Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cab56ea-2d75-369e-b11d-4aada3e42c02.roa
File:                     6cab56ea-2d75-369e-b11d-4aada3e42c02.roa (raw, json)
Hash identifier:          G+rMTsegqvl1xZ0UB83yMUD+UfFsZNdZx/B4cQW65Wg=
Subject key identifier:   1C:9D:FA:0D:77:6C:D4:45:45:39:84:85:A5:8B:5A:19:4B:02:E1:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88F60801D03415BC0F8C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cab56ea-2d75-369e-b11d-4aada3e42c02.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        24.0.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:f6:08:01:d0:34:15:bc:0f:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=12de966b-9e75-49ee-88b3-9440876d5390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:e5:5c:3b:58:d6:71:7d:16:61:be:89:16:
                    e4:38:fd:8f:2f:80:63:08:b2:9e:c0:c4:19:4f:fa:
                    1a:9f:95:6b:28:7f:58:92:08:98:0a:1b:ac:7f:d4:
                    f1:d0:93:17:60:97:ad:da:d8:56:3d:18:01:85:e1:
                    7b:e6:65:6f:5d:c3:5d:8d:61:67:48:44:d0:15:30:
                    e2:98:d6:d1:bb:44:bd:87:2b:13:66:e8:7f:32:58:
                    c8:14:4c:5a:b1:e7:ef:98:f9:83:57:43:46:39:bf:
                    e3:ce:55:3c:49:fa:5f:d3:73:1f:53:ed:6a:53:b1:
                    45:c7:c1:29:3d:a6:ce:04:a6:54:bc:e8:cb:8e:a1:
                    11:56:01:14:e2:78:c0:08:81:30:6a:11:a8:81:20:
                    06:30:20:64:b5:53:1f:0c:78:a9:22:17:4a:bd:ef:
                    bb:1b:97:be:62:2e:42:86:c4:4e:8d:76:55:4b:17:
                    b9:84:d2:31:cf:e8:1d:b9:87:a2:a7:37:c4:64:dd:
                    b8:a7:2d:d5:f6:a5:95:2c:c8:2c:33:46:f2:41:a9:
                    d4:c4:56:03:29:e8:df:b8:72:3c:27:5b:0f:ea:65:
                    94:da:4a:21:79:4f:d1:5d:7a:de:fa:1a:12:a9:10:
                    6a:32:b7:4c:8f:f8:6d:7b:06:c3:0f:aa:ef:0d:8f:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9D:FA:0D:77:6C:D4:45:45:39:84:85:A5:8B:5A:19:4B:02:E1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cab56ea-2d75-369e-b11d-4aada3e42c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5e:12:b6:c6:eb:f5:4a:7f:3d:ce:9f:f8:29:a2:9a:9d:65:
         47:ef:09:3a:de:03:1b:21:c7:c2:89:ba:8a:62:82:32:26:9e:
         97:34:e2:6c:3d:95:53:01:ab:e6:f3:a1:03:e9:0d:e8:bd:73:
         bd:7b:1d:5d:6e:cb:8a:da:2f:de:a2:56:4b:d5:c6:8e:2f:e1:
         bf:23:37:f5:4c:18:99:a1:06:09:53:33:9d:5d:e2:2e:b0:60:
         99:6f:9b:91:df:7a:32:bf:00:6d:8f:75:5c:62:95:37:76:52:
         87:a3:32:50:52:2f:5e:88:8d:ba:de:4f:10:04:1f:5e:08:fd:
         ba:9a:ff:ad:c4:33:dd:c2:19:2f:37:13:54:95:8d:4a:bc:11:
         2f:06:a5:41:e1:fe:4a:79:1c:c9:a5:75:67:f8:b6:9a:9d:9f:
         32:17:a1:e0:58:37:6a:69:5d:51:bd:5f:b0:3b:ed:4d:a5:af:
         eb:bb:5d:c7:d7:b4:41:ef:9c:f5:57:7d:ec:59:f1:96:95:46:
         54:9b:14:02:81:47:e8:0f:62:78:58:1c:d3:f5:6d:11:cb:84:
         71:fa:56:71:6d:96:2f:f1:97:60:da:bb:f6:e2:2e:0d:33:47:
         df:55:d3:4e:96:58:50:d7:47:0e:21:bf:b2:c9:40:69:da:5e:
         75:d2:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:50:25 2024 by rpki-client on console-fra.rpki-client.org