Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99d210ee-01f8-305e-96a3-d0af756654b7.roa
File:                     99d210ee-01f8-305e-96a3-d0af756654b7.roa (raw, json)
Hash identifier:          dTCmdxPQjQpAjUQUgiq2UL+90kKc/dmAi7qGJnwjtnw=
Subject key identifier:   54:CF:E2:77:D0:38:1D:E9:D3:42:B7:EB:BB:B9:EB:55:1E:62:2E:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AC6D9B44182CD62A5D000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99d210ee-01f8-305e-96a3-d0af756654b7.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        24.34.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:c6:d9:b4:41:82:cd:62:a5:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=b7af4732-2b06-4a17-9241-251b085099b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:1b:d9:bf:91:4f:5f:68:bf:42:38:32:f4:
                    63:52:aa:cb:d0:f6:d7:a3:2a:41:4f:dc:ba:5e:5c:
                    42:35:c7:15:02:82:df:40:d7:b6:47:6d:cc:c1:7f:
                    b9:2c:33:d8:8a:76:bc:e6:d0:db:46:3c:c2:ec:1a:
                    78:06:3b:9c:74:60:43:73:a8:d9:12:bc:d0:20:5a:
                    81:d9:91:82:50:49:bf:24:cd:51:20:3c:c7:71:b1:
                    e1:eb:98:d1:b3:ec:c3:5a:46:11:8d:7f:0d:48:44:
                    1b:ec:a0:b3:e8:6e:c7:74:fc:90:5f:fb:1a:e3:ea:
                    94:95:4f:4f:df:cd:4b:c5:8b:73:8c:dd:52:f1:e9:
                    78:5a:b1:e9:f8:37:c4:34:e3:e4:8a:54:cf:81:53:
                    28:7e:2d:c9:fa:bf:85:7f:21:16:bb:8e:02:11:cd:
                    c4:6d:60:6b:4e:4a:b6:67:5f:ce:19:fc:02:3c:e8:
                    71:da:63:fa:57:24:8b:68:b0:77:e8:85:62:c5:fa:
                    db:ba:46:ae:d9:7e:df:49:aa:a8:75:d2:4e:64:a6:
                    a1:15:8e:f1:b6:e7:91:c4:de:05:bb:f9:08:28:35:
                    19:64:6d:25:e8:97:df:27:9e:3c:52:99:af:28:11:
                    ed:a6:ad:ed:25:60:41:81:2e:0c:39:7d:ee:fd:2c:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CF:E2:77:D0:38:1D:E9:D3:42:B7:EB:BB:B9:EB:55:1E:62:2E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99d210ee-01f8-305e-96a3-d0af756654b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:76:6b:18:4d:9c:c6:ea:ea:db:af:97:77:31:dc:cb:0b:
         23:3e:28:6d:98:97:39:c0:b2:62:43:e9:38:02:a4:01:23:91:
         87:ab:a1:60:97:c2:4a:80:81:e3:f0:88:63:e2:4f:25:bf:a5:
         b0:c2:a6:da:87:cf:5a:c2:20:cf:45:51:c0:d8:28:14:22:37:
         8b:c2:72:f7:67:3b:da:c4:dd:da:1b:5c:61:77:db:fe:20:50:
         73:1b:8d:36:b7:90:cc:9a:ee:d2:e6:00:7b:1f:77:ad:10:b5:
         8f:af:6d:c1:89:d7:b0:3e:15:93:6e:c8:5f:63:a6:61:4a:26:
         a2:03:f6:23:f5:92:c7:1c:4f:ef:92:a4:2b:3d:b4:cb:ad:9b:
         d3:28:32:d7:22:41:3a:0d:c4:c8:10:f6:b6:21:c3:70:b4:5e:
         7e:c1:65:1c:7d:e5:0a:6b:e1:16:c0:06:2a:0d:a4:33:ff:41:
         bd:bc:80:29:f9:5d:77:37:09:e4:b3:8d:73:20:da:14:cc:0a:
         4d:da:da:b0:8d:d9:bf:9f:f7:c2:a6:8a:1b:23:1c:4e:0a:57:
         5f:21:43:5b:be:a5:94:eb:cd:8f:8f:7b:54:04:46:c7:91:ee:
         1f:c3:10:d3:af:88:58:7e:d3:e7:b0:fb:1c:ef:6a:68:32:a8:
         ff:6c:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:44 2025 by rpki-client