Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccc17be-bcb3-3475-a77c-0536e0c65201.roa
File:                     0ccc17be-bcb3-3475-a77c-0536e0c65201.roa (raw, json)
Hash identifier:          e6Bz7AFRylXFYG0On66F4j9vVZV35H/uL/BGcGEHqus=
Subject key identifier:   C2:FB:F0:59:9D:0D:2D:FD:21:D3:F1:71:6A:B2:B3:66:C5:86:FC:EA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E564C553904AAB6FBDA540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccc17be-bcb3-3475-a77c-0536e0c65201.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.126.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:64:c5:53:90:4a:ab:6f:bd:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=48975527-84a7-418d-8146-5251dcc8c87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:59:5f:e8:f0:de:19:2a:78:03:94:a8:83:b7:
                    b4:3d:ba:f4:50:a3:37:a8:2b:bc:53:2e:63:dd:a3:
                    1e:f2:8f:bb:29:63:29:b5:5b:60:f3:9d:b2:52:98:
                    62:3e:16:b1:a1:c5:3c:6e:94:82:28:7a:1f:3a:50:
                    f9:73:4e:82:da:2b:00:38:7b:5e:d0:cf:d9:4e:e7:
                    37:d2:e1:72:fe:96:1d:3e:83:59:cd:d4:9f:eb:df:
                    7a:75:dc:ec:83:22:06:7b:be:6e:d2:da:58:cf:f1:
                    0a:d1:71:63:16:bc:c0:68:54:8f:a2:a2:d0:db:0a:
                    aa:42:31:fa:39:43:c7:34:fb:2e:9d:0c:76:f1:49:
                    87:8e:1c:c8:8f:b8:ea:8a:9e:e8:89:2d:42:0e:40:
                    70:48:47:31:e1:c8:28:97:5c:89:fa:26:07:15:7f:
                    09:ad:ad:ce:53:f1:d0:4f:45:b0:d5:74:fe:96:6e:
                    a3:02:3f:79:35:6f:6d:94:1b:c8:5d:a5:3b:72:0f:
                    73:09:4f:03:b3:e1:a6:3a:32:7b:b6:31:bd:75:7d:
                    f5:22:7c:20:44:46:c3:6a:52:58:ea:b0:2e:28:c7:
                    8b:32:e2:d8:05:a4:5f:2d:06:89:d1:20:dc:77:9f:
                    48:1f:70:64:9b:2f:a0:0d:31:60:f3:05:68:68:43:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:F0:59:9D:0D:2D:FD:21:D3:F1:71:6A:B2:B3:66:C5:86:FC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccc17be-bcb3-3475-a77c-0536e0c65201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.126.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:5b:e6:41:a5:93:51:ad:0e:b0:fe:bb:3d:05:1b:53:41:
         48:59:6f:85:44:8d:a1:44:c8:59:a1:9c:4d:99:29:06:bd:b0:
         66:7d:75:e1:5b:c1:f2:0d:16:9f:2b:4b:b2:12:30:8a:79:a1:
         0a:9f:db:45:74:20:2a:cb:e6:ad:e2:3f:f8:bf:f2:17:bf:83:
         b2:d7:8e:89:27:7f:ae:cb:d6:83:fc:49:6c:9d:30:1b:ce:fa:
         74:44:87:2c:57:00:93:33:71:29:51:75:b1:07:91:86:d5:4d:
         6d:93:80:97:a9:f4:9b:e2:3d:63:4c:8f:fa:8f:bd:41:8f:4f:
         8f:c4:90:f9:dd:ac:97:b7:e4:c4:43:38:63:13:7c:49:5c:be:
         a3:5a:77:4e:2a:d5:0f:e9:45:0a:cb:1f:fe:34:34:19:09:f2:
         13:f0:53:fc:30:28:cb:b9:67:1f:dc:c3:ff:de:63:a6:53:f4:
         60:fe:a7:b7:f4:a7:cc:42:df:2d:88:c1:c4:cf:09:6b:72:eb:
         50:56:d0:4b:e2:c2:be:04:b2:79:e7:44:d2:62:9f:22:28:fb:
         00:a5:66:ca:fb:3d:83:02:e6:b3:b5:b6:d4:05:73:60:51:a0:
         35:4c:fb:b1:35:76:5b:3a:de:53:6f:09:4c:ec:66:f9:ee:80:
         ae:6f:1e:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5WTFU5BKq2+9pUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NDg5NzU1MjctODRhNy00MThkLTgxNDYtNTI1MWRjYzhjODdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFlf6PDeGSp4A5Sog7e0Pbr0UKM3qCu8Uy5j
3aMe8o+7KWMptVtg852yUphiPhaxocU8bpSCKHofOlD5c06C2isAOHte0M/ZTuc3
0uFy/pYdPoNZzdSf6996ddzsgyIGe75u0tpYz/EK0XFjFrzAaFSPoqLQ2wqqQjH6
OUPHNPsunQx28UmHjhzIj7jqip7oiS1CDkBwSEcx4cgol1yJ+iYHFX8Jra3OU/HQ
T0Ww1XT+lm6jAj95NW9tlBvIXaU7cg9zCU8Ds+GmOjJ7tjG9dX31InwgREbDalJY
6rAuKMeLMuLYBaRfLQaJ0SDcd59IH3Bkmy+gDTFg8wVoaEOOUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFML78FmdDS39IdPxcWqys2bFhvzqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNjYzE3YmUtYmNiMy0z
NDc1LWE3N2MtMDUzNmUwYzY1MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGH73MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADP9W+ZBpZNRrQ6w/rs9BRtTQUhZb4VEjaFEyFmhnE2ZKQa9sGZ9deFb
wfINFp8rS7ISMIp5oQqf20V0ICrL5q3iP/i/8he/g7LXjoknf67L1oP8SWydMBvO
+nREhyxXAJMzcSlRdbEHkYbVTW2TgJep9JviPWNMj/qPvUGPT4/EkPndrJe35MRD
OGMTfElcvqNad04q1Q/pRQrLH/40NBkJ8hPwU/wwKMu5Zx/cw//eY6ZT9GD+p7f0
p8xC3y2IwcTPCWty61BW0Eviwr4EsnnnRNJinyIo+wClZsr7PYMC5rO1ttQFc2BR
oDVM+7E1dls63lNvCUzsZvnugK5vHrA=
-----END CERTIFICATE-----
Generated at Sun Dec 22 03:52:07 2024 by rpki-client on console-ams.rpki-client.org