Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62bbb6d3-412e-3ede-a73c-34d2717045e0.roa
File:                     62bbb6d3-412e-3ede-a73c-34d2717045e0.roa (raw, json)
Hash identifier:          6xSlO38RELgJjh3o66zBQrk1GNY8tqMUyQjwLqawFa4=
Subject key identifier:   9E:7F:2B:8B:63:7C:B0:A9:39:1A:58:E1:58:7B:90:C0:6D:7A:C8:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7EC0FBD3145306B370240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62bbb6d3-412e-3ede-a73c-34d2717045e0.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        24.1.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:ec:0f:bd:31:45:30:6b:37:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=86253a5d-277e-4094-8f9a-6ffb9a9d243f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:28:1b:d1:a7:04:f8:0b:8b:06:8e:9d:79:
                    53:c6:85:51:ae:8b:04:5c:ee:b1:47:f0:64:a0:57:
                    f7:af:cd:8d:e5:a7:1d:78:ac:03:ce:59:65:75:73:
                    d0:d4:67:81:4e:f6:92:34:55:94:b4:f3:84:92:93:
                    dd:73:00:e8:be:15:37:d4:a4:d7:05:cf:c4:18:ad:
                    24:79:44:e4:e4:f6:1f:e2:f8:2d:d7:fa:19:26:0f:
                    b8:2c:0e:8e:ba:91:02:61:f6:47:b2:e0:d8:9a:0a:
                    f3:13:96:ad:fc:a6:07:93:c6:17:ea:7e:4f:a5:ae:
                    2e:d1:21:2c:7a:93:e5:a9:ae:40:84:ee:99:ec:d6:
                    0a:d6:e5:6b:c9:1c:e0:3a:a3:9a:7f:87:98:58:00:
                    c8:c7:aa:02:cc:b9:f8:93:f4:7b:89:02:fd:2b:b8:
                    d1:54:71:79:28:ff:f2:f2:e2:78:c4:63:b9:b5:5b:
                    08:f9:ae:8e:09:0b:39:8b:89:c7:b9:2a:de:37:db:
                    a1:25:4c:66:96:70:d8:c8:1d:13:a6:55:9d:d8:b2:
                    d8:11:2b:9e:40:b0:65:11:ea:59:69:9e:20:97:fd:
                    de:a0:e5:39:8d:a1:a4:3c:7f:ef:41:e4:d0:cf:c0:
                    66:18:c6:e2:a8:02:57:06:c4:37:02:38:61:1d:4d:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:2B:8B:63:7C:B0:A9:39:1A:58:E1:58:7B:90:C0:6D:7A:C8:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62bbb6d3-412e-3ede-a73c-34d2717045e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f3:be:cc:eb:ad:ea:fa:0d:df:c1:3c:8c:c4:d7:e1:77:81:
         cc:e1:a2:60:6e:39:73:36:23:92:92:63:c6:91:05:b5:ca:cc:
         4a:d7:d3:22:44:12:b5:7f:19:22:cf:60:74:aa:04:dc:d9:00:
         98:f2:2c:87:00:48:c3:be:a2:69:91:cf:cb:77:b1:13:7f:f4:
         27:d6:33:00:ff:fd:ad:2d:fe:2a:9a:d6:af:12:61:5f:8d:85:
         0d:0f:a0:61:ad:25:b6:a4:0c:57:0d:07:31:f0:f1:10:cb:74:
         18:09:8e:de:09:86:84:7f:31:d9:5e:4f:d5:79:91:45:c3:cc:
         39:c9:c6:ae:27:2e:0e:68:ca:cf:c7:eb:39:30:25:00:46:5a:
         6b:c1:a6:de:29:42:65:0a:e0:2d:91:11:1a:3c:e7:4c:33:41:
         ac:56:3f:c9:30:fa:33:cd:89:57:62:4a:8b:06:14:26:da:6d:
         a5:06:91:bc:dc:97:a7:34:ba:73:25:60:9b:3e:05:2d:94:c2:
         2b:9f:ce:b6:9d:4e:bb:df:97:56:8f:45:cc:4d:c2:c6:6d:ca:
         e6:0e:bc:ff:84:20:ed:56:fd:cc:55:50:80:75:c0:11:3b:d4:
         9c:d1:3a:76:7d:89:47:f1:fe:25:29:7b:e8:36:e9:f8:a0:a8:
         6a:c9:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:00:52 2024 by rpki-client on console-ams.rpki-client.org