Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa
File:                     40093bea-2ade-3806-9114-f2826ee55899.roa (raw, json)
Hash identifier:          ZL9b207/d8Px8ieER/3X+lwbrQtCOCSFWIxHJLn4Zbs=
Subject key identifier:   5F:19:00:89:E2:DC:85:97:DB:3A:AC:58:0F:2B:BA:9E:8A:92:FF:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF73C8C3ED0D708C47C9600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     20214
IP address blocks:        23.24.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:3c:8c:3e:d0:d7:08:c4:7c:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=ffe02c84-bc5e-4c1f-8e0e-33596218cc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:f4:8c:ce:b5:75:74:62:2b:1d:fb:ba:5a:
                    50:a7:22:8c:7a:7d:ab:7b:b5:fe:22:85:67:a2:1e:
                    65:ed:7e:ea:0e:51:ab:ff:d3:83:40:aa:63:15:f1:
                    17:b7:62:2e:2b:f0:59:5c:b1:c4:3a:37:22:e9:35:
                    43:d0:78:78:86:c9:16:ce:d2:e4:2e:04:cd:12:73:
                    6f:f5:7e:b0:e9:45:c4:56:53:84:bc:a9:39:fe:92:
                    af:80:61:33:41:25:29:87:0d:a2:62:ba:28:91:cb:
                    85:4a:25:66:66:59:51:b4:fa:8e:64:9b:71:b7:fb:
                    3e:a8:1b:94:a2:9b:12:e9:31:0e:3b:f5:fb:de:f0:
                    45:07:d1:d1:85:b5:ea:8d:1f:14:cd:6f:8a:a6:1c:
                    02:f1:67:36:60:d6:d3:c5:eb:30:ab:ed:ef:06:6c:
                    bc:d2:81:13:b5:33:99:9c:26:ed:75:80:0d:36:1d:
                    10:bf:4f:08:2f:54:47:fa:ae:f5:52:df:17:8f:54:
                    ed:b2:9f:be:bf:17:f5:03:08:12:7a:da:62:86:05:
                    7f:f1:f9:3d:54:d5:a0:c6:17:66:29:ac:47:7d:b4:
                    3a:37:5a:f0:3f:07:6b:ab:b1:ed:24:61:25:0f:29:
                    d7:5a:53:ac:60:26:f0:cc:07:ce:d4:93:a5:1c:3d:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:00:89:E2:DC:85:97:DB:3A:AC:58:0F:2B:BA:9E:8A:92:FF:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.24.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:70:bf:1d:92:3d:ab:5a:ad:cc:7a:c2:4b:7f:fb:79:28:b7:
         de:97:30:9e:18:38:bf:82:f5:95:42:8e:9a:f3:6f:6e:37:70:
         8d:97:c7:1e:f4:9d:fb:a5:8f:e3:b6:c2:49:6f:55:14:5f:76:
         f5:fc:32:d7:72:7c:93:fb:ee:e3:fe:88:31:a9:b4:6c:c0:ac:
         cc:af:50:51:cc:41:d7:b2:94:92:75:5f:0a:77:e2:db:a7:12:
         80:48:7c:a2:a2:66:da:c4:83:4f:44:d7:ec:a5:42:3d:f0:25:
         d5:2f:68:37:b3:b6:4f:ae:51:19:70:88:dd:2b:db:40:ea:56:
         59:4b:ba:1c:4f:ac:4e:2b:c8:60:bb:d3:f1:50:c1:dd:df:a7:
         86:7d:c8:04:6b:a0:05:a2:62:b3:69:11:18:67:9f:00:b4:a4:
         1b:41:76:40:80:16:cf:4c:85:04:f6:59:18:a0:26:2a:a1:dc:
         e0:5a:49:72:a4:74:5a:a3:60:c9:e5:27:d9:18:f9:1f:f3:ed:
         fe:30:51:27:ec:d8:6e:05:22:60:98:e9:fb:82:0c:bb:09:8e:
         3b:19:1f:2a:f4:85:6d:9b:31:ce:19:88:e5:d4:38:bb:7d:81:
         19:e2:30:7e:86:ae:90:38:6a:52:71:0f:08:4f:e9:de:0e:c8:
         33:32:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:07:45 2024 by rpki-client on console-fra.rpki-client.org