Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa
File:                     24811dae-1ce6-3dbd-845b-f79aafe06a39.roa (raw, json)
Hash identifier:          p1ZNoy6B7QPe5D7JpYN6fhHYmp+mRejwYIm63qPX5Hw=
Subject key identifier:   F1:33:54:FF:39:CC:BD:0A:74:6C:8B:10:73:4F:A2:45:7A:61:2D:75
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584598FE04B8DE5FB4BBBC1306C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     20473
IP address blocks:        64.154.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:04:b8:de:5f:b4:bb:bc:13:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=0affb651-a083-4cf4-af35-5b09acc17aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:4b:f4:11:96:28:db:f8:cb:52:c5:31:ca:
                    46:5b:de:d2:39:67:d4:8c:e9:53:7d:44:57:1d:35:
                    ad:f5:01:1b:c7:5b:be:5f:75:b2:19:67:a7:7b:5a:
                    7b:e6:fd:4f:f7:e3:f0:df:ae:17:43:ab:51:d0:7d:
                    c7:b2:61:97:e9:06:34:01:a7:7a:c4:f2:4e:28:26:
                    18:fc:93:39:64:cb:6a:f5:10:0c:6c:df:24:7d:0b:
                    0f:38:c3:c0:37:f1:60:9a:d1:33:a0:9c:87:9e:2b:
                    d7:17:ce:62:a7:d2:b5:55:bc:3b:0d:48:61:76:b0:
                    fa:5e:23:1d:18:87:9c:de:aa:b5:ba:f7:d4:9d:30:
                    55:99:cf:c5:15:20:b2:aa:be:5d:2d:90:8c:49:e2:
                    6c:37:6b:1e:4f:6a:c0:66:a7:20:85:e8:3f:4b:84:
                    d4:df:83:1e:90:ce:8e:cc:c5:6f:9b:fb:0f:da:56:
                    e3:66:27:17:da:0f:c8:db:0b:6c:f3:a0:22:c0:59:
                    8f:06:df:c1:aa:bc:3b:c3:2b:5e:2a:0a:06:92:e9:
                    4c:1f:33:58:fe:09:61:08:b0:eb:d8:68:da:46:ea:
                    ee:b9:e1:d5:46:12:f5:82:ed:d7:bb:47:0b:21:72:
                    af:8f:db:c1:10:38:3a:0a:bc:d5:4d:97:15:20:24:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:33:54:FF:39:CC:BD:0A:74:6C:8B:10:73:4F:A2:45:7A:61:2D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.154.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:dd:34:45:16:a4:78:34:00:17:b3:30:2e:95:a4:0c:e2:b6:
         e8:10:db:99:8a:e8:b3:2a:4c:53:c9:0e:a7:7b:48:af:74:ca:
         62:ec:64:dc:c7:c7:f1:d4:51:d8:6d:8c:e8:c4:ab:98:11:51:
         c4:fc:9a:08:31:bf:d7:7b:14:e2:2b:d7:28:ae:84:d0:22:af:
         58:94:6c:43:13:72:87:67:a8:d4:8e:fc:54:5c:f8:1e:0d:de:
         05:42:57:a5:4a:7f:a5:64:0c:e2:81:2a:8c:a2:eb:62:0d:da:
         90:94:e9:21:5d:82:14:c2:d8:8d:fd:d8:48:b1:9d:a9:92:7b:
         7f:49:29:5f:80:b1:42:a8:dd:cd:2c:94:5a:f6:8e:43:92:7f:
         6a:7d:dc:0f:14:91:95:a2:5f:52:a9:8f:b9:2b:ca:15:5d:72:
         a6:0b:78:fd:c7:45:07:3a:89:b5:9a:dd:78:0c:a3:4b:1a:e5:
         e9:2b:bc:f5:5c:02:63:ab:4f:24:83:9b:65:3b:2b:48:32:ad:
         d3:38:3d:01:07:6b:40:c6:40:89:bc:9c:f3:d8:92:16:de:2c:
         59:01:7e:e4:5d:1c:de:72:34:70:55:1d:0f:4f:1a:ac:1d:70:
         16:15:9c:5a:62:cd:cf:81:56:ec:a8:e9:b3:21:45:dc:05:51:
         66:88:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:36 2024 by rpki-client on console-fra.rpki-client.org