Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa
File:                     19147fbc-9b03-3805-96e0-3f7524943c5b.roa (raw, json)
Hash identifier:          dj9J9ICWjLvdskB6lEEzMYHyzfttmu4ISFPpeq7p8XQ=
Subject key identifier:   CA:4E:09:17:05:1B:53:8D:6C:F3:72:D7:BB:6F:16:F2:0C:43:8D:5F
Certificate issuer:       /CN=06951899-7f4f-486b-bb86-0aee5ea26079
Certificate serial:       010D0C9F432858457D131AE2AF3F328AF78AE300
Authority key identifier: 99:9E:13:10:94:90:6E:07:46:81:31:9C:F9:59:3B:B6:35:DE:E9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     396982
IP address blocks:        52.119.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1a:e2:af:3f:32:8a:f7:8a:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06951899-7f4f-486b-bb86-0aee5ea26079
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=e014f62d-f8bb-4815-9ad3-b54a91950efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:e2:9d:60:eb:6d:86:2a:23:59:af:3a:ec:
                    6d:ad:64:6d:de:35:8f:2e:9b:b9:55:7d:c2:91:97:
                    88:87:16:a9:aa:50:f5:83:3a:55:cb:46:c9:fc:c4:
                    6f:5c:a8:78:13:a4:22:6a:3e:91:7e:05:95:6b:e4:
                    cd:47:1b:24:d5:32:c2:4e:56:d6:41:ca:ed:c1:df:
                    16:b2:db:26:9f:cf:0f:2f:3d:4a:cb:28:22:5d:da:
                    dd:81:6e:eb:f9:54:91:88:d5:41:e4:6b:6d:df:f3:
                    eb:b3:bc:c1:35:eb:16:ab:1e:be:a7:71:7f:d5:46:
                    22:70:67:f3:17:47:9c:d9:0e:68:25:84:d6:11:21:
                    64:46:cc:18:9b:5f:bb:2d:f9:16:9b:f3:d9:c3:23:
                    61:45:81:b6:ad:3a:2a:96:66:fa:13:3d:50:96:67:
                    cc:99:67:57:c8:7a:92:3f:5a:7a:49:b6:97:c9:ef:
                    3f:a4:5b:81:e2:21:c3:db:35:d6:19:f1:45:2e:ec:
                    19:ee:3c:18:e4:93:37:44:92:c3:55:71:8e:aa:b1:
                    0c:c3:e5:fc:45:08:bf:ec:1b:15:e0:ea:25:12:b8:
                    c3:e8:f8:f6:bc:f4:ad:78:2a:02:33:e3:d3:b7:28:
                    5e:cc:d0:64:0b:f2:3e:bc:9d:59:8e:a8:a4:2b:d4:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4E:09:17:05:1B:53:8D:6C:F3:72:D7:BB:6F:16:F2:0C:43:8D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.crl

            X509v3 Authority Key Identifier:
                keyid:99:9E:13:10:94:90:6E:07:46:81:31:9C:F9:59:3B:B6:35:DE:E9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:74:3a:94:bd:2c:5e:2f:7a:e2:a0:9f:26:b8:04:f1:f7:80:
         1f:d0:a1:dc:0f:ef:a1:79:86:2b:a6:39:d4:5c:d8:60:f9:ba:
         e1:bd:d7:21:dc:ab:62:97:26:02:1e:fb:d3:f2:f0:ec:e7:a9:
         df:5f:70:b3:d6:73:b8:77:8b:ed:38:d1:c9:df:9c:b5:52:75:
         69:90:e5:a5:90:e2:6f:65:fa:d6:78:b7:8a:3b:1a:5f:b1:29:
         6d:8e:b2:3b:2d:43:60:2e:83:5f:6c:89:09:12:a7:22:65:ff:
         a8:bf:2c:b3:6c:77:59:43:4e:90:ba:2a:29:11:c0:84:78:9e:
         c8:06:fd:45:d3:e4:d6:0f:2a:5d:f3:15:4c:3f:57:fa:98:25:
         44:0b:fd:51:8e:9f:b2:33:ae:70:64:e0:38:9b:90:f4:b4:47:
         02:37:98:f9:39:37:ea:2c:99:e1:81:b8:91:c3:55:5e:6f:6a:
         39:2e:af:99:58:55:44:92:5b:55:36:c9:a2:b7:51:d1:b0:46:
         4b:8d:dc:2c:6f:d1:2e:d9:74:f5:af:af:9f:b6:35:5e:56:3a:
         d2:e2:c3:8a:0b:33:34:e5:7f:df:52:6c:3a:18:18:7b:9c:ea:
         3a:45:7b:88:f6:00:52:5d:84:dd:fc:56:6e:5a:8b:0f:25:be:
         fb:a0:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 21:51:46 2024 by rpki-client on console-ams.rpki-client.org