Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b9bf0d9-fe70-39ea-b5e2-12ac3ff4bfcb.roa
File:                     3b9bf0d9-fe70-39ea-b5e2-12ac3ff4bfcb.roa (raw, json)
Hash identifier:          vLjqj2pMXuMiZNgQTxPyXi6I11GruuTKoyhdGy1b4bA=
Subject key identifier:   84:4B:59:42:F8:E8:37:74:E6:24:9E:66:A6:4F:53:53:5C:53:C9:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049DB377E1C003D74FC0A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b9bf0d9-fe70-39ea-b5e2-12ac3ff4bfcb.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33650
IP address blocks:        24.22.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:db:37:7e:1c:00:3d:74:fc:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=cfb0cda7-35eb-47fe-b8db-5d97ba823727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:d5:69:89:73:37:f3:75:49:97:c9:84:1b:
                    11:eb:04:87:08:53:ba:fd:08:93:5d:28:04:cd:3b:
                    3d:56:3f:3e:40:80:9f:44:31:3d:a2:f4:6b:35:23:
                    ef:56:3b:e4:54:0a:14:eb:ac:55:19:01:f1:85:5a:
                    f6:71:0a:70:61:c6:da:2b:5f:44:a9:6e:bb:77:b6:
                    b4:d0:bd:b5:c6:f4:79:8b:ea:69:f4:55:7a:00:bc:
                    c1:f1:0e:26:11:36:da:53:b7:41:87:ab:41:cd:4b:
                    fc:ba:24:cc:4b:9e:5b:1f:43:eb:0b:4b:f1:24:5a:
                    7b:7b:fb:fa:24:85:11:09:63:5e:de:b4:7c:aa:3b:
                    8f:1a:d7:59:bb:4f:74:fe:f3:2f:75:6b:89:59:3f:
                    b1:6e:56:25:59:37:38:80:c2:27:87:63:4a:c0:76:
                    4a:98:06:7c:63:52:ad:c0:77:6e:2a:22:ad:f6:5a:
                    62:38:ad:39:41:47:45:04:31:71:5f:dd:4d:51:f2:
                    f3:d7:0c:3d:7f:26:b3:80:c9:e3:59:ef:b4:40:fe:
                    88:4d:bc:b3:f9:cd:44:d4:1f:59:70:0d:c1:0d:2f:
                    63:35:bf:06:6b:3a:87:a9:f8:32:05:46:70:1f:6c:
                    cb:61:5c:0d:73:01:07:b7:13:49:a5:9d:80:17:fc:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4B:59:42:F8:E8:37:74:E6:24:9E:66:A6:4F:53:53:5C:53:C9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b9bf0d9-fe70-39ea-b5e2-12ac3ff4bfcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.22.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:ce:6b:00:69:64:47:bb:89:e4:91:67:dc:c1:d4:78:4e:
         55:28:d7:ac:fe:8b:c4:ad:77:ac:2e:88:c0:30:82:76:b5:12:
         7a:65:36:ab:ac:ae:74:70:19:38:64:a6:ce:f1:c3:4b:5a:f7:
         6b:05:9a:c2:1e:6b:59:82:50:b5:9f:1a:a8:60:d7:0c:d1:71:
         6a:12:d4:30:49:df:36:73:63:da:8d:09:60:c1:2f:44:15:b8:
         7a:1c:b4:7d:15:58:66:bf:07:a0:e5:6b:c6:65:be:60:f2:57:
         b0:02:a7:30:00:81:85:5a:15:20:e6:83:e8:3a:44:7d:c2:81:
         61:42:d6:67:7d:0e:74:67:37:6f:17:b7:72:39:b9:62:b9:36:
         2f:38:64:13:4b:e9:03:93:e2:cd:d3:20:e1:b6:76:9c:80:af:
         14:41:c4:a8:29:42:af:51:dc:6b:90:82:5d:4b:58:69:6a:c5:
         21:d2:df:53:ac:96:4b:cd:c9:cc:a7:7e:ad:ce:78:8a:b0:6f:
         d6:85:f3:92:00:f7:57:22:11:97:37:d4:1e:5b:82:66:88:1c:
         19:1f:b3:99:67:ad:24:b3:b5:44:56:b7:60:af:6c:54:20:42:
         47:45:b4:87:33:ae:35:b1:38:ca:1b:4a:14:9c:08:d8:18:ec:
         2d:4e:64:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:58:25 2024 by rpki-client on console-ams.rpki-client.org