Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ef12939-52c5-38fc-9be3-92dc6250d807.roa
File:                     9ef12939-52c5-38fc-9be3-92dc6250d807.roa (raw, json)
Hash identifier:          efB6YHsBrt4cHnpBGqCkwsTDOwc/WHzBWUqE84V2Ps8=
Subject key identifier:   5D:A4:52:1D:99:5D:0F:C4:74:9B:D1:3D:4D:CE:77:F2:66:CD:A2:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FC48B689D700288C9FB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ef12939-52c5-38fc-9be3-92dc6250d807.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     13367
IP address blocks:        24.245.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:c4:8b:68:9d:70:02:88:c9:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=4b0e15ad-800f-4fa2-b28d-c5cb130209a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3a:92:34:6a:84:c1:e1:6c:91:31:4c:97:0e:
                    35:9b:7a:a5:ff:f3:8e:a0:5e:0d:9c:35:c9:e2:02:
                    a7:6f:81:58:58:6c:a7:f1:30:51:0f:99:74:66:7b:
                    bf:19:82:61:66:42:50:0f:37:43:da:d7:df:d8:e6:
                    6c:5c:90:9c:3c:60:cd:57:73:a2:26:bd:85:a9:43:
                    55:c7:85:e0:22:c9:7d:06:d5:3c:de:de:1b:57:a7:
                    a5:08:6c:a7:4d:56:62:37:99:3d:4c:8f:45:d6:d4:
                    34:5d:b3:87:2b:47:2c:fa:15:2b:22:cc:f2:0d:9e:
                    16:97:16:49:18:96:94:86:e6:5f:bd:6b:2a:df:7d:
                    12:1c:5f:14:55:bd:58:16:cd:d9:38:cb:3b:59:fa:
                    01:cb:f7:b1:c8:f6:49:16:b5:9c:9d:46:81:64:8d:
                    d8:f2:57:87:d0:21:5a:d2:c1:fc:3e:56:a8:c4:7f:
                    48:83:93:59:cf:ee:2b:82:27:71:78:29:58:ce:c8:
                    74:ba:fa:db:64:0d:7d:91:e9:70:cb:b3:80:28:6a:
                    f3:5c:49:e6:cd:fc:3b:d1:18:db:d1:b9:84:97:ae:
                    3a:49:1a:2e:1c:e2:22:57:8b:aa:17:7a:c9:79:11:
                    51:bf:46:9b:6e:da:01:a6:e8:84:12:2f:9d:3e:e0:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A4:52:1D:99:5D:0F:C4:74:9B:D1:3D:4D:CE:77:F2:66:CD:A2:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ef12939-52c5-38fc-9be3-92dc6250d807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.245.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:d5:f9:f3:36:70:4e:c8:2f:d7:e3:cd:b2:44:e5:41:36:f8:
         ed:a9:98:f4:69:75:56:9b:34:51:b9:81:73:aa:02:41:f6:a3:
         70:ae:51:d1:5e:4c:f8:22:e0:24:2f:0f:15:18:ae:80:c0:f0:
         7d:b3:18:34:4e:66:a2:e2:8d:2a:62:fc:ea:58:6e:fe:f5:f2:
         b6:7f:f9:16:a0:12:a2:81:c8:37:f4:9c:5f:36:4a:84:4b:d8:
         78:9d:f0:67:3e:d2:fc:ce:a3:fc:0f:b9:28:92:2b:09:a1:9e:
         12:01:43:5d:4f:73:97:0f:79:1c:fa:d2:d9:41:9b:5a:cf:d5:
         dc:73:61:51:42:f3:68:6b:54:3b:12:4d:e4:1b:de:33:0f:a8:
         7b:97:c7:a9:46:5c:ee:38:b1:40:9a:fa:39:65:50:5d:e3:c5:
         7b:99:95:2d:a3:7d:a3:57:ca:51:e3:9c:c7:3b:d1:4a:19:87:
         82:07:4f:13:e4:2e:f7:60:11:6e:41:4b:df:16:07:70:40:2d:
         d8:67:9c:28:21:04:ea:ae:01:79:bf:a3:05:f3:9a:04:94:7d:
         82:8e:93:33:2e:34:81:5d:06:5c:b0:a7:f0:08:e9:5d:fa:6e:
         b2:e7:8c:cb:63:39:6c:97:8a:fa:18:87:83:de:78:85:48:60:
         f3:21:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:11:12 2024 by rpki-client on console-ams.rpki-client.org