Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/997dea6e-7924-3a2c-a195-94a358108d2f.roa
File:                     997dea6e-7924-3a2c-a195-94a358108d2f.roa (raw, json)
Hash identifier:          UREX1UKBA5WK9A2Q9KdSribdAK0e+HA51n8R751yAVA=
Subject key identifier:   34:50:AB:81:1D:90:68:B5:21:26:0B:DD:CC:2E:81:B9:22:61:B9:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A46C104E5F363F4626780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/997dea6e-7924-3a2c-a195-94a358108d2f.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        24.245.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:46:c1:04:e5:f3:63:f4:62:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=65518b66-627d-4d44-af78-bc603685ad8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:16:16:76:55:d3:a5:ef:6a:ba:bc:d6:c3:
                    cb:23:46:88:73:a4:82:71:46:e0:3b:2e:e5:bb:20:
                    e0:a4:ac:18:07:14:19:e6:6f:a0:a8:2b:6b:89:d4:
                    6c:1f:ab:b1:9b:ed:86:46:47:46:d7:3c:15:5f:6f:
                    6e:f9:98:6f:31:37:73:eb:50:0f:6d:fe:83:20:58:
                    dc:e1:40:9c:6b:29:4e:88:be:7a:43:2f:da:86:e6:
                    94:c8:7a:a7:10:75:1e:73:a4:48:ab:92:cb:41:2e:
                    71:7a:35:8d:55:ce:59:95:e2:cc:ba:3b:f0:7d:21:
                    c5:d3:43:36:15:44:74:83:ca:0b:a7:b4:88:f9:fa:
                    c6:f1:2f:8e:71:e4:ae:fa:bd:a8:9f:a0:4a:1d:b7:
                    8d:b6:78:33:32:25:63:a5:1a:05:df:aa:69:8b:ec:
                    90:c1:25:33:91:7e:04:97:c3:5f:81:3b:ff:27:8a:
                    be:13:a2:ef:35:5c:32:4f:66:bf:9c:67:93:cd:ba:
                    65:ea:0a:80:0a:dc:0b:ac:75:18:87:4e:1f:b2:95:
                    f3:5d:36:12:eb:6a:c2:f2:bc:7f:b0:cc:46:24:fd:
                    cf:8c:6d:eb:72:bd:50:f6:f7:01:74:9f:83:0c:7b:
                    54:20:6a:0c:54:98:ce:6a:b0:f8:55:34:c7:ea:7c:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:AB:81:1D:90:68:B5:21:26:0B:DD:CC:2E:81:B9:22:61:B9:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/997dea6e-7924-3a2c-a195-94a358108d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.245.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9d:31:22:52:af:30:f1:df:71:0e:cf:09:7e:0a:58:a0:c1:
         2b:02:b3:02:50:14:a9:7d:81:3f:c1:ea:f3:81:8e:31:23:c4:
         86:53:38:e5:49:3b:30:67:d7:e2:a4:6f:f5:a5:6f:8b:98:a5:
         1c:b6:fa:04:2b:df:5e:a6:ab:4b:6b:ec:73:7b:73:9c:d6:35:
         b1:97:06:b7:ca:bb:02:06:d0:a6:0e:63:56:0b:da:66:35:58:
         2f:12:68:74:8d:07:69:9a:0c:94:37:25:a5:54:41:39:d8:d7:
         1a:a3:2a:83:e8:af:20:a8:c2:78:cb:99:21:41:21:51:05:ba:
         3a:5c:c9:52:55:a7:ce:3e:9b:d1:98:45:1f:22:9d:59:c6:d4:
         6f:9c:cc:4e:e9:84:72:91:28:e4:4c:bc:77:51:68:9c:1e:1b:
         e1:e6:b0:b5:53:ea:f3:db:14:04:16:c3:6e:4d:ed:04:e3:47:
         65:86:8d:15:f7:6f:f1:7c:c1:cc:b9:17:4b:a9:6f:76:d5:43:
         64:e9:c7:28:71:ec:a4:8f:3b:dd:03:a3:ff:22:3f:91:3d:ce:
         85:cf:99:19:80:f8:ad:e4:f9:c7:61:0d:10:1d:73:db:d1:04:
         82:2f:16:ff:50:70:b0:76:f4:ec:ed:de:7b:b0:ef:1a:29:86:
         54:83:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:51:19 2024 by rpki-client on console-fra.rpki-client.org