75:06:70:39:
         d9:ea:ae:31:f2:b2:1a:8b:95:ba:19:b5:e3:79:42:15:e2:78:
         f9:a8:98:f7:02:80:db:37:ce:10:04:33:88:1f:d5:ee:ab:44:
         40:a8:52:89:1c:81:01:75:9d:06:1b:71:37:7a:b5:50:8e:23:
         1d:27:b9:38:21:08:f4:eb:e7:7b:c4:00:68:c1:1a:6a:58:1a:
         ec:7c:05:fb:bf:0f:5e:6d:9a:4e:09:0a:a0:94:9e:c5:7c:d4:
         4c:b1:5e:5b:41:8c:fd:a6:05:67:40:42:cc:17:00:3c:a7:16:
         9f:d7:fb:9d:84:c0:ea:1b:d6:e7:27:32:93:bc:b5:21:5e:38:
         b2:59:ff:6a:af:cd:5f:d6:e3:9c:b5:f7:f1:1d:f6:1b:79:e7:
         e9:9d:53:3d:65:c1:91:4e:da:07:98:ee:a5:45:a9:55:a9:39:
         ef:37:72:ab:ad:97:a9:cf:6a:df:78:64:57:73:73:ff:7f:ba:
         d7:17:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:59 2024 by rpki-client on console-fra.rpki-client.org