Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f663685e-a56c-3290-abc3-e5dab75b46cb.roa
File:                     f663685e-a56c-3290-abc3-e5dab75b46cb.roa (raw, json)
Hash identifier:          5oM45YH1kKSzX3RJaf+oGiEWdRT7I1Nhx6ucGw5fHp0=
Subject key identifier:   CA:8D:65:D5:3F:71:4D:F3:38:78:7A:F7:3C:EF:13:A1:C7:CD:4A:7F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A13AB0654AE295B62C1A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f663685e-a56c-3290-abc3-e5dab75b46cb.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     16787
IP address blocks:        24.28.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:3a:b0:65:4a:e2:95:b6:2c:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f7fe185a-cf8e-45cf-8f43-94ca0755f6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:c0:8f:36:b1:ff:ad:cc:f8:b7:c2:09:d8:
                    d2:ca:f7:1a:8a:cb:39:d0:9e:67:1e:8b:ac:45:9f:
                    b2:78:af:71:8c:7e:b6:66:e8:f0:01:f9:30:43:20:
                    30:35:29:42:02:02:71:da:52:b2:ca:20:ce:4f:f3:
                    69:dd:af:26:12:0d:03:b3:c9:22:f1:9c:82:18:50:
                    d2:e3:a0:12:e7:e7:6a:59:c4:40:8b:d7:de:c5:ae:
                    e9:07:ce:0c:f8:1d:bd:92:76:3e:c7:d0:2f:22:0b:
                    ba:e8:02:fd:fa:cb:5d:89:43:dd:78:ae:5a:0a:c8:
                    50:a6:dd:47:f6:87:2f:7e:71:7d:31:04:30:df:74:
                    34:c3:aa:e1:0b:31:44:9b:96:b4:4c:ca:ae:8a:f2:
                    7a:d9:cd:1a:83:c4:1f:74:43:ad:15:56:49:46:42:
                    bc:ea:6a:35:b7:ef:87:d2:e9:c8:01:42:0e:ef:c3:
                    6b:b2:06:83:13:02:08:b5:43:09:2f:ee:f2:25:93:
                    07:23:e3:d3:6f:1c:6e:1a:b6:2e:f7:fc:d3:a2:bd:
                    d2:3e:a4:20:aa:ca:a3:17:e3:1f:97:13:fe:4c:78:
                    69:94:d9:13:34:e4:7d:ee:b3:d3:9b:56:c6:07:37:
                    e6:98:23:7e:d3:15:ef:aa:d4:97:d1:7f:c9:f4:d4:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8D:65:D5:3F:71:4D:F3:38:78:7A:F7:3C:EF:13:A1:C7:CD:4A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f663685e-a56c-3290-abc3-e5dab75b46cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.28.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a2:34:d1:f9:a8:fa:58:c7:f2:55:07:07:a9:5e:97:19:cb:
         70:f9:ac:96:97:f8:8b:bc:a9:a7:4f:42:b5:1c:ff:6d:4e:05:
         4b:a0:4b:cb:56:1a:c6:5b:d5:d0:41:4a:e0:de:97:8a:be:82:
         fd:de:3f:76:c6:3e:43:24:0f:1f:5b:70:42:6e:37:a7:62:c5:
         af:35:88:39:71:94:ce:82:a0:ca:be:5d:bf:76:8b:ae:dc:53:
         a4:fe:33:ea:15:9a:14:c6:ca:f5:89:28:9c:a5:03:2a:c6:3a:
         a7:3a:5b:7b:3f:5e:b7:b3:92:3b:fb:09:62:e9:5a:be:b1:26:
         5d:ab:1f:10:eb:b1:f7:0e:20:74:e1:8e:8f:a9:9f:71:c0:fd:
         06:93:06:9f:13:75:43:4f:60:99:5a:09:0c:fa:dd:81:39:6e:
         12:d0:69:28:d2:62:0f:20:b9:bd:ba:cc:a4:f0:3b:bc:4e:16:
         5e:a7:bb:92:c4:70:bb:c2:3e:1a:4f:18:fa:f5:54:e6:e0:b5:
         f6:46:5f:f6:ab:3d:29:02:53:72:19:ed:2c:b1:c8:02:49:f0:
         91:cf:4b:c7:d1:82:b5:2c:6c:38:95:a4:93:ca:50:86:0b:9e:
         62:62:32:5f:38:78:6a:8c:b8:30:de:4e:89:be:31:4e:0a:89:
         e1:ed:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:40 2024 by rpki-client on console-fra.rpki-client.org