Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a74e05-70dc-3082-b4d8-a2b77901141e.roa
File:                     35a74e05-70dc-3082-b4d8-a2b77901141e.roa (raw, json)
Hash identifier:          tlVz15Tg5RmovkfaaQRsyY6Xxqapg0/QmfTBAUNM4nc=
Subject key identifier:   95:FB:EE:CD:AC:A5:A5:65:CB:CF:ED:99:1F:EE:2C:65:EB:8C:D9:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CF875FDC04A39D2EB3C60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a74e05-70dc-3082-b4d8-a2b77901141e.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        24.5.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:f8:75:fd:c0:4a:39:d2:eb:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=57334ce4-dac8-491a-b90d-4a793ccc6f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ed:d1:43:a4:8d:4b:21:fd:a9:dc:c4:78:d4:
                    be:af:3b:75:79:66:32:5b:99:35:de:ba:01:72:51:
                    e4:07:61:89:10:d8:6d:74:84:04:08:e6:05:f4:f4:
                    3a:40:6e:26:1e:60:52:75:91:38:25:57:f2:61:a6:
                    37:72:09:19:30:cf:a8:88:c7:59:41:e4:5c:30:68:
                    cf:64:8a:1b:54:18:d9:23:b2:2b:ef:9c:7f:b6:e9:
                    bc:02:6e:53:50:67:97:db:6f:f3:b6:42:87:81:35:
                    2b:14:d8:2d:8d:d8:17:a3:d2:3b:6a:14:29:1c:0e:
                    19:62:29:5f:4d:93:be:e5:b9:ad:91:a2:73:15:c2:
                    88:3f:94:65:71:82:ce:2e:e3:8a:28:23:ca:2a:a6:
                    32:e1:fa:fb:5c:72:91:f5:e6:18:09:31:75:c1:30:
                    be:ca:e9:3c:dd:04:5b:43:d8:5d:69:1f:66:95:6b:
                    fc:a5:04:04:db:21:4a:b1:9e:c6:eb:ef:69:6d:8f:
                    66:1a:23:d7:f8:bc:84:af:a7:08:7a:d8:96:91:7c:
                    df:02:14:d9:47:5d:d5:97:72:89:76:e3:43:c2:0c:
                    69:1d:44:35:02:d4:f7:e2:87:c6:76:b6:9c:05:35:
                    c9:36:45:a4:fa:97:97:70:5a:c5:2f:93:40:6c:a3:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FB:EE:CD:AC:A5:A5:65:CB:CF:ED:99:1F:EE:2C:65:EB:8C:D9:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a74e05-70dc-3082-b4d8-a2b77901141e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:7f:b3:56:96:a8:27:35:44:ec:1c:33:9a:ec:e1:4d:a2:
         bd:a6:00:92:9e:25:d4:ac:05:50:9a:c9:52:13:ea:09:d6:6d:
         b7:09:e5:05:8d:9d:b3:1d:af:91:9e:c2:40:a4:d3:67:4b:d0:
         e1:15:54:eb:76:d2:16:4d:3e:68:11:48:99:e7:6e:f4:a0:69:
         16:08:1a:19:af:02:83:81:1d:8a:12:19:1f:b7:a1:87:56:36:
         30:be:86:ef:58:de:1f:a6:a9:9b:f3:32:2b:01:d8:01:a0:10:
         6b:ff:7f:07:dc:84:1c:6d:17:28:74:05:d9:ef:09:6d:a9:d9:
         3c:ac:25:8e:21:91:3d:43:75:9c:68:5a:1f:01:ea:87:44:97:
         80:56:6d:a7:9f:b2:36:5f:69:55:76:44:08:28:8e:81:dc:33:
         e7:70:72:65:d0:09:7b:33:43:ed:7c:04:6e:3e:dd:8d:7b:6a:
         28:65:d9:69:87:56:88:5b:e3:d0:22:d9:5e:82:34:4e:7c:ca:
         bd:6c:bf:10:6c:b6:37:76:9e:82:24:41:85:b9:f5:c6:01:3d:
         28:51:b0:71:a1:9b:79:9e:f8:41:a2:26:06:be:57:f5:ac:73:
         db:5d:30:b2:a7:34:9b:27:87:1a:f0:14:a3:60:64:bb:44:76:
         69:1c:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:22:18 2024 by rpki-client on console-fra.rpki-client.org