Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2c4a04cc-2950-3709-9828-750137debf35.roa
File:                     2c4a04cc-2950-3709-9828-750137debf35.roa (raw, json)
Hash identifier:          ubuKKi4llrtW6tlHnE38pNQUozgug5h6ZKlhMrareQI=
Subject key identifier:   7B:C4:86:11:05:06:62:44:D3:65:C5:AC:4C:4D:CD:40:29:78:52:55
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285847A5D6A2DE705FFF100A576780
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2c4a04cc-2950-3709-9828-750137debf35.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     5769
IP address blocks:        24.225.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a2:de:70:5f:ff:10:0a:57:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=0cb4fac3-395c-4abf-bc26-4c958d17aa8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ee:90:ff:4c:31:c3:4d:4e:07:41:bb:65:ad:
                    a2:b5:04:55:68:99:61:28:1b:09:4a:75:71:71:e5:
                    cd:c9:b0:45:9f:8e:5c:12:40:9a:0a:e0:33:fc:cb:
                    be:19:e3:4a:d9:42:6c:e2:b5:a4:b8:f0:d7:3e:9b:
                    a0:a1:85:62:79:4a:49:f9:48:2d:af:2b:03:35:94:
                    41:82:a5:7e:35:b3:55:94:1b:50:09:29:02:9d:47:
                    ec:c4:02:83:c3:1b:28:94:1d:4a:a6:b1:73:b5:ce:
                    7e:29:4d:cf:c7:66:e3:ae:69:fd:de:00:78:d6:93:
                    79:25:83:12:28:ed:58:ba:dc:b2:df:f0:37:15:15:
                    9a:99:82:d7:16:1d:77:66:cb:97:07:19:60:85:b8:
                    73:80:fa:47:b1:df:96:2c:eb:f2:23:9d:c5:a0:5d:
                    0c:09:bd:5e:4a:cd:be:3d:69:af:fc:ab:ee:70:83:
                    be:0f:90:a8:d7:35:b5:3a:53:2a:ce:ee:1f:d0:50:
                    3f:10:7a:e6:af:6c:77:75:73:1b:e7:af:05:bc:ec:
                    46:5d:67:6b:a2:63:1f:4d:0a:e7:78:f5:a4:cf:eb:
                    02:0c:ac:22:d5:57:e9:30:0f:a6:88:aa:f3:a2:a3:
                    19:d7:98:93:84:77:e9:0f:36:48:4c:92:ac:ec:c1:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C4:86:11:05:06:62:44:D3:65:C5:AC:4C:4D:CD:40:29:78:52:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2c4a04cc-2950-3709-9828-750137debf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:e1:17:64:d7:b0:b0:96:59:4c:52:9b:6e:0b:ac:ee:90:
         a3:0e:60:3b:65:38:92:6c:14:9e:24:d6:d1:5a:07:ce:44:8f:
         de:c9:22:56:06:06:9e:23:f5:1b:e9:dc:f5:4b:00:6f:fe:f9:
         87:63:31:b0:f3:c8:2c:63:be:98:d8:49:77:4a:29:01:11:07:
         01:40:d9:bd:99:1e:c6:d9:d5:db:06:e4:99:24:1d:44:8a:e4:
         c6:d1:92:e8:48:84:1b:3c:0a:bf:d8:1e:80:fc:d9:10:49:e2:
         9d:81:bd:46:4d:a5:d6:7f:b7:21:39:77:3b:09:9d:3c:ca:76:
         11:6a:7f:3d:dd:97:2e:bb:08:d9:e5:b7:50:1b:78:cd:5b:40:
         7a:f8:fb:4c:9c:10:81:d5:4c:1d:8b:83:f6:de:8e:5c:00:14:
         94:5c:64:00:ee:24:66:39:0d:cd:26:f3:fb:30:96:93:83:f8:
         0b:08:b5:64:29:0d:a8:d7:b1:df:77:ae:95:37:fd:ed:ab:ab:
         dc:48:5d:13:24:0e:c4:53:80:15:b8:a0:37:5a:f9:00:7d:09:
         fb:b8:59:fa:ed:9f:4f:92:d7:6e:46:01:5d:ab:1d:f0:ce:d3:
         ad:ee:43:ed:7a:28:d8:32:e7:1b:ad:8c:e3:2a:25:b3:e4:d7:
         19:ec:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:09 2024 by rpki-client on console-ams.rpki-client.org