Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f5c487-b454-3ffe-9aed-6bd3c8215d29.roa
File:                     21f5c487-b454-3ffe-9aed-6bd3c8215d29.roa (raw, json)
Hash identifier:          wiNiLg3NETvfy7R1yCQwJjVrWf/wm2/7jYiwBCG855w=
Subject key identifier:   12:16:22:C1:BA:59:CA:9F:33:51:CD:EF:2C:09:E1:9C:22:6B:1C:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CF81DA7804F533CF50300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f5c487-b454-3ffe-9aed-6bd3c8215d29.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        24.5.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:f8:1d:a7:80:4f:53:3c:f5:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ad243481-beaa-4d49-8626-edf0daf2dc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:9a:67:b2:91:73:47:8d:2d:e0:08:e1:c6:
                    cb:f5:a9:59:68:44:ce:5b:e2:a1:c8:c1:ba:0f:e2:
                    31:3f:05:18:c2:90:0a:11:a9:8b:e9:47:be:e0:6c:
                    bd:8b:f1:42:51:03:3a:a6:98:13:fd:6a:0e:da:b5:
                    0a:9d:d9:a5:e4:3d:41:df:d1:3d:74:45:7d:90:c4:
                    88:86:7f:74:8c:11:40:3c:22:e0:c6:ad:e6:be:08:
                    ba:65:a2:6f:1d:7a:d5:56:4a:fa:1f:98:78:e8:80:
                    d8:b7:0c:ed:4f:8b:44:e2:ed:0b:dc:8e:9c:bc:84:
                    1a:38:e8:50:13:9d:4e:c7:a3:72:57:45:9f:cc:70:
                    1c:1a:e0:29:d0:cb:e4:bf:7b:68:d0:e2:88:95:04:
                    34:0b:ab:43:44:92:9c:d0:bb:c7:ef:b0:c9:11:c3:
                    27:e4:d4:d3:f5:cd:cf:9a:24:e4:e1:17:a7:9a:f0:
                    ce:97:9e:3c:93:7c:da:12:c0:20:bd:51:e2:e3:5b:
                    87:39:d7:05:d7:70:c3:f0:96:28:86:8c:eb:fe:f8:
                    6f:04:7b:4c:08:46:76:31:6f:ed:59:98:f7:c2:df:
                    7e:fc:ac:78:20:f0:24:2b:af:d3:22:58:62:8b:5a:
                    69:dc:0a:4c:b2:91:cc:a2:0f:d8:9f:56:8a:be:66:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:16:22:C1:BA:59:CA:9F:33:51:CD:EF:2C:09:E1:9C:22:6B:1C:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f5c487-b454-3ffe-9aed-6bd3c8215d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:42:0e:70:0f:15:1b:62:bb:22:cc:98:a3:08:3a:70:bc:2e:
         4b:b5:32:4a:bd:2d:f0:20:37:9b:52:25:49:0f:fb:1b:18:d2:
         22:89:87:4a:a5:42:a6:22:48:21:7b:89:a0:0d:f8:2c:6c:0b:
         71:b2:bb:a4:eb:95:69:49:02:ea:68:4d:b4:c0:18:0c:a5:83:
         a5:28:ce:23:3a:d1:c2:6f:06:9a:44:40:dc:41:b8:4f:b8:f2:
         2d:b7:2d:4a:1b:fc:72:4b:be:83:18:f7:c7:7a:b3:1a:71:4e:
         1c:da:92:a2:ba:b6:5c:95:08:67:0f:40:f3:90:9c:c8:a9:08:
         91:25:8d:69:a7:06:28:3f:d3:cc:f6:34:c7:79:d8:f7:c1:fa:
         23:66:dc:ad:83:75:a1:12:6a:42:82:43:54:28:01:26:86:d9:
         de:7b:d1:d8:12:2d:cd:41:fd:3a:ed:2f:82:ee:b7:b3:be:09:
         6a:36:9c:ae:76:a3:90:d6:5a:49:79:a1:7c:98:6e:97:70:41:
         fa:6e:5c:70:a3:80:c2:8d:cc:60:f9:b3:60:4a:e3:10:4a:62:
         d3:4d:b4:77:8d:21:56:08:b2:4c:af:e9:7a:62:84:18:80:81:
         cd:d9:ff:51:48:38:7f:bd:48:74:8f:6d:db:38:b6:73:97:c9:
         b8:c1:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:59 2024 by rpki-client on console-ams.rpki-client.org