Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e901e58-06c0-3a1a-a8fa-aa55080b17fe.roa
File:                     2e901e58-06c0-3a1a-a8fa-aa55080b17fe.roa (raw, json)
Hash identifier:          o6yAvD4aq3GWU4ycU6Ufx75zaDpcNv5IyhmN/0Mkmsw=
Subject key identifier:   0A:6D:8B:57:7A:F6:80:E4:BA:C7:4B:BB:49:11:35:23:8B:9E:90:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88F59CAF4BD1ADE919E1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e901e58-06c0-3a1a-a8fa-aa55080b17fe.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        24.0.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:f5:9c:af:4b:d1:ad:e9:19:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=362d15a5-e62b-44d5-8a44-72b9f30e4b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:4e:43:f8:3b:6d:9d:92:c5:8d:76:3a:a1:
                    66:ca:67:0b:95:79:9c:94:fd:e3:9e:29:08:15:b0:
                    0e:e0:c2:4b:40:4a:f5:44:30:eb:b3:04:eb:ae:4d:
                    63:a8:cf:c5:5c:13:f6:5b:11:45:a9:f8:74:37:a1:
                    ae:6f:bb:92:d5:7c:48:43:03:6b:e9:91:d0:66:f7:
                    04:ea:56:84:5b:80:b9:9e:54:65:07:53:48:83:aa:
                    e1:c9:8e:1d:34:64:20:80:db:53:ba:e0:d5:7b:78:
                    80:28:70:8a:72:ff:ed:a7:27:90:8a:d0:d7:2d:81:
                    37:81:fe:c7:b0:09:d6:a0:7d:84:c5:9a:10:a9:1a:
                    49:60:b5:7f:e4:68:a3:b1:8f:9f:4e:cf:6c:6d:cd:
                    46:d2:95:c9:20:13:47:ae:91:47:ea:9d:0a:7f:bc:
                    b9:c3:8d:80:f2:83:ba:7a:b5:c3:81:9f:df:b8:d3:
                    50:7b:c9:8f:91:bb:a4:fd:f0:2f:58:0c:19:f8:87:
                    7c:6b:3d:b2:28:cc:26:3e:1f:9e:66:eb:af:77:a7:
                    80:47:7c:87:77:96:a6:81:36:7d:c0:6c:9e:e8:26:
                    0a:ac:98:c9:e2:5f:91:a6:6e:bd:12:7f:ab:05:e1:
                    25:de:56:e5:74:fc:6b:53:08:11:7f:ad:da:42:0b:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:8B:57:7A:F6:80:E4:BA:C7:4B:BB:49:11:35:23:8B:9E:90:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e901e58-06c0-3a1a-a8fa-aa55080b17fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:18:b7:8d:88:53:5a:d0:ef:79:70:fb:ed:85:a0:0f:a4:
         f9:b0:6e:fd:f0:41:dc:13:72:a3:b0:db:53:f1:ac:1f:87:44:
         20:a7:6f:58:4d:8f:1d:fc:db:23:4f:44:c8:8c:22:6d:59:06:
         29:b3:df:05:a1:f8:44:34:18:2c:e3:d0:d8:b9:fe:f9:12:01:
         26:59:ed:96:55:28:89:22:ff:b6:82:c0:01:d4:5b:6f:49:07:
         f1:2d:ad:17:89:c6:36:90:3a:5d:fd:cb:65:13:dc:b4:16:18:
         bf:df:cd:58:6d:62:d2:5e:ee:0b:74:c1:8b:09:d8:5c:ec:fa:
         a9:d2:a1:f2:cc:16:4a:65:fc:db:ff:b3:9f:f8:f4:62:65:53:
         6b:ce:45:5c:57:64:22:6f:d4:1f:87:9f:09:34:70:c7:09:82:
         30:5c:5c:76:61:55:11:ad:56:14:d4:1f:1d:a5:b3:7a:37:ef:
         8b:f0:01:88:6a:6f:f3:13:75:7b:68:d3:5c:e7:00:97:1f:3d:
         dd:5e:32:c2:ef:af:7c:b7:fe:8a:a9:00:eb:2c:81:07:70:96:
         37:00:6b:95:49:81:b4:35:1e:6e:17:68:0e:be:94:8b:c1:d8:
         7a:96:f4:1d:99:88:a2:84:a5:7a:61:50:10:2b:51:53:e7:75:
         30:8a:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:15:18 2024 by rpki-client on console-ams.rpki-client.org