Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1e459e3-a34b-32f8-977d-a99ea14941f7.roa
File:                     a1e459e3-a34b-32f8-977d-a99ea14941f7.roa (raw, json)
Hash identifier:          Z1oa4dUkKP7KKHXp5mlXgQgCJGkyxIHBPNhFUxAGGHw=
Subject key identifier:   A1:36:32:F7:E9:CF:49:D0:33:BB:1E:B8:D5:32:F0:CB:67:78:74:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C66775F24D32976C07BA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1e459e3-a34b-32f8-977d-a99ea14941f7.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.62.104.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:67:75:f2:4d:32:97:6c:07:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=7bdc78d4-ab52-4006-b164-d45fb30d7cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:1c:7b:66:bc:8f:db:2f:f0:27:8b:12:5d:
                    d5:8e:66:ff:7e:e2:66:8c:4c:56:cf:9e:71:3f:16:
                    2a:4f:c1:0b:8f:10:6f:6a:ad:b1:25:49:80:96:4f:
                    aa:c3:dd:fa:48:32:0d:de:8f:8a:53:c0:20:34:42:
                    55:93:4a:9c:6b:b1:96:bf:7d:86:eb:0c:4b:c7:44:
                    ba:0d:15:63:1d:6a:40:6c:e5:b7:38:7d:69:58:a1:
                    03:27:bc:3f:88:ff:85:56:18:6a:5e:67:77:0e:3a:
                    df:83:82:a7:6f:64:9c:bc:fb:c8:20:cb:3d:61:93:
                    b8:07:8b:54:3b:20:ce:1f:d8:42:ce:e5:ec:69:84:
                    53:c3:0e:7e:a4:9a:2f:52:4c:ae:fc:74:60:a7:f8:
                    e7:a3:1b:56:f1:89:1a:57:e8:96:70:61:3e:07:94:
                    ba:61:5d:ca:55:14:15:b4:00:0a:bd:e7:a6:e7:43:
                    98:04:75:0f:82:1e:a6:22:20:74:fb:ac:f3:3a:a5:
                    82:38:c8:0b:46:60:44:92:0d:b1:4c:e6:51:f4:30:
                    c2:36:aa:63:d1:75:90:17:87:54:b9:66:dc:32:14:
                    11:5a:71:0f:37:3a:92:13:c7:f6:de:40:fc:8e:e2:
                    c8:4b:69:6b:9c:12:96:bd:a9:63:41:79:fd:77:d3:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:36:32:F7:E9:CF:49:D0:33:BB:1E:B8:D5:32:F0:CB:67:78:74:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1e459e3-a34b-32f8-977d-a99ea14941f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.62.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:42:cd:54:cd:fb:3d:17:d0:4d:a8:80:25:77:82:82:be:c1:
         3d:39:b4:08:3e:56:33:5d:cb:2a:9d:be:71:33:13:79:7a:c4:
         27:33:fb:9d:11:bc:ac:e9:dc:33:9d:b5:33:a1:f7:d5:fe:92:
         c9:25:7e:5c:db:ce:94:71:63:62:86:b4:96:d7:1e:d8:28:cd:
         f6:12:00:d0:6b:4e:41:d2:65:59:df:41:07:fc:33:98:e6:11:
         ae:a1:81:9c:58:40:73:dd:fb:9d:19:85:96:43:75:d6:f0:92:
         18:31:c8:52:8c:e7:ff:53:01:87:77:a0:78:79:a1:2c:56:82:
         b5:7a:7d:cf:72:72:ce:2c:16:ae:a3:6a:6a:58:d4:3a:92:07:
         d2:01:b6:3d:a0:83:90:4c:3d:9a:52:80:33:d7:71:2c:5d:37:
         5f:c9:4f:5b:93:3b:56:6c:fd:64:ab:cc:7f:b8:9a:5b:12:03:
         11:a8:3d:75:ad:e2:84:cb:13:d6:aa:36:23:97:bd:60:f0:63:
         06:81:69:65:b1:e5:07:e2:33:75:93:32:b7:ca:e4:7c:0b:86:
         bb:07:29:28:89:72:e4:dc:e5:d5:b3:9e:1e:28:26:52:25:02:
         3a:7b:de:0c:73:cb:8d:22:fa:eb:81:94:92:67:a2:d2:d2:ba:
         81:0f:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:02:16 2024 by rpki-client on console-ams.rpki-client.org