Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa
File:                     2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa (raw, json)
Hash identifier:          BcZK8V9/qcfZMw2ezDG9qW0vDFeATeggVHywHjE3icQ=
Subject key identifier:   84:E6:0B:75:BB:57:84:97:F8:0D:68:F7:17:90:AF:97:68:ED:4D:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9B8BAE132938334E4C5A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        24.12.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:8b:ae:13:29:38:33:4e:4c:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=de4f6b6d-4a0c-4508-ab97-0a6c4beb3218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:44:85:82:4a:e8:3e:ef:43:8c:b6:e1:0d:
                    64:63:d5:df:26:dc:99:ae:c6:e2:fd:97:39:8a:fa:
                    df:4a:9c:52:15:d1:ac:5d:14:b5:c2:0d:00:00:7f:
                    bf:81:7f:f3:55:67:78:cd:b0:d9:c7:07:ab:55:86:
                    75:ca:c6:96:bd:b0:55:2c:d9:74:37:2f:6f:d8:7a:
                    0a:e3:3d:a8:4b:f0:00:13:ae:23:c2:48:97:bd:d5:
                    61:65:67:04:46:2c:c3:25:ab:12:9d:ba:5d:10:1f:
                    eb:94:5b:c4:7e:a3:db:d3:c6:56:40:62:bc:fa:5d:
                    cc:58:d0:85:19:e5:0d:75:19:da:b1:ca:a0:ed:f8:
                    1e:48:7b:de:6f:68:a6:62:83:04:dd:33:60:51:47:
                    f4:43:fa:a1:87:c0:2b:48:c0:9a:e9:83:a6:8a:d4:
                    4f:c8:68:4f:20:9c:05:82:b3:07:8f:8c:8b:74:d8:
                    8a:d7:68:cf:c9:65:0a:a4:2c:13:19:10:76:48:bc:
                    40:96:40:68:ab:92:f9:08:1e:00:9a:4b:11:34:95:
                    14:fa:68:5f:ba:21:04:4c:d2:8a:32:cc:2a:dc:69:
                    9d:97:24:a3:47:f9:bc:7f:6b:83:29:aa:03:6b:84:
                    7c:85:61:1e:92:db:f4:44:de:4f:57:7e:16:64:6c:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E6:0B:75:BB:57:84:97:F8:0D:68:F7:17:90:AF:97:68:ED:4D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cbf91e7-5fc3-3875-935a-28214d1f5a9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.12.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:22:69:50:28:90:23:0e:ff:1e:14:78:f6:c9:88:2d:f8:31:
         ec:f0:9b:92:72:01:ce:8a:97:55:66:5c:37:c6:cf:cb:8c:37:
         c2:4c:e8:fa:19:ad:48:95:ee:cf:2f:df:fa:bf:8d:24:fb:a2:
         14:e7:b0:06:11:3a:43:0d:76:0d:26:6d:2e:3c:ee:c0:01:12:
         d1:50:f8:7f:79:51:f5:8c:1b:92:9e:5c:5c:b3:5b:7d:bf:80:
         ba:c4:ac:b5:29:90:f4:0e:a9:bd:7c:72:df:3a:73:2f:81:be:
         cd:62:2d:88:11:01:73:89:ca:fe:c7:44:a4:d6:ab:ef:d2:ea:
         ae:c8:0b:e6:46:a3:a7:e3:ea:77:c1:d3:27:15:61:b1:02:5a:
         5a:a2:ef:8e:a3:88:60:22:16:d5:90:6a:61:44:db:49:6f:48:
         be:52:57:89:f5:68:d2:db:22:1c:95:83:61:af:b8:7c:57:8f:
         11:b8:a5:0f:6a:f1:3c:b6:dc:aa:12:5b:e0:c0:ac:81:05:5f:
         d7:20:f1:53:88:c5:ee:f4:41:bd:6d:f4:f8:9e:5c:2b:32:ba:
         69:90:05:a7:b4:ff:b4:19:69:6b:7b:87:a2:cb:2b:b9:f0:7c:
         8d:fa:4d:4a:27:c8:2a:bc:97:80:56:4f:bf:53:83:28:43:aa:
         b9:77:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:04:25 2024 by rpki-client on console-fra.rpki-client.org