Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa
File:                     f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa (raw, json)
Hash identifier:          X0ccJZ+aWNi/Xkw6KfHsfWe9CuEzudSbtfDm4W4jPGM=
Subject key identifier:   A2:F6:3B:46:17:38:5C:A1:99:66:59:EC:30:CF:B5:BD:65:22:83:5E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DE37CB15618E9E02D27F8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     393756
IP address blocks:        24.153.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e3:7c:b1:56:18:e9:e0:2d:27:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=2d1d7511-9975-4216-97ce-99e0344aa109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:cc:fa:a4:90:7d:a8:a6:66:60:38:93:9f:
                    66:74:b9:4e:10:88:b2:48:06:d0:89:da:f0:37:31:
                    de:ae:ea:49:cd:d7:49:78:43:58:f1:d5:8a:8a:23:
                    18:c3:57:6b:61:dd:04:98:d6:21:35:25:55:e6:42:
                    e1:a3:91:d6:60:9e:c2:5e:e9:f8:f7:0b:a3:99:18:
                    03:f3:3f:d7:5a:61:f8:e3:57:a4:35:c2:6d:57:15:
                    be:40:aa:16:8d:54:24:54:97:8a:f0:a4:7f:e9:09:
                    2e:0c:71:41:37:ae:8d:5b:d0:cc:43:dd:b4:44:16:
                    3e:0b:1c:b3:30:92:04:97:a8:33:6a:43:95:4d:39:
                    f3:2e:66:b4:e1:2d:a7:f2:27:36:0a:1a:6a:fd:43:
                    21:00:7b:40:b7:0a:79:f5:64:c2:55:1c:8e:cc:ac:
                    41:97:c6:7d:db:68:cd:34:86:3f:89:d5:d8:2b:14:
                    30:41:e3:bd:e1:21:3a:80:f3:78:89:13:dc:cd:1c:
                    3b:3d:0b:87:96:01:a8:11:3d:61:43:d0:3e:c5:4c:
                    6a:1a:ac:54:8a:05:50:fd:76:10:07:c3:48:5d:68:
                    37:d2:00:48:50:d9:14:ad:00:b7:ab:a0:e3:21:23:
                    f3:0c:68:86:92:11:58:b9:d1:09:eb:16:af:5e:52:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F6:3B:46:17:38:5C:A1:99:66:59:EC:30:CF:B5:BD:65:22:83:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.153.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:18:7c:4c:7d:07:94:6f:df:d7:a0:42:7c:60:64:85:28:87:
         7a:55:2f:e5:03:48:c7:3c:24:a6:b2:6c:d7:2e:eb:5b:a7:da:
         ae:e5:41:10:cc:d6:d8:66:04:c0:14:2d:22:7b:87:2f:93:b3:
         ea:e7:1b:68:6a:36:f2:c1:22:83:af:27:25:09:2d:bb:eb:5b:
         48:1e:63:26:b5:0f:18:23:2d:fa:a6:f3:1f:60:f0:a2:64:d0:
         0c:69:dc:f8:f3:09:bd:80:2b:b3:f6:c8:0c:dd:b0:24:3b:e1:
         08:0f:c0:83:0f:98:93:3f:67:1e:70:06:60:23:d2:e4:90:53:
         91:ab:7e:6d:31:02:4b:60:fd:5c:73:e0:63:68:78:a0:ba:d0:
         0e:68:31:51:4a:64:e1:67:fe:9b:5d:2a:46:1c:c5:bf:0d:ad:
         94:c6:87:9f:99:0a:2d:a7:a4:d4:08:55:8b:fc:eb:93:3f:2c:
         b4:54:e5:89:c0:5e:da:ba:50:9a:2b:87:a1:3f:fc:de:c1:a9:
         65:67:c2:40:29:65:66:7d:fc:db:6a:a3:a5:5b:90:de:88:0a:
         dc:16:da:0e:43:d1:b3:8b:e5:2b:61:06:52:fa:07:d8:29:33:
         98:b3:1c:d5:4d:a9:03:bb:af:e4:8e:a6:81:88:62:4e:40:c2:
         eb:c7:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:32 2024 by rpki-client on console-fra.rpki-client.org