Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04f143f2-eb3f-3fc7-8761-9c9c083b6ab6.roa
File:                     04f143f2-eb3f-3fc7-8761-9c9c083b6ab6.roa (raw, json)
Hash identifier:          Y8xhU9Vh/BwGjIf57HqzodvjqWv5tuQ7O/bbHtWjE1A=
Subject key identifier:   7C:B6:D7:69:57:C5:4E:85:BA:F2:4A:9F:33:63:7B:B9:99:C1:BD:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A423A869F9BB7F18DD400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04f143f2-eb3f-3fc7-8761-9c9c083b6ab6.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        24.7.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:42:3a:86:9f:9b:b7:f1:8d:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=e85650fb-a36f-437e-9f4d-d5efd3c191e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:0d:98:06:39:51:c3:4f:a4:2e:ff:52:ad:
                    da:dd:b2:e8:62:1f:e2:5c:13:94:f2:18:d1:2f:fb:
                    8e:73:44:3a:61:35:97:c2:e2:bb:66:b9:f1:04:50:
                    3d:98:71:d1:1d:e8:ce:29:2b:5a:d2:cc:73:05:72:
                    d9:b3:9f:25:a3:f5:27:e3:63:8f:a7:b1:0a:24:67:
                    27:d9:68:0e:70:44:e9:b9:03:23:5e:0f:ca:82:f6:
                    79:4d:5a:64:fc:e5:d0:9a:e6:11:b5:ec:be:75:fa:
                    36:71:d7:bf:6b:79:16:f2:4d:86:36:41:d0:2d:b7:
                    d0:99:81:09:72:f4:ee:84:05:ad:56:14:54:1b:22:
                    bd:bf:79:f9:1f:b2:96:85:b1:c8:d3:bb:27:b1:0a:
                    81:ab:c3:c1:ff:37:1f:fe:92:2e:ed:3d:e5:2b:05:
                    a7:10:42:26:a9:c2:cb:69:ed:a3:8f:1f:5f:6b:de:
                    e8:0b:8a:b1:09:1a:fc:06:e5:c5:e6:e4:e1:f0:c6:
                    1a:6a:32:d8:1a:a1:d4:9a:fe:97:ce:e0:3b:7a:52:
                    f0:d9:f5:7e:51:32:23:ed:ff:5e:39:05:e8:66:22:
                    28:3e:d8:bf:36:61:6a:06:69:cc:12:b7:6b:a3:e4:
                    90:4d:c9:51:9c:03:d5:81:47:07:25:ff:1a:96:e7:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B6:D7:69:57:C5:4E:85:BA:F2:4A:9F:33:63:7B:B9:99:C1:BD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04f143f2-eb3f-3fc7-8761-9c9c083b6ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:e1:47:32:7e:41:d9:22:d7:9f:65:9d:fe:61:2b:18:f3:
         4a:41:f4:39:d3:5a:26:d5:c2:82:9d:2b:12:78:cd:ab:13:5e:
         c6:dc:2b:9a:11:92:2c:69:70:4b:56:43:7d:5d:11:af:8e:89:
         2f:da:b0:53:a5:d9:c2:ec:5d:3c:69:f7:74:e2:2c:7a:be:e4:
         b2:1b:3f:05:7f:ee:ca:51:ee:2f:1e:cf:7d:c5:a1:bf:a4:49:
         f7:a0:2c:c0:df:91:37:c8:ae:b3:96:9d:55:8a:01:67:66:9b:
         a3:47:da:87:d5:57:4f:66:92:b5:10:d0:98:a5:69:1a:b5:2f:
         ca:cb:c3:a2:86:2f:e9:26:39:76:64:49:19:99:95:7c:72:21:
         a5:21:b1:82:0f:c0:4b:68:39:04:72:34:1d:42:5c:78:f8:6b:
         b5:08:82:d7:96:9c:be:66:d3:89:61:ff:d4:1a:66:47:21:b6:
         75:70:54:3a:c6:fd:f0:55:74:91:eb:69:b8:ad:2f:bb:1c:5f:
         75:fd:f1:e0:58:4f:eb:93:c3:f5:bd:92:40:9e:19:0e:3c:00:
         e6:57:32:40:13:b8:93:eb:d5:a1:f8:d1:5c:c1:c7:8c:6e:bb:
         16:2c:7a:6f:d0:96:ba:f0:8f:25:59:fd:29:07:1d:d0:d4:cc:
         7f:b0:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:39:41 2024 by rpki-client on console-fra.rpki-client.org