Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/2510659a-fb9b-3d0b-b735-fd2338b70767.roa
File:                     2510659a-fb9b-3d0b-b735-fd2338b70767.roa (raw, json)
Hash identifier:          OjSLDNciABFJdICkw91a6qvLo9EnGG7TRW9n15kwj+c=
Subject key identifier:   00:96:B3:36:6C:D3:CD:61:0A:5B:8E:7E:34:F9:64:30:16:83:35:4B
Certificate issuer:       /CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
Certificate serial:       010D0C9F43285845734DA9C69741201DCEAD5CC0
Authority key identifier: 1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/2510659a-fb9b-3d0b-b735-fd2338b70767.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     40703
IP address blocks:        168.161.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:a9:c6:97:41:20:1d:ce:ad:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=af1aaf12-734d-4b84-b149-1a3034a4d374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:7f:cf:10:39:a6:a8:7e:2c:b6:24:fa:6e:
                    07:63:a5:90:d4:ae:a5:b0:38:7b:b2:74:4b:0a:b8:
                    85:7e:5b:10:52:72:16:6f:fd:ea:7b:58:5a:82:a8:
                    e3:c6:7c:e1:73:75:04:2b:90:88:ae:69:c5:7d:18:
                    18:53:a2:70:d4:b4:81:c9:68:cd:8f:23:ce:07:4a:
                    94:c8:45:37:10:94:25:7d:76:8b:10:32:7d:39:3f:
                    6d:6d:ed:43:87:d7:e4:3a:c1:78:2c:4d:6d:19:92:
                    c1:e1:42:36:f5:1a:95:8e:7d:0f:1d:5c:99:c8:df:
                    0e:ab:72:47:76:11:d6:5e:09:63:21:f2:f4:ef:03:
                    f0:e9:3e:9c:f0:3f:fe:d8:60:4d:3b:e5:2c:55:b8:
                    93:60:b1:29:4c:59:83:21:d3:13:22:cb:81:9e:b1:
                    85:5d:a0:6a:68:45:af:96:b8:00:c4:54:7f:80:9f:
                    dd:c6:8e:fa:e9:de:2c:e2:0f:ee:83:80:0d:ad:bf:
                    3b:f3:4d:69:7e:b4:76:ae:b7:dd:62:ba:4f:7e:4a:
                    2e:eb:d3:c1:b8:ec:65:be:91:d4:fd:a5:9f:3f:c3:
                    f7:de:2f:5a:11:d2:96:74:e4:84:23:e2:08:aa:cc:
                    7c:91:bc:26:b8:32:05:5d:ff:f6:11:0a:95:f4:61:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:96:B3:36:6C:D3:CD:61:0A:5B:8E:7E:34:F9:64:30:16:83:35:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/2510659a-fb9b-3d0b-b735-fd2338b70767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl

            X509v3 Authority Key Identifier:
                keyid:1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.161.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:d9:38:bc:f6:78:47:e1:27:61:a6:57:4c:ce:5b:73:70:
         2c:d1:74:f5:6a:40:d5:ea:2b:59:82:17:37:c9:d3:ff:2c:49:
         fd:38:67:79:66:dc:9c:e6:c1:df:f2:71:41:eb:2a:47:f2:3b:
         db:43:da:a4:2e:61:e9:35:b6:f8:87:94:9a:30:fa:9e:e7:f5:
         ef:90:e0:a4:2b:61:89:f2:61:a4:45:3e:33:06:74:db:27:e6:
         46:df:02:1a:cb:cf:9a:56:1a:4a:cc:97:16:d4:f5:8d:45:53:
         d3:e3:37:c5:a8:1e:42:43:bd:2a:bc:49:ec:fa:e8:62:4d:da:
         c3:62:dc:4f:f3:79:fe:ec:4e:ba:d6:51:1d:eb:b7:4b:49:53:
         27:35:64:da:bc:e9:10:71:a2:80:fc:1a:64:f7:7f:fb:1e:42:
         3e:e9:d2:db:68:72:14:ae:08:39:ea:9f:04:cc:c9:de:2a:21:
         06:24:c3:ad:1b:6b:c4:98:1a:2e:05:48:80:ac:0e:81:9b:39:
         60:13:e3:15:bb:0b:e5:55:93:fd:20:f6:e0:a1:cb:9a:9b:72:
         38:db:5b:25:93:61:af:15:16:c3:b6:6d:57:e2:e2:d6:15:6e:
         b4:eb:d9:b7:14:56:31:8d:68:7e:80:7c:35:d0:dd:4d:19:bb:
         c3:ae:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:13:01 2024 by rpki-client on console-ams.rpki-client.org