Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93ada572-6dfb-337a-a51e-b55e39d33d0c.roa
File:                     93ada572-6dfb-337a-a51e-b55e39d33d0c.roa (raw, json)
Hash identifier:          /xtB+P+wSeIU36Z/VYITz0+vW55fpeewyU8uE8wwXFk=
Subject key identifier:   75:59:52:4B:01:7F:60:B4:D9:DA:98:A9:76:02:A2:05:9D:C6:A7:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAAEEDBC8E216E6B9C4C480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93ada572-6dfb-337a-a51e-b55e39d33d0c.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        24.11.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:ee:db:c8:e2:16:e6:b9:c4:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=b557ab49-217e-4fa0-a44c-e69aeca6c5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:bd:fe:61:58:0a:f2:d8:4d:12:a7:3d:79:
                    a5:a3:c5:3c:94:cf:ad:ea:74:a2:14:6d:a2:67:87:
                    d2:df:fd:9e:b1:f4:5f:40:66:5a:c1:cc:ce:43:81:
                    ce:0c:7f:04:63:16:38:d4:fd:6e:23:a3:bf:c5:d7:
                    9d:d3:a2:1a:7e:74:e5:37:04:4e:38:24:60:5b:9e:
                    ce:61:d6:5b:9c:ae:03:6f:b4:f8:26:33:1f:59:1d:
                    94:3b:29:3a:31:bb:c0:5a:62:11:66:da:3a:41:33:
                    40:77:04:3a:cf:19:fe:01:c7:52:6b:b7:4d:3e:d4:
                    a6:5c:a3:13:33:3a:77:79:f6:23:be:ad:41:a6:97:
                    6b:92:01:d7:10:5b:10:91:4d:73:a6:73:f8:ea:59:
                    e9:fb:4b:aa:3d:0b:e1:59:75:9b:0f:d2:14:6e:c6:
                    9d:26:66:e9:b0:ae:07:01:66:0f:93:b0:75:b5:76:
                    1d:46:57:9e:19:8f:56:8c:ee:7d:b4:bf:62:0f:18:
                    6b:d3:66:48:8e:98:84:6e:e4:c5:9a:8c:46:76:1c:
                    03:6e:16:4f:2b:6f:13:89:67:b9:17:2c:f5:44:19:
                    e2:42:5c:05:a7:a7:dc:2f:7e:b7:58:d4:c3:50:95:
                    d3:ec:0e:67:53:10:f6:be:d5:5a:8e:4f:92:36:90:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:59:52:4B:01:7F:60:B4:D9:DA:98:A9:76:02:A2:05:9D:C6:A7:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93ada572-6dfb-337a-a51e-b55e39d33d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.11.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a9:49:0c:55:64:e4:d5:f8:8c:f6:19:0d:8a:6f:90:43:36:
         9a:9f:cc:26:20:fc:ec:28:1e:f9:b6:b6:5b:a2:99:be:db:c4:
         7d:d9:c4:50:fd:82:d6:74:e8:07:ee:53:d9:c1:70:e2:3a:2f:
         07:db:9e:8e:ec:7e:b4:b7:38:ff:ea:27:3a:7d:22:0d:3f:c7:
         b4:fb:ad:c3:89:e4:af:b8:9c:52:56:6a:68:c3:74:24:98:73:
         c4:5b:2c:2a:39:c0:3b:e3:fe:aa:e3:42:90:18:3c:cd:d3:bf:
         73:13:81:b2:6f:ca:25:f8:83:55:ee:a5:7a:a1:76:7b:f2:b9:
         21:11:2b:1e:75:49:21:a9:ed:34:f1:ed:35:bb:2c:0e:36:82:
         a6:d8:88:7c:19:e9:f3:f9:38:8e:28:5d:6e:f2:ec:a6:1b:f1:
         9a:9c:82:c9:d7:18:1a:90:e8:86:ed:af:aa:e8:f9:ba:ff:03:
         c0:3b:90:ea:fe:0f:fc:13:b4:e3:7c:38:c6:6f:41:64:df:20:
         64:02:a4:5a:f3:9a:e0:48:53:2c:7c:28:af:ab:11:14:43:83:
         57:a0:7c:7b:b8:a2:e2:5a:b4:6c:cb:fb:83:e4:88:96:77:fa:
         28:c0:74:38:c9:76:48:8a:6a:96:3d:d6:00:22:43:28:e4:2c:
         17:7c:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:19:37 2024 by rpki-client on console-ams.rpki-client.org