Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004ba301-34e3-3d1e-9dec-9425fd00d2a9.roa
File:                     004ba301-34e3-3d1e-9dec-9425fd00d2a9.roa (raw, json)
Hash identifier:          roha9L+Z5NNjdSlGrnY6AHJdk8zp3LTVbE6ZQ/3LSV0=
Subject key identifier:   32:1B:5A:CF:C9:58:4E:81:E7:06:BE:0E:15:12:A3:BF:05:14:3D:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BA07DD51A2D382C6B6280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004ba301-34e3-3d1e-9dec-9425fd00d2a9.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        24.15.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:a0:7d:d5:1a:2d:38:2c:6b:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=8cd3652c-df27-43ca-a2dc-06b83b8119e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:5b:ca:e1:f9:69:30:d5:16:07:e5:bb:a3:
                    e4:85:d2:2f:ca:a2:9b:e4:c5:22:34:99:bf:86:bb:
                    13:67:89:a6:82:a3:bf:ae:d6:02:ce:f5:0e:ee:f5:
                    12:c1:0a:1a:fc:2d:ec:55:8a:5f:a7:88:60:f8:84:
                    dc:2b:5f:4b:ec:45:72:59:88:29:9c:a8:60:bd:79:
                    ee:0c:e7:25:aa:d5:5b:17:47:fc:48:e0:ad:e6:c9:
                    b7:bf:98:be:09:94:3d:f1:a2:96:af:9b:b5:82:c6:
                    d1:db:60:4f:78:85:52:65:55:29:ba:44:fb:80:cb:
                    1e:84:2b:0b:7a:b2:46:f5:ca:9d:4d:da:6a:92:97:
                    45:f0:3f:66:79:25:08:61:a4:94:ac:c2:ba:9c:89:
                    3f:d5:a7:fe:54:9a:32:ae:c6:b5:bf:2c:66:a4:f9:
                    de:ae:5b:c0:f4:ad:72:ce:6c:69:ba:47:60:f6:d9:
                    d3:42:9f:fd:aa:8c:cf:9e:1a:42:7a:5b:f2:e9:df:
                    72:4b:3a:c5:a5:15:18:3a:fc:01:6f:43:a9:ce:0e:
                    fb:b6:ab:8e:3b:ad:49:16:19:90:e2:3c:a7:da:63:
                    ee:90:6b:4a:71:46:92:c1:63:1e:8d:e3:52:39:57:
                    2e:ad:e9:c8:83:b1:da:23:ee:bd:2c:8a:e8:07:c8:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1B:5A:CF:C9:58:4E:81:E7:06:BE:0E:15:12:A3:BF:05:14:3D:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004ba301-34e3-3d1e-9dec-9425fd00d2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.15.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:3d:f4:f5:c4:12:52:ec:36:b0:21:0d:2a:f6:87:a6:1d:b9:
         d1:71:7a:7c:b7:55:2d:cb:4c:38:c8:2d:c3:6f:0d:39:8b:4c:
         09:09:76:8c:19:2a:3d:72:47:ec:69:84:dd:a0:b1:0c:29:05:
         8e:90:0d:0a:b8:8a:8a:44:43:38:c0:a2:2d:80:37:ea:25:90:
         90:0e:47:f5:9d:0f:f8:37:cc:b3:38:98:4c:70:d6:f3:20:13:
         66:18:fd:0a:80:5d:b8:9c:3c:10:1c:bc:a5:1d:ed:72:99:1f:
         b5:30:95:4f:bb:7c:2c:c6:85:1a:20:0e:2c:90:cf:d0:7f:29:
         c2:cb:78:9f:8a:2f:90:d8:29:7f:c5:87:d2:a0:73:b3:29:00:
         f5:44:d2:45:f1:5c:21:22:a2:f8:6a:ab:1b:de:32:5a:31:05:
         67:af:0e:5c:9c:7f:50:84:06:64:e3:40:b4:23:39:c6:92:88:
         5c:b1:4e:21:9b:07:bd:ee:50:00:3f:83:10:3a:e5:e7:07:84:
         28:f4:22:8d:a6:cb:9c:97:d2:fd:bb:23:8f:f6:0e:a1:e9:00:
         69:bb:bf:0c:6b:bd:10:82:17:cd:4d:76:01:93:b5:6a:01:ee:
         28:36:4d:6d:27:e5:11:4b:c1:51:25:9c:56:07:22:a8:65:6a:
         71:b6:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:32:46 2024 by rpki-client on console-fra.rpki-client.org