Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14169c1d-0976-33f4-a6d2-e8baff7f2c54.roa
File:                     14169c1d-0976-33f4-a6d2-e8baff7f2c54.roa (raw, json)
Hash identifier:          /k+o8g1rPzdVpEPmcxy9b5uxx1c3FDgS/syTi1I9xLg=
Subject key identifier:   9F:7C:5B:34:28:79:19:6E:85:01:46:71:BE:AD:FE:58:7C:2B:6D:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B35E1AA8AFF804FBCD500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14169c1d-0976-33f4-a6d2-e8baff7f2c54.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        76.24.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:35:e1:aa:8a:ff:80:4f:bc:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=f527ad51-ca0f-4a3b-bc59-2f26ec9a75e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:cc:bd:ee:54:d0:14:89:2f:0d:46:d6:4d:
                    a3:44:4a:88:7f:8e:3d:5d:ac:54:c6:64:4d:18:4f:
                    ae:b9:1a:0c:ae:10:60:df:b1:01:5b:00:db:f8:57:
                    94:28:f5:57:79:eb:84:ff:19:8e:6c:69:e4:52:72:
                    b6:2a:f0:65:e1:41:7c:47:fb:c2:1c:b5:3e:e4:3f:
                    f8:87:e0:b0:f6:bf:9c:3d:bb:b3:14:1a:5d:e8:00:
                    44:8e:a1:3b:a5:87:50:e4:02:04:b9:42:c6:f3:58:
                    c0:16:aa:d1:77:81:74:45:1a:e2:ae:55:e0:ac:9c:
                    36:c3:42:8b:8d:2a:ed:e1:e5:6e:8a:db:17:34:5b:
                    82:e8:d9:19:5d:8b:4e:4d:af:12:66:1f:50:3a:d8:
                    aa:c6:de:9c:d6:50:c8:7b:be:0a:20:e8:8d:4d:a4:
                    9f:46:14:d9:5e:5f:72:ff:d1:5f:0e:d7:02:5a:78:
                    25:81:2a:87:bc:b1:27:a8:f3:7f:08:b8:eb:aa:d9:
                    ae:f8:a1:e6:ee:c5:93:4c:fc:b0:3c:12:4c:0c:ea:
                    97:19:e1:45:60:1c:7d:9a:d9:fe:32:e6:8b:60:9e:
                    1d:7b:cb:34:f6:9a:d9:45:17:c4:05:0b:9a:92:bc:
                    f8:fa:94:9b:88:5d:10:68:ee:ee:6f:6d:11:2b:16:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:5B:34:28:79:19:6E:85:01:46:71:BE:AD:FE:58:7C:2B:6D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14169c1d-0976-33f4-a6d2-e8baff7f2c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.24.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:3e:81:a1:98:0a:73:74:1b:92:b3:96:fe:df:8b:e6:a4:
         4a:4e:ba:84:52:49:ab:42:c8:78:4a:85:18:5e:c2:87:37:e7:
         87:5a:69:6f:cd:dd:4e:4e:80:87:f3:a6:c8:05:22:ff:26:a0:
         80:a4:fa:84:d0:76:b6:3e:50:c4:3d:c5:65:2a:ee:27:8e:a3:
         4c:95:9d:f1:d3:0f:74:ea:12:46:bd:45:a4:bf:a8:4a:78:c1:
         01:a0:a5:53:00:ba:37:5e:b0:19:9d:cc:7c:04:44:d8:92:3c:
         6b:cb:20:1c:ef:37:25:44:19:6a:06:b4:e6:9c:43:5a:0c:42:
         be:4d:80:0f:a2:05:18:07:46:ec:0d:35:da:c8:c1:14:2f:99:
         38:4a:a0:f6:7e:b9:b5:a9:69:bb:f1:8e:ae:e0:e2:c1:63:42:
         fb:22:22:42:a5:1b:1c:3c:92:15:da:af:70:6b:5e:d9:87:0e:
         68:be:b5:2b:74:dd:46:d9:a3:16:48:ae:46:e9:0a:e0:af:92:
         34:f2:4b:a5:31:a7:24:8d:e7:f3:7d:f8:82:a9:66:47:49:4a:
         e8:80:38:b6:03:3e:8c:e0:90:e3:2c:5c:c1:81:59:0a:28:5b:
         bd:06:4b:4f:c9:59:b7:07:85:c5:45:88:fc:68:b7:a4:6a:dc:
         66:78:be:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:50:28 2025 by rpki-client