Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f2b8931-e823-3596-a61d-de0d2f967fd6.roa
File:                     9f2b8931-e823-3596-a61d-de0d2f967fd6.roa (raw, json)
Hash identifier:          FjkXfZ+lINKstqllo1629M/y91qhEZpc/b4BbAOxlJ4=
Subject key identifier:   49:63:33:6B:3F:1E:6F:1A:A0:AE:11:3E:F5:56:11:51:FC:B5:90:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0B95ED36187BAF73C42B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f2b8931-e823-3596-a61d-de0d2f967fd6.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        24.12.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:b9:5e:d3:61:87:ba:f7:3c:42:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f762c898-0775-49c3-a1f7-9a61feb037b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:00:47:4f:e4:0e:db:85:a9:41:58:55:14:
                    77:e3:cb:1d:f0:f3:30:43:cd:06:9e:ec:3d:5e:99:
                    c0:aa:c5:10:0f:cd:f1:a8:44:11:b5:4f:9a:a9:f0:
                    d2:8f:98:dd:5e:78:64:e6:6e:33:fc:48:29:aa:d5:
                    32:eb:10:91:39:b0:16:08:2e:a2:e6:43:e6:61:61:
                    59:7d:8a:4a:f7:c1:41:2b:94:fb:ac:61:15:aa:f2:
                    a0:7d:b2:dc:9a:ca:6e:e3:3e:fb:86:e8:80:ac:6b:
                    a9:08:a0:09:76:3c:7a:22:8a:dc:02:c9:0f:52:d1:
                    c6:55:e4:a3:97:27:cd:43:db:aa:8d:33:0e:90:87:
                    28:0b:be:40:b7:89:92:ff:60:96:b7:b5:06:ca:0f:
                    ae:1d:fc:5d:3c:80:e7:4f:c7:46:11:e8:00:24:71:
                    d7:9a:0c:af:5f:0c:5c:c7:be:27:db:f3:0f:d9:2b:
                    0a:92:ec:74:93:84:e2:d0:da:07:de:a3:f9:4d:c9:
                    2a:07:d4:d4:9a:18:34:2a:7b:45:ce:67:e2:83:ca:
                    e3:84:98:5f:a2:dc:3c:23:da:85:89:9c:01:6e:75:
                    61:84:aa:b3:22:e9:bd:67:65:1d:3f:6c:65:18:fa:
                    86:bc:be:3d:04:ee:48:c3:bd:a0:ec:0b:16:44:07:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:63:33:6B:3F:1E:6F:1A:A0:AE:11:3E:F5:56:11:51:FC:B5:90:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f2b8931-e823-3596-a61d-de0d2f967fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.12.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:6a:f2:05:21:4d:0c:e4:3b:ad:c8:0e:5b:94:82:f8:3d:
         10:da:bf:37:6d:b1:f6:44:f3:d4:b6:99:ac:69:66:75:65:da:
         a8:52:66:19:56:0d:da:75:b4:19:15:ef:8e:fc:9a:62:14:4f:
         ee:9e:d0:6f:f3:17:77:b7:2d:68:e7:fd:68:0c:f0:ff:0a:ee:
         f6:09:4a:48:3c:0b:3f:a2:21:17:4b:4e:63:a3:09:e7:7c:3f:
         13:ad:32:95:cf:7e:18:93:6e:de:b2:f4:92:ae:f7:33:f7:67:
         8a:47:24:56:b7:47:2f:40:1d:cb:40:ca:16:15:e9:3d:37:0e:
         b0:07:e2:ff:9e:71:ea:56:3d:5f:93:0a:0a:54:60:a8:cd:6f:
         9a:82:92:67:bd:96:54:bb:4d:77:85:1b:72:ec:95:23:36:5b:
         11:e6:fc:cb:96:f9:43:76:c2:71:8a:a7:7b:f1:68:3c:da:5d:
         96:4a:9d:fe:c2:3c:75:db:d1:4b:7e:bb:79:70:60:1e:7c:73:
         a7:75:bb:31:f9:85:4e:3a:40:34:e7:4c:c3:43:76:f3:3b:de:
         c1:15:d5:c0:a6:d6:18:45:85:e0:f3:c6:ff:4a:a8:10:fe:d8:
         26:88:2a:34:10:8e:1f:f9:4c:fd:7c:b4:bb:33:f0:a5:6e:b9:
         d5:11:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:08 2025 by rpki-client