Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eea5408e-d5bb-3aa4-bba0-297b2615da20.roa
File:                     eea5408e-d5bb-3aa4-bba0-297b2615da20.roa (raw, json)
Hash identifier:          Zwu9jotAfYp4vjtGMVt40eLs1eKUNq+gCZNNbDYpV9o=
Subject key identifier:   3C:18:2B:0F:C0:95:CC:5A:F9:D4:38:D0:43:3D:38:DE:28:91:C7:F0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838FFCF25FA74D727D079068580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eea5408e-d5bb-3aa4-bba0-297b2615da20.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     11426
IP address blocks:        24.143.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:cf:25:fa:74:d7:27:d0:79:06:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=bb56787e-4a09-4edd-9abd-bcc3f0645bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:6e:83:e5:b8:06:2f:fd:c2:05:37:2c:e8:
                    25:63:b3:10:c9:7f:27:ea:4c:5b:4f:6d:b4:46:79:
                    83:64:ad:0a:25:6e:0f:eb:90:4d:97:14:a0:6d:d0:
                    25:44:84:c4:65:4a:55:d2:88:9b:f8:eb:2a:ac:53:
                    ef:2b:0c:f9:cf:1d:4b:dd:6a:6e:e6:35:6c:39:f1:
                    40:7c:ec:82:8c:c3:81:5a:a1:65:b5:08:2c:11:39:
                    f1:7f:9e:2e:c6:5a:9c:2c:54:ff:a5:98:59:bd:44:
                    2c:ab:b0:d1:95:e5:42:b1:00:ee:61:f5:0e:02:fb:
                    5c:94:e3:7d:52:4a:66:dd:1a:ec:e5:00:8d:e3:22:
                    b8:08:f3:58:c7:3a:ec:8f:d4:e0:2c:ed:17:4f:62:
                    7d:0d:80:7e:54:87:24:bf:c1:ff:d2:c7:78:54:30:
                    ee:2e:7d:a2:9c:16:ac:a0:30:49:e8:15:a7:b5:3e:
                    92:4e:c1:06:c1:05:80:56:b9:32:71:50:7a:b9:6d:
                    45:0f:79:5f:ca:86:eb:0a:a4:3c:59:a8:a0:b2:32:
                    a8:7f:a2:68:23:b2:fe:82:d7:da:0e:09:1b:bd:73:
                    64:c7:7c:bc:05:0a:73:78:d6:ac:8a:72:31:d4:c7:
                    28:55:98:64:81:86:b9:76:7c:46:d7:b2:de:a4:59:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:18:2B:0F:C0:95:CC:5A:F9:D4:38:D0:43:3D:38:DE:28:91:C7:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eea5408e-d5bb-3aa4-bba0-297b2615da20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.143.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:79:c0:11:63:dd:2c:d9:fb:40:7b:d1:d8:bd:e6:a8:cc:
         c8:5f:aa:ce:c7:f6:34:13:66:e7:04:15:ba:30:9f:be:29:b5:
         0e:8c:44:86:ab:c3:9c:96:90:56:20:1f:05:70:58:ee:d7:27:
         a3:66:56:35:4c:4d:dd:be:4b:bb:f1:2d:0e:3c:34:d8:7f:8f:
         a1:68:06:50:47:70:f3:59:95:07:12:a2:98:b2:0e:30:fc:0b:
         c8:ef:4d:3c:a4:04:47:d2:fd:56:3a:f9:97:70:4d:9b:a5:da:
         3d:68:97:48:4e:87:33:4d:38:6c:8a:29:29:f4:bd:ce:c5:2d:
         c7:13:fa:9d:8d:5a:40:e0:8b:5e:57:8f:9f:60:6e:2e:35:ed:
         77:78:46:26:d3:ee:6a:ec:36:83:39:ab:4d:d9:07:d4:7b:4c:
         13:7f:26:2d:39:a9:aa:66:4a:c4:6e:4d:52:99:c9:94:1c:8a:
         bf:e5:17:5b:d5:61:9e:1f:50:30:eb:90:1a:26:8a:67:b6:bb:
         e6:34:3b:7e:3c:56:1a:0b:2f:12:1c:7f:59:63:e9:7d:88:31:
         55:4e:f1:8d:87:49:57:c7:51:fb:a7:49:04:82:e0:28:23:cc:
         c7:78:cd:a6:5e:db:a4:86:32:98:90:4a:38:b7:0b:e4:a2:49:
         1e:c8:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 13:16:38 2024 by rpki-client on console-fra.rpki-client.org