Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53e47082-c96d-340f-9601-52d167c821de.roa
File:                     53e47082-c96d-340f-9601-52d167c821de.roa (raw, json)
Hash identifier:          VGKwQl3O2aFUQSj98DmLbPNJ+3ZROY7DqAsuQcBajHQ=
Subject key identifier:   2D:B6:EE:A9:02:19:40:D8:12:82:EB:92:78:6B:38:C8:8B:5A:03:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CFCB93F993D05C6A259C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53e47082-c96d-340f-9601-52d167c821de.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        24.6.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:fc:b9:3f:99:3d:05:c6:a2:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=bb2d806a-d973-4742-94fe-0f4a3bda7832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:88:8f:b1:29:13:42:24:1a:82:e1:bb:2e:
                    0a:7a:95:36:13:11:9d:d4:48:f0:3f:51:39:87:3e:
                    68:df:16:c1:d6:0d:44:bb:0b:e2:52:5f:fb:dc:07:
                    5a:51:37:1d:fd:1e:f1:42:8b:04:d0:24:67:61:bb:
                    63:b1:21:45:47:85:5b:66:9a:74:06:e9:78:78:e2:
                    e5:6c:89:b6:4f:18:23:40:40:e1:71:c7:f0:3d:4c:
                    a3:3a:58:9d:e1:ba:70:76:bc:b0:de:ee:af:ce:76:
                    79:0d:70:41:b4:6c:ee:e8:14:61:78:c1:5f:50:a2:
                    72:68:5a:f2:93:03:61:01:62:85:ab:4a:46:4a:db:
                    eb:44:6b:38:ee:a6:cc:f2:c3:5c:db:85:e5:70:c1:
                    80:fb:d1:e1:6a:c2:3f:d1:f5:e5:44:c2:44:a4:d0:
                    87:07:73:64:1e:cd:9b:fe:f7:62:09:8c:85:eb:91:
                    f2:85:3e:6a:0d:25:bc:ce:f8:cc:c6:49:a9:6b:fe:
                    06:24:e0:04:10:dd:d5:11:76:9b:bb:81:a4:f2:88:
                    39:48:d6:eb:c0:f4:a5:b2:0f:e6:47:7d:7d:89:2c:
                    28:2e:cb:73:b5:98:b1:da:e0:b3:b6:c5:a4:3d:0c:
                    e5:ec:3a:89:02:8e:55:8a:b8:fb:8a:41:b2:54:3b:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B6:EE:A9:02:19:40:D8:12:82:EB:92:78:6B:38:C8:8B:5A:03:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53e47082-c96d-340f-9601-52d167c821de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.6.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:dd:40:2e:0e:a9:a4:d9:08:da:8d:74:ad:54:9c:03:32:ad:
         e3:96:ec:b9:fa:2d:4d:a9:61:55:d9:e0:5e:54:d0:0f:78:02:
         88:c9:72:cf:ee:79:7a:2f:e0:c9:14:cb:25:95:9e:9b:12:ce:
         93:3c:24:89:42:6c:e5:0d:0c:53:6d:ac:f8:a9:98:f3:e9:7e:
         eb:f3:7b:72:d0:60:8c:db:dd:76:fe:5b:68:c0:7c:fd:c8:d6:
         c7:0e:4f:a8:03:74:f0:ce:07:3d:c8:b8:88:bb:d8:e3:01:12:
         1c:32:0c:e9:fa:ce:14:82:bd:f1:60:b1:aa:b8:fe:68:65:65:
         c0:c9:69:54:86:9d:f7:33:eb:f7:dd:38:49:05:ec:d0:d4:c2:
         aa:f7:e3:95:2f:e9:bd:02:8c:11:3f:1f:cb:a4:4e:28:4e:18:
         ab:7e:6c:60:af:8e:de:bf:6a:a3:42:af:87:02:3f:51:3b:ed:
         ef:68:b0:be:c7:e3:f6:68:29:a0:28:37:ce:b4:d0:a9:cc:19:
         89:91:10:bc:ba:a5:7a:8d:75:91:61:65:cb:2f:0d:67:c6:f2:
         23:0d:f2:b1:6c:bf:70:7a:05:44:c6:4d:ad:47:a6:9d:c0:33:
         29:88:e0:f0:be:6e:4a:78:43:43:69:ed:bc:5f:43:36:23:89:
         ac:47:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:55:26 2024 by rpki-client on console-ams.rpki-client.org