Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/978f4aa8-6ebf-3692-8ee2-bbf1423ab6c8.roa
File:                     978f4aa8-6ebf-3692-8ee2-bbf1423ab6c8.roa (raw, json)
Hash identifier:          w/pbWO91gUtW03f9+52e/Dyq9urQs4PsCDuuecBWhwU=
Subject key identifier:   3E:3B:2E:E8:B0:7F:72:0C:D1:4E:A3:CD:C1:F9:8D:D5:70:AC:9B:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845304D5D1EFA79686D29CAC700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/978f4aa8-6ebf-3692-8ee2-bbf1423ab6c8.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     33653
IP address blocks:        24.11.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:5d:1e:fa:79:68:6d:29:ca:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=290ece1d-83c7-4f40-9e1e-eb7514d31997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:2b:7b:ca:04:4b:ff:9f:9b:a1:dd:56:ef:
                    cd:1a:1d:d7:70:13:7a:ed:42:f0:a3:ed:38:cb:ef:
                    a5:db:9c:b9:b0:89:50:aa:8b:64:e9:c6:3c:1f:0a:
                    55:e2:c7:c5:47:f6:87:3b:56:57:c8:82:ce:c1:c0:
                    50:73:b3:c3:1e:b2:a7:2e:35:75:a4:a9:13:c8:ca:
                    c7:00:dd:3a:12:d0:32:ba:a8:5a:eb:95:f3:cb:d8:
                    5a:37:e5:86:fa:33:5b:de:bc:41:66:9c:00:fa:3f:
                    92:78:97:16:31:bb:e3:a8:1d:17:c1:82:65:53:7a:
                    e9:7c:dc:d0:d0:95:5f:24:4a:90:45:fc:c6:ef:1b:
                    c3:e3:55:90:fd:48:42:f0:f0:3e:68:c7:60:d5:2a:
                    66:17:95:cf:f8:15:35:25:d5:dd:33:ab:4f:fe:53:
                    f4:ce:cb:db:24:4f:8a:b1:04:e4:e6:06:9f:50:e9:
                    88:8a:57:25:8c:07:9a:e7:23:c4:a4:08:0e:66:cf:
                    25:04:f6:e8:3b:7d:6f:17:34:f4:27:3b:ff:7d:28:
                    6a:b8:38:b5:f2:f1:a4:bd:d5:72:d2:46:e9:5f:f5:
                    a7:e8:66:22:bd:21:98:ea:d8:e0:4f:6e:af:aa:3c:
                    08:c7:e6:d5:4a:3e:9f:85:b6:bb:6d:a5:82:52:5b:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3B:2E:E8:B0:7F:72:0C:D1:4E:A3:CD:C1:F9:8D:D5:70:AC:9B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/978f4aa8-6ebf-3692-8ee2-bbf1423ab6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.11.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:68:bf:87:43:72:c8:7b:39:90:45:de:91:84:96:26:d1:aa:
         f0:4a:b7:44:9f:63:26:90:9b:8d:82:a2:91:87:f7:53:08:59:
         ac:fb:1a:e9:c4:dd:4f:1c:4e:9d:bc:c2:24:a4:45:f4:b9:c8:
         04:b3:ec:03:d7:e7:50:f5:61:32:78:c2:d8:26:5a:a3:cd:4d:
         ec:a7:30:ee:39:c0:f6:55:8a:a6:db:1b:3c:19:89:66:f7:77:
         70:fb:f7:33:c9:12:3c:a5:2e:d3:d2:dc:0a:8a:5c:e1:fb:21:
         12:26:10:43:f1:e8:54:57:f5:8a:fa:24:e7:64:f8:7e:3a:49:
         39:4c:07:bf:92:37:d7:75:50:4d:6e:c6:5f:ce:f5:01:67:fa:
         0a:e4:20:d5:64:5a:96:12:0f:7a:da:5a:1f:06:6b:ab:ec:41:
         c6:02:a9:2b:be:23:5f:87:90:b6:cd:d5:a5:95:0a:ef:a8:ec:
         f9:8c:5a:f3:9d:2e:41:ad:10:52:e3:e5:f2:f4:ce:a7:44:ec:
         85:e5:f4:37:d3:50:37:ae:f4:03:ac:b1:68:4c:e2:50:5a:a2:
         8b:29:81:aa:64:07:8e:0d:52:63:3f:d4:ec:6b:86:5f:e0:12:
         31:82:fd:d2:8e:c3:45:b6:21:da:4f:ac:a1:0b:e1:ef:3c:e4:
         53:42:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:53:03 2024 by rpki-client on console-fra.rpki-client.org