Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fa5db8-2dce-3eaa-a0f8-9c299636bd83.roa
File:                     29fa5db8-2dce-3eaa-a0f8-9c299636bd83.roa (raw, json)
Hash identifier:          LVits6HzBp2BBROxbZmwpX1mGhudxCub/50iWj0MuiM=
Subject key identifier:   5C:A8:ED:0A:1A:7D:BE:AF:A0:2B:C6:C6:9F:14:91:F6:3B:D9:A3:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C65D30385A5FE956C15F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fa5db8-2dce-3eaa-a0f8-9c299636bd83.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.34.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:5d:30:38:5a:5f:e9:56:c1:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=f2118b11-fc22-48e6-bdf3-6d3988cd98a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:a9:2c:8a:9f:68:0b:47:2a:e2:75:f7:cb:
                    ed:7f:e2:18:01:f8:ea:91:89:df:cf:53:0d:82:06:
                    85:31:e2:b2:c5:b4:e1:7e:23:e0:82:68:60:53:3f:
                    1e:8a:3b:3b:b4:7c:97:c4:6f:c2:77:e3:1e:8a:3f:
                    db:cf:4e:3a:80:4a:0b:a9:55:a6:7f:1f:d7:c8:cb:
                    46:d1:83:5d:37:9d:ef:73:ba:36:73:74:dd:e2:13:
                    8a:9e:45:c7:00:d8:ae:94:97:d2:77:a4:62:6f:9a:
                    7a:7b:7b:a7:34:fc:72:44:2e:f6:9e:41:88:1a:23:
                    b6:40:63:2d:40:b1:45:5a:8f:46:f2:19:08:13:bf:
                    1d:62:3b:93:f7:a8:34:9d:d1:59:00:f5:7a:43:59:
                    a1:6a:b9:28:66:f4:21:fd:2c:88:b5:62:90:39:92:
                    98:32:6a:73:39:65:35:fb:1c:fb:4d:2f:68:b1:6d:
                    c9:54:44:94:68:bb:22:59:58:1c:97:5b:ad:d7:08:
                    b7:ca:47:79:10:10:81:e9:57:e3:20:e5:85:06:df:
                    c4:ea:6c:93:c8:45:19:f6:b4:de:a1:58:43:69:f7:
                    ff:fc:1f:40:54:61:86:a1:87:72:97:66:e8:6b:ce:
                    c8:da:48:fb:a0:26:2e:31:ae:74:7c:fc:3c:98:e0:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A8:ED:0A:1A:7D:BE:AF:A0:2B:C6:C6:9F:14:91:F6:3B:D9:A3:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fa5db8-2dce-3eaa-a0f8-9c299636bd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:a5:64:c1:93:ee:77:9e:7e:2d:f5:1d:1f:4f:bb:24:54:
         dc:de:f7:36:03:9b:7a:70:7a:bc:08:6f:50:9a:05:04:bf:23:
         e8:46:a5:18:97:cd:d2:0e:b9:06:a2:25:37:f4:a8:50:be:fd:
         8c:54:06:08:7b:e8:4b:9b:01:cd:99:51:5a:c1:ed:b1:34:bd:
         8a:21:05:2d:79:75:45:d1:6f:bb:11:0b:85:ae:f3:6e:4f:ed:
         8e:e5:33:9c:3c:b8:3b:9d:98:a2:76:69:c3:b8:5a:a7:72:7b:
         62:78:87:59:c5:55:43:fa:b8:65:d8:05:9a:31:ae:04:54:ab:
         e3:b1:6d:be:bb:7e:08:f7:8e:e1:4c:3d:04:37:05:da:2c:62:
         f5:3c:47:89:f6:d0:8c:a3:59:7a:d4:db:4e:c9:9e:79:6d:a0:
         5b:96:ff:2e:e9:39:c8:ae:3a:d2:8d:bc:5c:66:6b:33:69:19:
         bf:6a:3a:c4:5e:cc:f9:72:34:15:0e:3a:d1:28:d8:16:79:b4:
         35:96:f5:4f:d3:98:67:a4:e2:79:db:67:51:5d:3c:77:22:f4:
         35:77:88:28:c2:e2:ad:ac:13:ff:38:c8:69:a3:d8:b9:07:e1:
         3f:6d:95:5e:39:1b:59:7a:79:c4:a5:07:6b:0f:87:ff:f6:bb:
         8b:00:02:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:56:25 2024 by rpki-client on console-ams.rpki-client.org