Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386b8dd4-49c1-3753-838a-48db4fdba543.roa
File:                     386b8dd4-49c1-3753-838a-48db4fdba543.roa (raw, json)
Hash identifier:          UHcTt13SIaqBSSYy7LX6tdXq350qierF1O3Op62uVIw=
Subject key identifier:   5F:8D:8A:E7:C6:E0:42:93:36:45:F8:69:1A:30:75:F4:92:A6:22:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C670991ED5FF0035E63300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386b8dd4-49c1-3753-838a-48db4fdba543.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.91.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:70:99:1e:d5:ff:00:35:e6:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=9ea6482e-fa60-4f09-ac79-7cfafce3bb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:31:d4:53:30:15:7f:dc:af:39:23:37:f5:
                    b4:f3:85:3a:da:76:c8:2a:2d:b9:ec:09:64:96:b7:
                    e5:2d:a0:de:c9:ba:bd:e1:8f:d5:e9:e9:c3:70:2b:
                    dc:fa:31:31:98:e5:bf:1e:45:a0:ca:b8:fd:43:0a:
                    0d:3c:6c:70:9b:d8:8f:ed:4d:f0:d4:e8:b4:70:03:
                    2e:9b:de:d4:ea:f0:08:c8:2d:f3:7a:a2:25:c9:c2:
                    5d:2e:2c:4e:e2:d1:5d:1d:a5:c7:b8:dc:76:f8:0b:
                    86:29:1e:a0:a5:80:cf:7b:4f:cc:4c:9d:1f:32:f5:
                    65:eb:73:32:03:12:65:f8:40:ed:74:ca:2e:2f:75:
                    03:48:72:e7:ec:20:9f:04:f8:e4:79:9a:ea:fa:f4:
                    9e:36:b5:bf:07:2d:67:41:f5:c0:06:58:81:49:73:
                    6e:63:86:6d:ca:40:00:a6:77:a1:32:52:b0:9f:11:
                    0b:39:83:08:8b:a6:c9:7d:8f:27:9a:63:f2:bc:e8:
                    09:1e:ec:04:71:c5:20:e7:c3:ca:9a:4a:00:e6:45:
                    1c:10:63:38:bf:65:cf:63:f7:4f:3e:64:97:ea:22:
                    fa:75:86:fd:02:f8:27:58:28:65:4b:ef:37:91:55:
                    ff:f7:3b:b0:56:8f:7e:43:f6:24:66:2d:33:0f:fa:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:8A:E7:C6:E0:42:93:36:45:F8:69:1A:30:75:F4:92:A6:22:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386b8dd4-49c1-3753-838a-48db4fdba543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:cb:e1:34:31:d3:70:12:85:fb:14:65:fd:7d:ff:db:6a:fb:
         8a:78:d8:d1:93:30:b6:6c:e5:6c:55:02:79:3c:1c:0e:0c:67:
         87:30:24:60:c2:2d:0c:5b:81:dc:66:61:50:85:2a:92:a1:ad:
         d1:3d:64:ee:5c:43:d6:b0:85:a0:89:6d:cd:ce:d7:b3:36:04:
         4f:34:42:8a:da:6f:ee:36:21:56:89:95:43:7e:6a:48:22:cb:
         ae:cd:2c:95:c7:87:84:fa:af:1b:57:24:41:2e:82:38:c9:e7:
         64:d2:b1:e5:c2:c7:94:6e:f0:fd:46:70:45:cf:e1:1e:c9:22:
         0c:0d:fd:45:1c:c8:27:9f:cc:9f:41:15:52:f4:34:79:c1:d1:
         00:fd:f5:36:e1:12:c9:dc:28:85:83:65:47:f7:14:46:38:ec:
         31:ad:a3:70:2b:55:e0:b5:ef:8f:36:b4:09:4c:45:53:23:f0:
         8a:d3:72:c9:24:c1:6e:c5:4c:7f:95:57:99:4c:1e:54:e2:35:
         86:99:01:24:f6:93:b3:f2:8d:31:a0:4b:6d:a5:51:94:21:87:
         f1:b0:ba:94:fd:be:81:0c:71:ac:22:6a:0b:7e:8f:08:92:da:
         56:2a:3d:73:12:d4:16:db:f6:10:4a:7d:8c:81:80:90:fb:db:
         1e:e2:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:22:31 2024 by rpki-client on console-fra.rpki-client.org