Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e45d7d-8f34-3efc-a5dc-5e4412ee3c49.roa
File:                     03e45d7d-8f34-3efc-a5dc-5e4412ee3c49.roa (raw, json)
Hash identifier:          JAKuBk8RB+Gxr+xL8/VasvQzzpcSTbRLfEoz0kcGbsU=
Subject key identifier:   8A:EC:10:1A:37:68:4C:C4:BD:99:AD:18:25:8F:78:6B:C6:F8:C1:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFC422F54B5DFB3D574F7F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e45d7d-8f34-3efc-a5dc-5e4412ee3c49.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7922
IP address blocks:        24.34.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fc:42:2f:54:b5:df:b3:d5:74:f7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=fcf13c66-b4b4-419e-805c-960c5eb319e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:e4:14:53:a3:48:ac:f1:d3:12:29:a3:93:
                    00:4e:95:4d:b7:aa:f8:ca:cd:4f:d1:cc:9f:06:e6:
                    b0:79:8e:47:d9:01:31:60:fd:d2:8e:bf:66:6e:02:
                    19:8c:a5:07:7d:39:44:88:81:6a:e9:be:7c:34:c3:
                    8d:5e:d5:bf:13:e8:ea:b0:8c:f2:e6:97:cb:72:f1:
                    8b:4d:c7:4b:ec:db:56:59:0e:37:da:57:9f:7c:66:
                    03:f9:c2:72:ed:a6:3d:14:38:38:bc:6d:33:8c:b0:
                    2c:b7:45:c6:bc:d3:a8:58:02:6f:f3:a3:c7:5a:0c:
                    0c:84:c2:84:bb:05:20:14:be:b3:7e:ad:40:5e:e8:
                    59:06:7a:15:2b:a3:f9:ff:fc:9c:89:cc:76:35:6e:
                    e2:fd:a3:47:62:88:51:d6:d4:34:9e:55:d9:08:2e:
                    7e:7c:c2:ab:ba:c0:0d:77:5b:e7:da:85:52:37:22:
                    31:37:ea:a2:3d:da:9d:e2:7c:e6:bc:d5:83:9f:ff:
                    a5:c7:4d:a9:11:6d:da:12:08:cf:a8:8d:bf:42:e6:
                    5d:9e:5b:48:e1:08:7e:f5:d1:03:69:d2:10:1e:ef:
                    f2:fb:85:54:ef:68:8e:84:6e:aa:dc:51:42:76:16:
                    2b:eb:e1:4c:05:9f:89:72:a3:5b:51:02:86:14:40:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EC:10:1A:37:68:4C:C4:BD:99:AD:18:25:8F:78:6B:C6:F8:C1:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e45d7d-8f34-3efc-a5dc-5e4412ee3c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:64:a6:44:88:d2:01:c9:07:bc:3e:b5:e0:46:5e:31:06:1d:
         88:07:36:64:20:80:04:7c:18:27:a7:17:45:12:8f:48:7f:7e:
         1c:b7:fc:99:70:20:01:9e:aa:28:61:2a:14:a2:ee:64:2b:72:
         ea:62:3d:98:91:99:8c:a5:43:1c:6f:d7:f3:58:9f:0e:4b:50:
         66:88:6b:24:7d:b2:77:c9:50:e1:12:7f:1f:7e:80:99:8a:60:
         65:6b:a0:ce:f5:00:54:2c:97:50:81:84:a8:bd:18:f7:6d:84:
         d9:16:d9:07:5d:04:41:f0:48:35:82:26:2d:3f:6f:1c:8c:8c:
         8a:40:aa:18:d8:23:bb:8f:18:94:9f:7a:4a:b9:1f:4d:7b:13:
         35:da:c1:5a:4a:56:2d:69:aa:37:e6:ce:7a:84:4b:cc:45:87:
         6a:29:8c:11:42:54:94:ca:31:35:41:72:38:37:e5:09:be:68:
         86:db:be:70:74:50:98:91:f3:d8:64:b0:ea:6b:ef:a2:7d:ba:
         9a:62:8b:b0:26:68:9c:22:1b:d5:6f:7f:d3:79:d1:63:7a:67:
         d6:5e:9a:f9:ca:98:ee:76:12:98:90:06:d7:a0:38:55:cd:8e:
         8e:bd:13:a2:ca:5c:5b:d9:ca:cf:62:d6:a1:e5:82:64:38:74:
         00:71:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:56:36 2024 by rpki-client on console-fra.rpki-client.org