Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec7aa0c-0ab4-31aa-9095-17d25f439937.roa
File:                     6ec7aa0c-0ab4-31aa-9095-17d25f439937.roa (raw, json)
Hash identifier:          CxGSEhw47nZaWoPjlpSVECKCK8wnL3jl57NiGLwrZ9s=
Subject key identifier:   FE:58:CD:50:69:8C:57:D8:C4:78:AC:B6:26:66:6F:AA:A8:79:E8:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C769B29ED4D60D2ECBCE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec7aa0c-0ab4-31aa-9095-17d25f439937.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        24.127.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:69:b2:9e:d4:d6:0d:2e:cb:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=82d7c493-4fcd-41e2-bb14-b6693d6d242e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:e9:5e:f1:b1:a8:55:aa:0b:54:79:0e:f6:
                    1c:1e:e1:33:99:99:6c:6d:b7:84:43:67:b4:41:25:
                    80:20:93:93:37:de:2b:f5:87:68:ad:45:54:26:10:
                    d2:f0:9b:80:34:c0:51:14:5d:7a:5b:e5:9d:cd:09:
                    cc:66:90:15:ff:71:b3:c4:27:a8:61:79:44:bf:d9:
                    68:a4:79:e2:8e:35:c9:f0:54:55:24:0e:dc:60:85:
                    1f:8e:5c:b1:7e:38:45:6b:35:8d:c3:d1:5d:88:ae:
                    a4:99:c4:e1:55:87:66:67:1e:ae:b2:b5:41:ef:03:
                    19:81:60:ba:b5:15:39:0a:91:1d:44:80:88:7d:f7:
                    b6:f0:63:11:cd:70:a0:d3:91:41:e7:7a:80:1f:2a:
                    16:4f:0a:5f:46:ed:1b:bc:e4:bc:03:7a:b9:4a:91:
                    3e:a2:a8:37:44:4c:ae:a9:50:60:d1:af:01:43:59:
                    1a:78:46:7c:06:84:ad:fb:60:a3:23:d9:22:8a:20:
                    ff:3b:b3:95:0d:d4:25:a3:18:e9:d1:12:94:9f:04:
                    9e:f1:4f:2c:31:04:40:c8:2c:b9:a5:30:7b:0f:39:
                    d9:b6:76:55:91:20:65:72:e3:8d:94:92:09:d0:ab:
                    6c:1b:f6:05:5b:36:56:8d:7f:2f:5b:75:81:5a:2e:
                    f6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:58:CD:50:69:8C:57:D8:C4:78:AC:B6:26:66:6F:AA:A8:79:E8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ec7aa0c-0ab4-31aa-9095-17d25f439937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:56:55:b7:bd:92:0c:42:bb:e2:16:c8:4f:c8:6a:0f:e0:5f:
         42:6f:88:5b:af:50:b5:8d:df:07:68:1d:da:b5:12:e7:da:1a:
         ba:5c:69:a6:e5:22:a8:6e:83:03:f4:4f:91:0b:ad:12:70:8b:
         70:68:e0:bf:5c:fa:0c:ac:ed:a1:e9:5b:c9:6d:51:80:46:d7:
         0f:a1:b4:8c:de:65:3a:d1:66:73:38:7d:2f:7e:7b:cf:59:85:
         c4:b1:be:b4:81:09:5b:c6:26:a3:f5:c8:c9:10:22:99:6b:50:
         6c:e3:a3:14:5e:4c:4d:f6:6e:44:ed:a4:80:39:e8:13:e8:9b:
         cd:4f:bc:7a:ab:8b:e7:88:14:95:83:6a:53:59:7e:56:a1:d6:
         a6:f8:d2:f4:32:1f:6c:6b:75:3b:06:5d:1b:1e:8e:f7:ea:1e:
         60:80:d4:4e:76:0d:26:65:63:39:49:88:18:90:3b:e7:d5:22:
         a8:ed:1c:f3:af:aa:43:2d:9b:b8:0e:d1:55:0c:9b:1c:35:2b:
         cd:ce:35:ea:7b:89:41:e9:03:26:de:ca:38:b2:7a:7f:5e:b5:
         65:47:79:b8:f9:e8:15:06:5d:25:d2:26:86:e6:f0:4a:07:73:
         88:b6:2a:a2:f4:6f:09:5f:a9:a9:61:7a:15:6d:b0:c6:6e:3b:
         37:92:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:49:06 2024 by rpki-client on console-fra.rpki-client.org