Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cadfc17-4cd4-3b2e-a690-319a83a6a99a.roa
File:                     4cadfc17-4cd4-3b2e-a690-319a83a6a99a.roa (raw, json)
Hash identifier:          FCgl0kYbPbAar86UGBjh2C/jSQ6F0AOYRIHtSLAjKTs=
Subject key identifier:   71:BE:92:DD:01:2E:0C:26:DB:0B:62:FA:AF:8B:A5:48:34:DB:7F:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C5D72398BE6029D3331500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cadfc17-4cd4-3b2e-a690-319a83a6a99a.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        24.20.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c5:d7:23:98:be:60:29:d3:33:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2e7c535d-247b-4b19-8dba-da5f21ec91d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0e:18:e8:dd:f7:d0:6a:4a:a0:19:ee:45:a3:
                    95:5f:a3:c6:b2:5f:8d:3e:d0:a1:41:3c:f8:ab:63:
                    a2:c3:cd:5c:3e:a0:b3:66:25:df:48:de:22:2f:b5:
                    b8:81:eb:17:d2:4b:b0:1f:65:ed:87:b0:e5:d5:9f:
                    7f:26:4d:b9:55:1a:6d:a0:a5:a2:b6:81:d9:1b:d0:
                    b5:33:a7:ad:d4:36:bc:57:92:2a:c4:99:f4:00:32:
                    80:6c:1c:ef:61:08:25:65:bf:73:5e:87:57:b1:9e:
                    63:3e:3d:68:ca:ad:27:c8:44:de:2a:d4:72:14:2b:
                    9f:5f:e2:40:75:1d:76:48:4e:00:11:cf:62:44:40:
                    8c:23:79:0a:a6:31:1b:70:c5:b8:7b:59:b1:9d:8b:
                    36:0d:18:42:e7:c4:a6:da:66:a9:86:2f:2f:6d:32:
                    f8:55:cd:3c:34:44:52:6d:5d:1d:e9:13:05:91:3b:
                    de:96:4b:01:8d:c4:16:9a:b8:5a:e9:80:0c:f1:5a:
                    a2:12:f0:55:0f:db:d7:7a:d1:71:e4:ea:bd:9c:43:
                    03:f2:14:65:d3:fd:b3:dd:4f:7b:45:d6:ac:e8:12:
                    82:f2:fe:87:b8:12:77:f6:18:19:f4:9e:70:dd:fa:
                    fc:b9:23:59:dd:46:7f:08:8f:8a:f9:c6:1d:96:7c:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BE:92:DD:01:2E:0C:26:DB:0B:62:FA:AF:8B:A5:48:34:DB:7F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cadfc17-4cd4-3b2e-a690-319a83a6a99a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.20.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:48:61:eb:09:68:0f:57:d8:b0:dc:07:73:aa:d5:9a:57:79:
         bc:51:27:4e:a1:e3:09:2a:61:d1:f6:f4:39:66:b3:bc:b9:a0:
         04:37:43:74:7e:6b:f8:37:e6:1f:96:b6:42:a7:98:81:7a:77:
         eb:2f:5a:aa:c3:59:7d:a9:53:ce:17:e7:ea:49:fe:71:f3:20:
         4e:e1:81:eb:a9:9b:ab:0a:e6:7b:36:af:3a:5e:fd:e4:e7:0f:
         2f:d4:d7:8e:26:79:0a:40:ad:a9:6d:e3:3f:85:cd:d0:c6:27:
         1f:bf:a2:57:95:53:5c:b0:aa:c8:c2:5d:d6:18:ef:61:a0:73:
         b4:1f:a8:4a:bd:f6:01:f9:64:a7:66:80:dc:bb:89:80:15:e6:
         ea:fd:9a:5e:97:29:1a:3f:e0:5e:b3:b0:74:97:44:be:d4:7e:
         7e:49:17:39:fe:1e:77:0d:5c:f6:2b:33:0c:85:d3:67:1f:a6:
         24:c1:11:96:32:38:c6:f8:34:53:78:57:a8:f9:21:76:c6:a0:
         35:f9:c9:e4:4f:35:69:b8:9b:4f:ce:c0:42:ef:5f:ed:d2:e8:
         fc:4b:9a:50:81:db:23:c3:2d:b3:2f:45:0d:37:6f:31:8f:ee:
         55:8b:10:70:54:03:fc:45:a5:02:80:54:45:b5:6b:07:f8:84:
         8d:4b:88:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:24:16 2024 by rpki-client on console-fra.rpki-client.org