Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec05ba4d-f627-3bd8-a131-263d7d06db62.roa
File:                     ec05ba4d-f627-3bd8-a131-263d7d06db62.roa (raw, json)
Hash identifier:          p8x9NWs4b34ueCxl6NjVzOF5VPjRJaW4hmRbvo8p4GI=
Subject key identifier:   A2:A9:3B:F8:A8:33:F7:C9:30:9D:ED:91:DD:02:A2:A5:AC:D4:88:66
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DA235EAF3010858020C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec05ba4d-f627-3bd8-a131-263d7d06db62.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        24.123.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:a2:35:ea:f3:01:08:58:02:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=207663aa-de6d-4c93-a1e2-edab5d7088e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:34:95:1a:b2:b2:cd:19:97:cb:77:6a:3f:
                    60:ff:dc:16:27:72:ac:dc:1e:7a:35:89:58:bd:92:
                    55:11:e3:5d:d1:72:5c:59:db:4b:90:8b:12:3b:c9:
                    44:42:c9:2b:7c:9f:14:24:35:b3:54:8f:9f:96:ef:
                    41:8c:96:3e:da:3b:36:65:a3:a3:3b:2e:c9:37:88:
                    65:0e:a0:ca:71:a5:0c:0c:19:02:03:35:6c:98:7d:
                    43:97:74:50:c1:f6:4f:ef:4e:2f:d8:d3:81:64:b3:
                    08:82:b7:54:9a:46:37:21:9a:f8:82:0e:80:c0:01:
                    c8:3d:0c:31:72:0f:e1:be:02:5d:4b:b4:44:f9:53:
                    95:b1:d4:8a:b4:4f:70:60:e3:6a:56:47:5c:a0:fd:
                    2e:51:35:45:3b:ea:97:1d:76:7c:91:1a:a3:0b:13:
                    8c:d9:14:84:67:1d:1a:89:cd:ee:67:4a:75:b2:18:
                    36:3f:49:88:20:9e:d1:80:02:da:bf:97:75:61:28:
                    47:50:e1:34:e7:f1:4a:93:c2:78:45:de:b4:95:88:
                    83:c7:2b:fc:38:04:00:c1:02:51:6c:9b:5e:28:c5:
                    5d:b1:8d:af:32:d1:75:1e:12:d8:71:6b:58:24:fa:
                    ac:b3:40:5b:a3:b9:b8:e2:d4:af:02:1b:e9:8b:f5:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:3B:F8:A8:33:F7:C9:30:9D:ED:91:DD:02:A2:A5:AC:D4:88:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec05ba4d-f627-3bd8-a131-263d7d06db62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:96:7e:46:42:a0:c5:06:d9:46:cd:20:43:6e:c9:b0:7f:
         38:31:ce:f7:d3:4e:48:91:e0:5a:74:a8:63:6d:4f:5e:94:48:
         a7:e0:42:a7:27:00:0d:d4:4b:9e:b7:34:8c:e1:af:6d:c3:5a:
         7a:51:c7:2f:dd:33:00:a4:63:75:30:d9:3d:6e:bd:f6:67:e8:
         05:b3:8f:26:ca:34:69:01:44:2f:36:de:ef:d5:2d:83:ec:52:
         5c:0c:86:a9:a0:b4:7b:9b:c2:00:71:a4:54:05:84:90:d9:c8:
         2f:f5:4b:8c:04:58:5a:40:3d:81:c5:a8:5d:1e:01:2e:75:32:
         9f:f4:c1:3b:86:47:44:58:74:cf:e2:fd:f8:5a:a1:6f:0f:95:
         0b:a1:a1:b1:7a:fd:ea:35:88:d0:dd:1b:32:05:e7:91:78:da:
         ed:46:d9:14:b8:ea:75:48:ee:9f:eb:f6:cf:ac:c1:3f:52:49:
         02:28:e0:38:bd:18:29:b0:e3:86:dc:01:c0:fd:3d:d7:16:31:
         d5:55:5e:df:19:02:18:cf:89:ca:af:32:05:c4:d1:d6:27:b8:
         e0:ff:03:13:5a:36:b2:3b:d0:82:fc:db:e1:7e:99:06:8f:f3:
         2a:44:ee:23:e4:78:70:a8:88:14:c4:aa:2f:bd:2c:6e:b1:b8:
         82:12:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:52:39 2024 by rpki-client on console-fra.rpki-client.org