Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f7b65a3f-7a66-39e4-92ed-2afae089ad2e.roa
File:                     f7b65a3f-7a66-39e4-92ed-2afae089ad2e.roa (raw, json)
Hash identifier:          Fi98gt4WQ/SFxmT7RjAobuL6ijVQRH8Frju7na0NFu8=
Subject key identifier:   62:61:4B:59:9D:74:AB:C0:A4:5C:20:44:84:83:1E:02:B5:40:4E:DE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858384FF11197AE9210A08FD38000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f7b65a3f-7a66-39e4-92ed-2afae089ad2e.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Fri 11 Dec 2026 05:00:00 +0000
asID:                     11427
IP address blocks:        24.166.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:4f:f1:11:97:ae:92:10:a0:8f:d3:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Dec 11 05:00:00 2026 GMT
        Subject: CN=fdd9f151-1cd6-4941-9647-30d7fb6906cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:a1:6e:3a:1d:3e:3c:56:5e:36:fe:b0:93:
                    aa:72:fc:0c:db:ae:04:07:0c:9d:0c:22:e6:f6:09:
                    fd:4d:ed:ef:ec:02:26:04:5c:c0:4e:39:c8:e0:4e:
                    b4:86:ae:ce:6e:a1:ce:8b:63:ae:c6:9f:73:49:92:
                    f7:8b:bf:6c:37:db:cb:0e:41:ab:54:cf:b8:e6:eb:
                    66:4e:43:a2:c8:72:09:a0:23:67:8e:e5:9c:65:7e:
                    d0:cf:c5:7b:96:c3:d0:01:5f:e0:c2:d0:63:a7:d2:
                    c0:fb:8d:6c:9d:39:5b:a6:85:06:b5:f3:d9:39:a4:
                    a6:b9:47:2f:d0:41:5f:c2:aa:ff:55:02:60:e9:fe:
                    11:f3:21:54:bf:b5:59:0d:17:b5:41:c9:52:49:a3:
                    51:b9:1f:45:c9:bd:7d:7d:b8:a0:97:62:9b:44:c1:
                    11:43:d8:1d:b6:c4:bb:1e:51:f4:fa:cf:ec:52:39:
                    7d:86:33:bd:ee:f4:82:77:01:5f:c2:89:0b:85:0b:
                    a1:81:eb:35:b4:47:36:40:8e:6c:b7:f6:2c:24:a9:
                    a9:b0:5c:46:fe:ba:ed:59:42:4e:52:12:5d:5e:3a:
                    8e:a6:e9:17:78:0f:6a:18:24:64:26:fa:c3:bf:65:
                    65:16:bc:64:27:f8:8b:dd:02:fd:3e:24:be:b1:7d:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:61:4B:59:9D:74:AB:C0:A4:5C:20:44:84:83:1E:02:B5:40:4E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f7b65a3f-7a66-39e4-92ed-2afae089ad2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.166.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:40:1f:2e:01:bc:3a:da:de:05:71:43:fa:8e:47:33:af:6a:
         b1:fc:fd:e5:f1:60:2c:f0:b3:61:e1:20:e7:75:61:d6:7b:5e:
         de:76:62:6c:fd:59:2f:03:6d:7c:d9:f3:67:dd:6d:ab:dc:fd:
         d6:b5:f6:63:9e:45:04:6d:6a:f7:e1:34:d5:50:24:13:22:8c:
         40:e2:79:f0:df:45:47:60:d6:b4:78:e0:15:21:ff:6a:bf:10:
         2d:f6:75:c6:9d:f0:fa:28:2c:9a:25:58:2a:99:09:9d:5e:7b:
         c8:51:54:cf:b6:81:db:22:2e:7a:9d:00:4b:a4:9a:c1:37:29:
         78:41:43:04:07:97:93:3f:fe:b1:21:32:cf:47:ee:58:51:ed:
         01:22:81:b1:77:01:2e:ad:c3:2d:65:64:8a:d7:22:1c:1b:61:
         6b:e6:af:5f:42:32:4b:4e:76:bf:a7:c1:a5:2c:4d:6c:5a:1b:
         b7:35:54:8c:ed:78:9a:f8:63:4e:a1:ed:70:af:4f:14:a2:aa:
         41:39:6d:38:69:2e:d0:52:5f:cb:a6:e0:fc:f9:8d:3b:43:91:
         e3:1a:4b:a1:62:28:67:4a:64:59:da:dd:77:bb:36:a1:7f:62:
         eb:d6:3a:38:b1:49:8c:71:84:a0:b7:ff:ed:1f:ed:16:59:75:
         87:19:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:40 2024 by rpki-client on console-fra.rpki-client.org