Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667c4aed-d190-364c-85d1-16ae89cc99f9.roa
File:                     667c4aed-d190-364c-85d1-16ae89cc99f9.roa (raw, json)
Hash identifier:          sR5hTyxzntU7/S38YPt56HzcwTKdc5P0V0JLTkW6tII=
Subject key identifier:   17:76:22:2B:9E:F1:9C:80:E1:B1:25:F2:0C:CC:2C:81:07:02:94:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF72DD980ADDB55EB01C9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667c4aed-d190-364c-85d1-16ae89cc99f9.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        24.153.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:2d:d9:80:ad:db:55:eb:01:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a0aabc8f-8174-4e59-9323-2485e2c18b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:c6:d1:c0:98:25:68:02:03:53:a4:da:76:
                    54:f0:fd:9d:e8:7d:5a:7a:44:0e:08:f6:45:2b:7c:
                    5b:db:08:2e:ad:11:c6:4b:2c:7f:56:a5:6a:fe:6b:
                    0f:6c:58:ea:85:de:76:9d:15:bb:ad:87:61:ce:f6:
                    f5:f5:64:0f:5b:52:86:bb:ef:1a:b8:9d:2b:ad:7f:
                    e7:59:5f:85:6c:c4:80:c6:bd:43:4e:74:d0:e9:7b:
                    81:1f:5b:c1:25:88:a2:e1:df:7d:cc:0a:b4:65:dc:
                    3f:a1:ad:7d:fe:9e:50:17:de:9e:d3:8b:c8:8d:58:
                    1f:4e:d0:17:29:e8:e3:2d:d8:b8:01:8a:22:fa:49:
                    09:16:b9:2b:c1:d6:ca:f7:bd:a0:c6:96:ca:1c:98:
                    39:3e:b0:09:12:d5:fb:f5:a4:23:e4:e8:bd:d6:7c:
                    3d:a6:fa:fd:5d:42:59:ab:ae:80:2a:2e:36:05:79:
                    51:48:1f:60:c0:c8:63:b3:55:a6:cd:3f:19:ec:61:
                    65:61:92:fe:7e:f4:e4:28:1b:74:be:a6:b9:93:6b:
                    e8:80:bb:ee:65:16:2d:ed:39:67:92:f7:5a:57:ab:
                    e7:63:2a:28:8f:76:07:08:16:dd:fe:dc:30:1a:19:
                    c4:0a:8c:d9:b7:b4:fc:78:47:ee:4b:ad:6f:64:90:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:76:22:2B:9E:F1:9C:80:E1:B1:25:F2:0C:CC:2C:81:07:02:94:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667c4aed-d190-364c-85d1-16ae89cc99f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.153.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9d:e6:04:c7:ad:d7:4a:28:0e:ac:89:06:cf:44:27:1b:1d:
         b2:62:6b:3e:1e:73:37:ea:f6:5c:d5:14:fa:6c:f3:a1:26:01:
         0e:09:40:1c:9e:5a:e4:7a:de:59:20:66:bc:a8:0f:be:43:10:
         7a:37:ab:48:fd:2d:f1:cd:24:68:96:7c:c6:2f:21:df:6c:02:
         11:02:e7:c2:03:2b:66:2f:fc:5f:a6:a7:43:ad:ee:f9:1e:96:
         88:b1:32:75:3e:07:8c:71:e0:e6:fb:0b:c1:92:26:03:ed:85:
         06:65:2e:1d:ac:28:e9:4d:9a:fe:ef:d1:ab:d5:81:e5:f8:33:
         b6:ec:82:55:49:c7:6e:f1:14:3c:f0:71:0d:29:c9:52:a0:e6:
         25:0d:69:6c:c7:0b:bb:a9:b1:69:30:00:1a:c2:85:54:0a:c7:
         77:e4:ed:af:7d:95:92:80:9c:89:d0:f4:09:88:8d:3f:a0:5f:
         e4:fd:95:5d:72:05:81:b1:83:53:84:bb:c9:1b:79:06:01:af:
         cb:83:af:28:cd:7b:27:10:2e:48:bc:4f:d6:fe:67:9c:ff:ca:
         3d:82:22:0a:c5:70:9e:7f:dc:63:5d:56:ba:ca:7c:18:b7:6f:
         b2:ea:fa:34:e8:fb:38:10:57:9e:71:b2:cc:7f:5b:9c:50:a2:
         d2:03:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:01:34 2024 by rpki-client on console-ams.rpki-client.org