Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e32070a7-5cd7-3db5-8f04-7effd947f98d.roa
File:                     e32070a7-5cd7-3db5-8f04-7effd947f98d.roa (raw, json)
Hash identifier:          jRrjYWwjJQagJDaI01xu4OOJyNpEE4N5oEXqrqiJYog=
Subject key identifier:   D1:9C:31:C1:1A:38:F3:88:3F:81:7D:40:30:87:3C:CB:40:9B:A7:89
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0A9AB2F8E336A2B987300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e32070a7-5cd7-3db5-8f04-7effd947f98d.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     12271
IP address blocks:        24.161.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:a9:ab:2f:8e:33:6a:2b:98:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=1bc47751-b37e-46b6-a997-f12ae64992ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:41:c8:b6:61:6a:21:83:de:96:df:e0:89:
                    4f:c7:1e:cd:8b:f8:49:a1:a9:16:9d:0f:c1:20:67:
                    3e:61:45:88:8c:b8:e2:1a:1c:03:ae:a0:f7:b7:ee:
                    3a:6b:0f:e9:65:9f:22:5d:73:c0:dc:54:1c:d0:06:
                    fc:8f:01:3b:17:db:7e:8e:5d:6f:a5:25:84:eb:a6:
                    03:15:d1:1e:94:30:5b:15:50:97:e1:88:a0:74:0f:
                    7a:10:fa:9f:21:a9:21:6a:b3:fa:68:bb:ff:74:9d:
                    61:71:fd:05:07:96:1b:b2:71:6c:cf:41:31:0c:d9:
                    13:66:e1:09:af:f7:cc:2c:c3:25:49:b2:c3:7c:ca:
                    b8:da:97:f6:46:9b:af:11:70:4b:27:b2:ae:91:ad:
                    d7:92:ad:e8:23:93:05:d8:38:ce:0e:5e:43:7a:7a:
                    77:dc:4f:7c:af:90:d9:32:9b:df:83:14:d1:4d:6e:
                    c2:6d:f4:93:e5:3c:ba:b6:f5:3c:30:4d:0b:78:51:
                    01:25:e1:53:6f:b1:23:fe:54:63:3b:e7:cc:13:15:
                    1b:ff:92:23:e5:c7:1b:c1:7a:75:2e:a9:25:d5:99:
                    86:32:77:e8:5f:57:19:0e:9b:08:25:e6:34:de:9c:
                    89:ff:57:6e:04:40:d2:b5:1d:39:38:da:e6:17:bb:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9C:31:C1:1A:38:F3:88:3F:81:7D:40:30:87:3C:CB:40:9B:A7:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e32070a7-5cd7-3db5-8f04-7effd947f98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.161.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:89:6b:df:5e:54:eb:19:14:18:ec:0f:71:eb:c5:a9:f3:0f:
         f7:58:0d:02:a8:25:85:dd:b2:b4:de:50:cd:6d:94:91:64:31:
         fe:58:b5:5f:e0:b0:53:78:07:ed:8f:08:f1:3d:f6:bc:06:80:
         44:da:da:21:7f:5f:01:08:d4:74:04:2a:e6:8f:9e:55:d5:1f:
         b3:70:ff:2d:9a:a8:66:31:a1:4c:c8:93:0c:af:67:22:1f:b1:
         80:36:d0:db:9a:3d:61:07:cb:db:23:e2:7e:15:33:1b:22:2c:
         e2:c5:da:0f:2d:a7:6e:8c:74:63:e7:e7:90:3d:ba:37:ee:16:
         e4:43:ef:47:f3:32:31:cb:f2:87:52:2c:b9:88:1d:68:89:6d:
         d3:8a:54:1e:59:a9:12:fb:bc:49:f2:08:3c:ae:63:66:35:18:
         e7:0b:b6:65:65:03:47:4a:2b:a8:42:5a:3f:97:5c:dc:0f:7e:
         06:cc:a7:97:44:57:fa:d2:4f:f3:9a:fd:38:56:1a:1f:85:15:
         0a:ef:34:7f:89:1d:9f:fe:fe:0b:c4:64:ee:60:42:d6:b8:a8:
         a7:44:45:c7:71:2c:ad:fd:0a:30:1e:71:27:74:31:82:aa:94:
         df:a6:ef:53:76:12:6d:dd:e9:b6:8b:e6:7a:2a:7b:e6:4a:6e:
         b9:61:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:42 2024 by rpki-client on console-ams.rpki-client.org