Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f23f219f-f1a1-38b5-a930-1c20ea5c4f6d.roa
File:                     f23f219f-f1a1-38b5-a930-1c20ea5c4f6d.roa (raw, json)
Hash identifier:          bub2NzWssqDDhEUg/UZksomcsEwONwIvZbj3VBwV5Ew=
Subject key identifier:   96:CA:8E:05:8E:F1:1A:A5:C2:E3:FB:8B:D4:24:D1:BB:DE:66:5D:5D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF10B3C43864724478AF0C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f23f219f-f1a1-38b5-a930-1c20ea5c4f6d.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     13343
IP address blocks:        24.166.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f1:0b:3c:43:86:47:24:47:8a:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=62d3b866-2e97-43a7-ac2b-1463dc66a3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:55:0e:44:97:8d:61:06:ed:8a:66:7d:f4:8a:
                    d5:c9:02:f9:33:13:27:6f:74:29:69:06:5c:b8:f5:
                    b9:a1:fa:ca:84:ad:6c:a6:fa:c8:1d:63:02:9f:bc:
                    70:6e:bf:2a:a7:ae:19:19:e6:ea:1b:ad:91:43:ee:
                    6d:2a:cd:e6:e2:fd:0d:9a:0d:9b:2d:fc:0a:d5:22:
                    81:dd:5d:26:2c:75:d7:89:e4:01:ea:17:39:d5:2d:
                    a5:bf:72:1f:91:69:bb:c8:69:ed:8e:6f:26:04:78:
                    00:13:79:ae:cc:6e:e9:39:87:0e:01:ea:63:2d:49:
                    57:4d:bb:86:02:dd:7f:4c:2a:29:d5:6b:6c:f3:fa:
                    62:a8:d5:98:7d:d2:00:7b:96:4c:69:e0:b8:b4:db:
                    e5:19:7a:af:53:af:33:c5:3f:df:95:cc:48:3b:a0:
                    a9:15:ed:f5:29:bf:e1:59:74:fc:ec:6a:d3:5c:d8:
                    69:f8:ab:6e:45:91:e3:d1:5b:b0:e2:4b:98:9c:3d:
                    ee:9c:62:cf:43:f5:d4:a1:22:12:fb:03:19:55:02:
                    5b:0c:92:e7:57:3f:6b:6d:1c:b8:79:41:c0:2d:86:
                    30:c9:e8:64:dc:ca:3a:02:b2:5d:ab:41:b2:c9:de:
                    51:8a:47:93:84:20:72:e9:60:53:c2:fb:f1:e8:af:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CA:8E:05:8E:F1:1A:A5:C2:E3:FB:8B:D4:24:D1:BB:DE:66:5D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f23f219f-f1a1-38b5-a930-1c20ea5c4f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.166.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:7c:2a:82:6f:24:cc:41:60:45:db:56:8f:93:72:21:f2:e2:
         d5:4e:36:45:fe:37:b6:c6:f4:bb:43:cd:01:c8:75:10:53:50:
         9b:78:aa:14:6e:57:b4:32:3e:63:fe:b6:5f:72:e7:09:57:f8:
         6c:50:e2:99:83:cc:a0:29:4d:ba:56:fe:a7:f5:37:63:28:49:
         1b:d0:3d:2f:e9:98:4b:9f:90:2f:7f:ef:a1:3a:b6:38:0c:1f:
         20:1d:08:d5:14:0f:a7:61:a3:71:40:4a:76:a3:c2:17:e8:b2:
         ed:a5:ea:cb:91:83:27:b3:67:db:00:c8:00:b4:c2:63:93:ce:
         39:e9:cd:2c:f2:8d:4c:a2:a9:a7:df:3b:cd:b7:c1:6b:b2:17:
         1c:cc:58:a1:dc:ea:a1:c4:c8:73:00:e2:a1:d1:f6:76:ad:d2:
         a5:de:98:92:21:9f:62:1f:7b:b3:ad:8d:aa:65:a0:d7:ba:66:
         5a:53:8c:48:98:72:7d:52:67:9a:30:0a:e2:68:80:42:9e:b5:
         b7:98:5d:58:eb:5a:08:58:7e:c5:b1:d7:e0:55:11:d6:c4:ba:
         49:3b:1e:4f:cd:49:73:72:21:e6:45:5a:04:90:f7:a8:82:a7:
         99:4f:e9:bc:80:af:fb:1d:fd:76:82:cc:c6:1e:c4:ec:cb:a1:
         cf:b5:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:40 2024 by rpki-client on console-fra.rpki-client.org