Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/710aae53-aa3c-335c-8b76-1c3771da7b76.roa
File:                     710aae53-aa3c-335c-8b76-1c3771da7b76.roa (raw, json)
Hash identifier:          pVIw5sqOiYXUiuNEe+aVkbo+zpxdVil6+OGBSzZwF30=
Subject key identifier:   8B:8D:B5:AC:D4:1E:50:9F:CC:9B:7E:E0:06:B7:8F:33:40:60:7F:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6664D64414CE2544AB6E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/710aae53-aa3c-335c-8b76-1c3771da7b76.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.61.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:66:4d:64:41:4c:e2:54:4a:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=3320cac4-b8f0-4ecd-8c96-69f0308c039f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:56:bc:62:1b:d2:85:88:63:cf:b6:0e:50:
                    2b:ef:b6:34:31:b3:9f:cc:08:1d:b3:dd:30:9d:6f:
                    ca:87:f2:34:45:c3:24:c5:49:88:cf:03:ce:65:0d:
                    09:7c:97:9c:66:64:ad:84:e7:18:11:ee:c6:69:ee:
                    1c:67:b8:7b:5b:43:56:ee:59:0a:ab:57:22:c3:13:
                    39:80:61:c4:23:68:a8:76:fa:c4:08:ff:d3:67:29:
                    05:f0:e1:10:2f:01:ab:14:78:47:91:0d:13:f6:93:
                    d8:51:f2:2e:d5:df:39:9a:02:03:bb:e7:14:a3:e8:
                    b0:e7:05:4e:5c:31:42:49:13:9d:c3:61:9b:6d:a3:
                    1f:0c:d6:f2:dc:fd:25:be:c7:e2:eb:da:b9:a6:6b:
                    1c:f1:85:10:fd:cc:3f:ad:63:bd:7a:fa:db:d3:06:
                    b0:db:6a:23:ed:b2:ab:65:11:4c:46:29:94:11:01:
                    8a:88:85:4c:24:05:28:ef:c7:ae:c7:01:d5:db:fc:
                    dd:6e:1b:89:f2:4b:57:69:09:07:eb:b8:b6:8b:8b:
                    e5:ee:36:a3:03:c1:32:84:f5:e7:93:14:82:46:4b:
                    46:2d:2d:97:84:dd:22:f4:6d:07:83:d4:6a:1c:10:
                    94:d7:f0:12:38:a1:a0:d8:b9:0e:bf:c1:81:c8:bd:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:B5:AC:D4:1E:50:9F:CC:9B:7E:E0:06:B7:8F:33:40:60:7F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/710aae53-aa3c-335c-8b76-1c3771da7b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.61.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:8b:b7:8f:39:70:21:bf:92:4d:e7:0f:d4:18:6a:e0:a1:
         72:c9:a4:83:fd:6d:8e:52:98:11:51:a8:d5:15:c7:c0:b2:46:
         34:6d:39:9f:48:56:dd:92:8b:1f:de:50:8e:16:80:aa:1e:78:
         85:03:c5:f3:d2:a9:c3:59:a8:f3:32:d6:1b:f2:98:2b:b2:6c:
         b3:0e:20:90:b1:57:4a:f1:d2:64:a4:0a:48:c0:41:69:3d:66:
         65:07:93:b4:f1:75:85:1d:5f:d2:c4:33:4f:73:da:3d:67:4a:
         f0:dc:b6:2c:33:2f:54:ca:cd:4a:09:d2:7b:ac:d4:c9:5e:13:
         33:69:55:e4:a8:3c:08:d5:98:f7:e7:52:15:c2:8b:85:c7:d5:
         82:71:b9:89:b5:14:cb:45:92:83:0a:02:41:97:2d:3e:e7:20:
         6d:4f:9c:8c:ea:27:c1:8b:82:a2:06:3f:3e:40:e6:a2:a8:c1:
         98:e2:0f:1e:81:7c:3f:91:11:b3:74:38:bf:c9:1a:54:0b:24:
         00:b0:fd:58:07:eb:74:7f:d5:39:a2:76:e4:bb:dc:cf:04:e7:
         d8:cf:ab:7b:77:a2:98:a6:23:61:83:34:35:a8:9e:42:48:a4:
         9c:5b:f3:40:a8:fc:0a:61:8d:95:45:0e:c6:35:5c:6a:dd:4d:
         ec:f3:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:55 2024 by rpki-client on console-ams.rpki-client.org