Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f984c24-7d9e-3191-9593-ef74cb006ec9.roa
File:                     4f984c24-7d9e-3191-9593-ef74cb006ec9.roa (raw, json)
Hash identifier:          /8mCIeKu1pedQjr/Pm9GBcMcHfXA4PugpDi8Rt8cL6w=
Subject key identifier:   03:50:30:CE:74:67:06:0C:A7:39:15:3A:0D:1D:67:58:19:C7:48:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476171719A3575AF2EB1D59B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f984c24-7d9e-3191-9593-ef74cb006ec9.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     33659
IP address blocks:        24.0.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:71:9a:35:75:af:2e:b1:d5:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=af70a84b-645b-445f-a1fd-db0796ef56d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:19:06:84:e0:dc:0f:e7:a3:d7:22:d8:93:
                    7c:54:a7:8f:fe:6b:ef:05:57:c5:fe:d7:b2:77:bd:
                    29:a4:fb:b5:30:4a:05:49:2b:a9:53:71:eb:30:e2:
                    46:4b:40:0a:3c:31:37:a6:b5:11:7e:9e:dc:39:28:
                    aa:7a:8c:64:0f:dd:7d:37:7a:b7:46:7d:aa:3c:3d:
                    1a:e3:7b:8b:71:8b:29:9e:11:c8:8e:a0:60:74:6e:
                    1c:ba:00:1f:0d:fa:37:6d:d5:40:21:c0:1e:5b:49:
                    4d:e3:db:e5:30:d6:b5:35:25:7d:78:a4:e7:e7:e8:
                    0b:9f:45:1a:77:6d:01:1f:fe:cf:85:3a:ed:e4:4b:
                    f2:c0:f8:1d:e1:cf:54:29:45:7f:b2:25:99:0b:6e:
                    68:04:b5:fd:40:fe:0a:80:ed:cb:a6:1f:03:ec:ff:
                    b3:5f:87:b8:24:e4:e2:d7:84:87:e1:4f:f4:9b:7b:
                    aa:2a:fe:a5:a2:5a:6c:a6:c9:03:e4:54:49:99:49:
                    ca:3c:98:77:4b:2b:35:31:7a:53:50:ef:22:1b:a8:
                    f0:43:3d:d6:17:a4:6d:1d:40:e4:30:61:1f:47:25:
                    31:e7:53:d6:1d:5d:34:2b:61:1e:5b:41:07:de:d2:
                    d2:7f:0f:40:b2:cf:94:3b:64:64:c6:63:7b:7b:fe:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:50:30:CE:74:67:06:0C:A7:39:15:3A:0D:1D:67:58:19:C7:48:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f984c24-7d9e-3191-9593-ef74cb006ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:54:5c:ec:42:f3:93:ed:c7:6c:bb:f8:af:07:36:b3:77:
         f2:86:9b:df:15:44:63:ad:e6:cb:b2:40:88:70:25:43:f6:e0:
         11:09:69:f8:a2:e0:40:21:a4:df:8e:6c:60:e2:14:ad:94:bf:
         db:2b:08:a4:0c:b2:72:79:da:03:c3:7e:48:60:df:ca:a5:fa:
         fe:4d:b5:42:ca:76:d4:aa:8c:fc:7f:d4:4b:04:4b:70:cd:31:
         07:28:1a:11:40:13:ad:b2:5d:af:27:02:c3:88:2e:be:c0:e8:
         e8:d2:46:a7:05:30:a4:44:8a:be:46:52:44:fe:b3:4d:69:7e:
         e7:61:a2:45:98:0d:89:32:ce:d5:fc:56:62:96:d1:35:51:52:
         f1:46:c2:c9:da:95:e7:36:f7:e7:4e:ad:d3:02:1b:ff:c3:52:
         d0:b4:6f:07:9c:00:96:fd:ab:84:a6:04:f0:a7:72:6f:59:45:
         69:3a:f7:08:30:91:4b:fc:74:56:06:af:84:f6:8a:05:33:42:
         45:cb:ac:20:d3:1e:2c:2b:85:e2:b7:5c:76:d6:c6:8c:df:e7:
         82:86:8c:df:ee:ca:76:e8:7b:b2:19:70:49:da:7a:43:e9:60:
         78:92:ca:71:51:68:6c:75:8b:9c:d8:a3:f2:b0:5b:23:d7:00:
         91:0d:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:24:37 2024 by rpki-client on console-fra.rpki-client.org