Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48dade7b-dc6e-3ba4-b9b8-f15ffbe4a150.roa
File:                     48dade7b-dc6e-3ba4-b9b8-f15ffbe4a150.roa (raw, json)
Hash identifier:          a//Lmn9TAP/+kuzJuJF0Ne8EdskUW87h4zVBtEooL58=
Subject key identifier:   67:BA:17:45:10:AF:AA:56:0A:A8:53:47:86:F3:30:96:F2:26:C7:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88D21F0E423D436EABD4A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48dade7b-dc6e-3ba4-b9b8-f15ffbe4a150.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        24.10.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:d2:1f:0e:42:3d:43:6e:ab:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=ef2745d8-ea27-440c-aa83-345c7e33bcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:f8:28:b5:79:78:44:75:eb:42:80:64:4e:
                    5e:f7:01:1a:a4:2d:d6:da:57:69:40:53:ce:12:2e:
                    f9:97:e6:63:eb:6d:c1:5a:a1:a6:29:b2:5d:6c:2f:
                    c2:20:26:28:7b:a5:c2:4d:8c:ea:f3:01:42:c1:26:
                    f3:a8:68:6c:6d:00:f3:4b:5a:90:bd:9d:7c:92:23:
                    8f:74:9d:5e:85:da:21:d8:28:89:c8:68:f9:86:55:
                    de:c5:68:f1:97:05:43:cf:c4:14:4c:19:d8:a4:f3:
                    6e:4a:fb:b2:27:22:25:26:82:4d:b8:29:75:62:e8:
                    c0:19:a3:25:b4:f5:a2:fd:73:c1:d1:47:d8:e0:93:
                    1e:af:25:13:11:c6:9b:ac:47:8b:3e:9e:ae:a1:12:
                    40:32:5d:62:05:fa:ef:ab:70:39:09:23:be:ac:64:
                    5c:c3:d5:cb:4d:48:55:30:59:ec:85:a0:e2:0f:ae:
                    7c:6f:21:0e:c4:9d:1d:04:35:b9:1d:fd:08:5b:b6:
                    ea:4a:b1:85:f9:20:93:32:57:99:d4:7a:61:2d:84:
                    46:0f:22:1f:2d:ca:1e:40:9d:4c:2f:f0:0b:86:e3:
                    11:21:34:0e:0f:cb:7b:8d:5a:08:15:e0:00:4c:be:
                    d3:7c:9b:6b:e0:17:21:29:0f:f0:e4:4c:2c:7f:fe:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BA:17:45:10:AF:AA:56:0A:A8:53:47:86:F3:30:96:F2:26:C7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48dade7b-dc6e-3ba4-b9b8-f15ffbe4a150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.10.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:16:ff:27:1a:14:74:4d:75:0b:53:8e:68:5b:b7:c5:0c:3a:
         9b:28:6c:d1:46:64:12:eb:83:b8:33:4c:f8:3f:b4:35:e5:29:
         49:17:c2:1c:9f:5e:92:71:d4:c5:3f:97:33:3a:47:c1:11:c0:
         9f:4e:a2:e4:81:53:ff:bb:e3:e9:91:98:b5:d7:46:26:6c:15:
         57:fb:88:67:e7:54:f3:63:68:36:3b:dd:c2:91:d2:b9:8a:04:
         5d:9d:f8:b6:bc:e0:56:02:1f:0d:f4:81:eb:d3:75:40:24:93:
         6d:86:1a:32:47:79:06:12:41:61:85:51:24:ca:5d:3f:6d:94:
         24:7b:bb:58:dd:db:bc:c8:d4:d1:f0:f9:ef:b3:67:b0:46:54:
         f4:c1:ed:4b:f6:47:b0:9f:c4:fd:49:9a:94:ac:a8:ab:79:48:
         d8:51:64:ca:5e:da:cb:c7:44:13:f4:2e:b1:8e:00:c6:b9:87:
         6d:bf:66:ad:4c:be:73:fe:a2:1f:33:7b:7a:44:e8:49:f2:54:
         46:67:64:72:06:54:a9:d9:4e:53:23:1f:fa:b6:0a:8f:38:25:
         9d:ae:70:43:eb:58:44:12:67:00:ba:ce:62:88:cc:66:a7:94:
         be:fa:a9:c3:75:77:d3:08:8b:54:1b:dc:75:e7:e5:8a:7a:b5:
         82:45:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:27:16 2024 by rpki-client on console-fra.rpki-client.org