Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65be9188-ce05-3a53-a232-fc30b7e2c5e8.roa
File:                     65be9188-ce05-3a53-a232-fc30b7e2c5e8.roa (raw, json)
Hash identifier:          NaD5qub9GOFATkD4QCxg2RPMCPsM/+jZ70u3Wq+czIk=
Subject key identifier:   30:32:D8:C0:76:96:B1:D5:C1:C8:29:CB:B9:9A:62:FB:C4:8D:F8:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFC3EBC4BBEC565B4AE5080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65be9188-ce05-3a53-a232-fc30b7e2c5e8.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     5607
IP address blocks:        184.124.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fc:3e:bc:4b:be:c5:65:b4:ae:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=437431a5-7a8e-4f0a-9e74-8844ea3b03a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:ad:3f:fd:94:0b:e9:2b:6a:4f:5f:ac:88:
                    10:5e:11:1a:a5:87:e4:7c:4f:d1:3a:2b:52:e0:8c:
                    36:9c:e2:84:bc:90:aa:64:38:94:06:d2:a7:f7:01:
                    f1:d4:1f:31:c1:a4:5e:83:d5:0f:67:71:d1:43:b9:
                    00:a2:1c:29:7b:0a:db:67:8a:32:2f:60:e5:68:bd:
                    9a:e5:72:7d:af:56:22:ee:ad:21:74:cb:0f:8b:c0:
                    b4:05:31:6b:28:b4:74:28:68:be:78:81:0d:4f:b4:
                    d0:4c:e8:19:a5:c0:53:c0:92:54:2b:e1:d3:71:24:
                    b6:d0:31:33:ef:8a:aa:2a:5f:b6:03:00:ce:ce:d1:
                    b6:b6:f7:c2:9f:c5:a4:78:34:b8:16:5e:22:6b:48:
                    42:b1:90:66:08:c3:31:5e:0a:06:0c:b3:97:b8:f1:
                    f3:a7:17:8a:0e:36:ca:b6:ef:65:26:44:60:65:50:
                    cc:c5:90:63:ee:97:23:a5:a3:d5:ac:b9:64:55:a9:
                    ff:15:b7:f8:3b:81:db:b9:69:25:ca:40:ee:ac:b7:
                    5b:d2:d9:4b:8b:9d:04:93:f7:58:90:cd:98:ba:3d:
                    03:ad:88:1d:0d:14:17:d0:be:13:42:bc:20:f9:2c:
                    0a:8c:77:d5:5e:1d:0e:9b:8a:b4:f6:f2:4e:be:7f:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:D8:C0:76:96:B1:D5:C1:C8:29:CB:B9:9A:62:FB:C4:8D:F8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65be9188-ce05-3a53-a232-fc30b7e2c5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.124.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:fd:c8:99:a7:dd:45:7d:56:8a:4e:8b:02:a2:fb:a9:84:09:
         a3:d9:75:04:43:4d:3f:31:b5:d1:13:06:5b:ae:f5:02:43:91:
         0e:90:43:96:62:d9:09:95:9d:dd:59:6b:0d:06:9c:9a:4a:05:
         67:ff:8c:62:8b:c3:c8:cf:91:cc:18:21:b2:01:66:7e:ea:a4:
         6a:52:62:19:98:2e:b9:3c:48:a0:22:ae:ff:f2:f1:b9:44:2c:
         d4:f4:5b:94:d7:22:87:d1:2d:cd:ff:c7:cf:f4:5c:04:3e:7c:
         78:54:9f:39:8d:ea:2c:4e:21:af:1f:47:78:c2:9d:1e:4f:90:
         f1:b2:a5:eb:9d:12:cf:24:e0:62:5e:8c:50:07:57:48:5a:42:
         78:19:7a:00:40:50:2a:f0:44:37:59:64:dd:7c:35:ab:fb:0c:
         2d:ce:cd:4a:c7:f1:ea:85:a1:31:fd:4f:8f:07:47:9e:a4:c7:
         09:b9:7d:ab:53:d0:63:2a:87:32:1e:39:1d:16:84:cd:b8:d8:
         c1:63:bb:15:e1:f4:9c:75:b7:8d:be:fc:7a:df:ca:65:c5:88:
         e4:e1:00:c3:25:e1:01:1e:91:75:27:4d:b2:94:cc:18:f7:94:
         2e:28:fc:3d:0e:93:4e:9b:d8:5a:aa:db:fb:31:b3:27:61:71:
         8c:ba:f0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:46:50 2024 by rpki-client on console-ams.rpki-client.org