Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ef51dfd-e938-39ff-9302-ab11bd02b97d.roa
File:                     4ef51dfd-e938-39ff-9302-ab11bd02b97d.roa (raw, json)
Hash identifier:          k78q/CPjUO7H/nQoh6U3TvbCjqYWGX1MxaFT8583bSc=
Subject key identifier:   7E:BA:0E:50:4B:8C:CB:FB:29:D3:08:7A:40:44:9F:91:1A:D2:B9:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC896F5A157BD0AF36126500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ef51dfd-e938-39ff-9302-ab11bd02b97d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        24.2.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:6f:5a:15:7b:d0:af:36:12:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=de504e22-dc5e-435b-ac79-38ee172da0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:be:61:26:2a:6a:95:c8:01:8d:03:5a:60:
                    58:8c:9d:2f:be:a4:61:c7:63:39:67:65:0d:d9:7a:
                    2d:73:11:88:f3:02:07:99:f6:ed:c8:54:ad:59:bc:
                    b7:df:31:71:b7:a5:ea:c9:06:d4:0c:ac:df:42:ea:
                    8c:67:30:46:02:4c:f3:88:d3:0e:87:ab:b8:9f:be:
                    fb:47:ed:b2:ac:5a:c8:2d:c3:34:1f:8d:33:14:5e:
                    f8:f7:57:ec:d6:fe:6b:11:ff:68:c1:73:89:de:91:
                    52:88:7b:7b:2d:81:32:f8:be:3c:2e:08:66:9b:9b:
                    10:8a:2c:c1:60:3c:9e:8b:f4:42:f7:08:0e:c3:f5:
                    61:e3:a8:e5:38:38:67:d4:26:12:42:f0:b4:36:87:
                    13:0a:14:68:6e:43:e0:80:d1:14:83:a9:19:5d:46:
                    54:d4:02:9a:18:1e:1e:f2:0f:e0:d2:1f:84:5a:21:
                    d9:fb:5e:da:df:38:af:eb:4a:d8:e6:fa:62:5e:2f:
                    1b:6b:7e:da:3e:ed:23:5f:a4:20:3a:bf:ab:03:85:
                    d5:a9:aa:98:20:68:0e:a6:9b:a8:29:9d:f5:bf:66:
                    91:55:6c:06:71:ad:34:ab:99:82:97:f6:3d:4a:f8:
                    55:49:d8:ed:cb:12:8e:92:0b:2c:76:00:25:55:91:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BA:0E:50:4B:8C:CB:FB:29:D3:08:7A:40:44:9F:91:1A:D2:B9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ef51dfd-e938-39ff-9302-ab11bd02b97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:a8:dd:fe:ef:19:7e:86:0d:24:b5:78:8d:fc:17:67:7b:b5:
         7c:59:f9:21:67:77:4f:da:11:c2:63:06:51:c0:3b:3a:4c:c4:
         3a:28:90:d9:92:fd:af:1a:68:5c:2f:62:75:da:cd:2c:a3:79:
         b7:d0:55:67:cf:38:7a:31:11:77:28:29:ef:5c:b5:92:26:46:
         ae:9b:fb:6b:1d:d4:9a:a6:9a:78:d9:0a:91:2b:e8:fe:22:14:
         42:1c:38:b4:b0:1b:4d:55:54:38:fe:41:17:a9:b4:5c:d4:b1:
         7d:89:3f:3c:46:14:5f:e3:7f:7d:6b:fa:70:62:71:b9:fc:e4:
         c0:46:92:91:a0:94:ca:3c:72:29:d5:c6:13:26:aa:37:ee:f4:
         63:0a:f2:10:73:c3:42:7a:b6:30:e3:4e:be:4c:3d:49:b1:ae:
         6a:30:79:03:23:38:3f:71:f1:6d:67:25:03:16:d1:9d:e7:32:
         9d:e0:e6:cc:11:75:de:59:a5:af:35:ee:c5:ff:81:16:7d:cb:
         eb:50:50:be:15:5c:8b:5a:d3:82:40:9f:64:12:53:f7:3d:6f:
         29:af:ef:92:04:f5:90:fd:f2:a5:ff:ff:79:9e:63:d3:56:ae:
         80:d4:b7:db:df:63:b3:ef:57:52:63:b4:38:4f:0b:09:4b:7b:
         23:08:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:38:42 2024 by rpki-client on console-fra.rpki-client.org