Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/607a60af-6a4f-38eb-bcf0-b5d6add97b4f.roa
File:                     607a60af-6a4f-38eb-bcf0-b5d6add97b4f.roa (raw, json)
Hash identifier:          vBOIMrXjCGB9x/1BiG0oyHdPhXp0bGEaRbSwUd+5KsU=
Subject key identifier:   D4:0E:6D:45:38:92:9A:B5:E4:B2:4D:04:AC:17:0F:D2:BA:26:E0:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7B808536AFED4D293A480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/607a60af-6a4f-38eb-bcf0-b5d6add97b4f.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        24.245.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:b8:08:53:6a:fe:d4:d2:93:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bde0ab49-e7cc-4251-b197-cf22f6585cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:66:a6:db:64:04:36:de:5c:42:1d:0f:75:
                    fc:cf:ae:58:b6:4c:fd:29:5f:93:10:74:11:2e:ce:
                    6c:63:a0:b7:10:40:34:89:0b:9a:be:c2:9c:ca:c7:
                    a6:6a:29:fa:3f:a0:fb:2a:c7:65:09:4f:fd:e9:1f:
                    ea:c9:1c:33:4c:4a:70:cd:a8:1b:bf:0c:71:0d:c5:
                    fd:f8:f0:3c:5b:bb:3a:c3:98:1a:66:61:b5:c4:8a:
                    24:2a:8b:7d:bb:a6:3e:c2:a0:69:bd:4d:c9:6a:70:
                    57:92:59:ef:e1:cc:f1:c3:27:0d:25:0b:a6:9a:66:
                    e0:5d:d8:49:50:ef:64:56:96:a0:95:d7:0b:07:7e:
                    a8:20:57:34:39:b4:85:cd:15:18:37:34:37:6f:72:
                    0d:64:70:b2:d1:15:3c:24:c2:56:e3:2c:eb:16:06:
                    29:fb:e0:10:f2:55:77:05:6d:51:e7:5d:2e:e5:5c:
                    58:9d:f5:fa:a0:9d:10:eb:0a:24:91:f9:71:0a:48:
                    71:ab:96:00:15:2d:5d:6a:10:83:7c:a1:f0:f7:ec:
                    a2:58:34:4a:0e:de:52:1e:6e:3e:37:3a:80:fa:ee:
                    dc:68:d9:b9:d6:90:55:00:41:25:78:80:24:e8:d5:
                    12:2c:6d:04:a1:b1:b5:2c:e5:fb:9e:a5:48:c3:6c:
                    19:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0E:6D:45:38:92:9A:B5:E4:B2:4D:04:AC:17:0F:D2:BA:26:E0:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/607a60af-6a4f-38eb-bcf0-b5d6add97b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.245.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:ca:8f:ec:a7:06:08:2b:67:e3:fb:47:d7:66:e9:d5:6b:
         26:95:60:47:d3:f3:30:57:68:fe:b0:5f:bb:a2:1e:3a:ea:07:
         f6:55:27:2d:e6:01:df:7a:07:c8:d7:20:bb:b6:86:86:3b:44:
         be:c3:47:dd:ad:46:c4:3d:47:f4:8e:dc:b3:8a:0a:59:93:78:
         13:dd:31:82:18:0c:3d:b9:8b:c2:f4:f0:3e:95:c7:47:e4:1f:
         22:89:9c:26:19:fe:fc:13:a6:62:ee:82:e9:4e:b6:b5:11:59:
         a1:37:91:03:6c:32:06:3f:5d:85:7d:1c:14:cc:87:83:57:51:
         03:c4:e1:56:01:1d:a9:79:45:f9:a6:1c:29:85:6e:5f:5e:f3:
         89:8a:93:02:17:60:f7:e3:9b:be:9c:83:ea:4b:d7:44:b7:5e:
         9d:7a:36:e5:7f:35:90:d7:f6:9f:91:70:a2:2a:4b:ad:2f:d5:
         18:22:85:9a:07:84:62:97:49:16:48:6f:e0:34:6b:43:a6:02:
         41:82:b9:e5:52:40:30:38:bc:38:db:50:a5:ac:02:bf:5a:e1:
         0d:8e:01:a8:85:c9:ed:e7:2d:da:f5:e5:ab:ff:e7:2d:7e:d1:
         95:2e:b3:22:d1:67:2f:ae:a6:40:16:86:05:cc:22:94:77:6c:
         06:c6:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:00:28 2024 by rpki-client on console-ams.rpki-client.org