Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89bf95a6-5e22-3d74-b604-e50f5b83b879.roa
File:                     89bf95a6-5e22-3d74-b604-e50f5b83b879.roa (raw, json)
Hash identifier:          y0+0evY4REOcp6/1VfFFaOFXIjQeTrTvalrwxHXGAUg=
Subject key identifier:   41:CB:24:77:14:5E:FC:FC:3A:80:98:E9:99:28:3C:D0:03:0B:1B:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CFB5CAE1937DE78F75FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89bf95a6-5e22-3d74-b604-e50f5b83b879.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        24.6.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:fb:5c:ae:19:37:de:78:f7:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=4851a95c-54bf-473f-9381-faf24810e867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9b:01:1c:66:40:d0:82:9c:32:ca:5c:74:e3:
                    66:67:c4:b9:b4:46:6e:2a:9b:91:fe:1f:5e:50:93:
                    e6:da:b4:0c:c6:0a:1f:33:39:15:8e:ac:be:37:16:
                    86:65:07:f1:e8:f5:b8:20:71:91:7a:88:10:0b:73:
                    23:b2:27:05:5d:52:89:41:b5:00:fb:20:40:4f:58:
                    81:79:a8:f1:5e:45:29:6f:29:d7:97:36:7e:b0:e5:
                    f5:95:a1:34:72:25:b7:50:70:f7:1a:14:95:50:04:
                    3a:2d:f9:18:8f:e8:21:75:da:ef:ab:43:3b:46:21:
                    98:67:37:b1:14:3e:af:75:8d:2d:21:64:4d:ae:d3:
                    b0:b4:40:69:15:d2:bf:a7:b5:07:9c:e0:aa:60:c9:
                    eb:ba:93:76:60:8b:b6:c8:84:88:71:55:51:28:92:
                    00:c9:d0:05:ca:06:25:31:00:0d:46:53:65:d0:5b:
                    43:e4:66:27:34:5f:ff:35:4b:23:da:72:05:b2:64:
                    7d:b6:c1:8a:0c:c6:5c:18:ae:e0:c0:64:a2:42:91:
                    3c:16:f7:df:bc:17:b1:65:70:db:c3:01:df:ce:02:
                    42:bd:2f:b9:e2:45:f4:52:4e:44:75:06:6c:f2:d6:
                    e7:51:fc:53:bd:96:a7:ea:d7:5e:41:7f:56:f1:6d:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:24:77:14:5E:FC:FC:3A:80:98:E9:99:28:3C:D0:03:0B:1B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89bf95a6-5e22-3d74-b604-e50f5b83b879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.6.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:91:82:70:63:3b:19:82:04:66:14:69:ef:66:ee:bc:14:
         6c:40:f6:62:81:46:30:b4:75:86:59:55:95:75:88:d3:aa:df:
         60:df:57:16:44:d6:db:24:1b:dd:59:a8:a0:36:4f:67:3d:2e:
         b3:5e:80:db:1c:6f:32:84:ac:b2:4e:82:56:78:18:99:8b:bf:
         9d:55:5c:b2:9c:be:c1:0c:48:1b:46:fc:24:7e:24:81:4b:e8:
         34:2e:d9:71:4d:cf:67:17:c4:0a:df:68:de:35:79:37:5f:e4:
         a7:f7:17:91:27:5b:8a:ad:ae:85:0f:d3:37:67:d3:14:2a:d9:
         14:22:99:00:00:f5:87:c5:b6:72:69:1d:a4:eb:8c:42:06:66:
         7d:4d:68:02:a5:77:bd:68:4a:88:e0:e3:c7:64:f9:31:22:cc:
         36:23:30:bd:68:11:fb:ee:bf:0c:e0:a2:28:b3:3e:57:1e:48:
         df:92:87:43:2a:57:09:b0:64:46:b0:a4:c4:8b:7c:b6:70:cf:
         9e:5c:53:30:64:2a:4d:b4:bc:ba:ca:d5:df:fa:da:4a:b5:39:
         62:1a:06:18:7f:fc:ce:66:7a:57:cd:d1:61:81:a6:52:da:3b:
         63:a8:89:af:2f:c1:f0:20:41:9f:93:29:02:bd:8f:91:a1:78:
         84:a7:15:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:00:15 2024 by rpki-client on console-ams.rpki-client.org