Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fdd0f3-0edb-3d1c-b76b-ce2830d00907.roa
File:                     a3fdd0f3-0edb-3d1c-b76b-ce2830d00907.roa (raw, json)
Hash identifier:          Hc0IvqhN3aoYYV9NNrByc1K3l0h51PUhppm99PJAHMg=
Subject key identifier:   E5:FC:89:71:4B:A4:8F:CD:2C:13:D8:95:83:C4:F9:53:6E:13:9B:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9BA08FB47621658C08D200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fdd0f3-0edb-3d1c-b76b-ce2830d00907.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        24.15.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9b:a0:8f:b4:76:21:65:8c:08:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=b4217b2a-3344-4755-a548-2839b5ec4107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:33:41:74:3c:c5:5e:10:d3:79:b1:ef:52:
                    05:dd:2d:31:f5:03:1d:fc:7e:5f:5d:4c:5a:07:ad:
                    34:4c:02:8e:6b:e7:86:d6:4e:09:46:de:83:7e:0b:
                    ab:01:da:98:23:17:13:d0:db:e5:9e:16:ca:14:af:
                    9f:2b:a4:80:a5:89:1b:33:83:05:12:ba:89:4e:fe:
                    d3:39:26:4d:66:ca:97:69:e8:4f:35:51:ff:19:a6:
                    85:20:6f:33:7d:31:4b:21:c9:ee:2b:48:24:85:8c:
                    23:57:7a:d0:6d:c4:6b:3d:2f:15:f8:9a:35:ce:57:
                    a3:45:02:cc:61:94:63:bb:f4:62:2b:e4:ac:3c:08:
                    71:80:a1:61:4b:48:6a:42:93:7b:60:56:ec:e4:7a:
                    66:1a:07:19:e9:37:12:a3:82:a0:e7:41:6a:50:a4:
                    ea:42:c8:88:06:35:fb:1a:cf:ed:b6:38:2e:e6:d1:
                    ce:49:63:f8:24:25:89:65:19:bd:d4:55:85:0f:53:
                    54:b9:43:47:61:ab:f5:f9:f3:55:f5:a6:48:48:49:
                    d7:10:71:d4:06:f4:14:d3:05:47:88:a2:25:dc:41:
                    39:1a:0f:56:26:f5:71:b6:43:4f:ee:c8:09:01:77:
                    60:23:ec:8d:83:ad:01:6b:b8:6a:64:de:12:8b:4f:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:89:71:4B:A4:8F:CD:2C:13:D8:95:83:C4:F9:53:6E:13:9B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fdd0f3-0edb-3d1c-b76b-ce2830d00907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.15.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e2:3c:01:fc:e4:db:74:2d:fc:41:24:ff:f0:30:3e:fa:c7:
         13:d1:2c:00:e9:76:87:76:9a:bf:c8:5f:fb:35:36:ce:68:ce:
         36:35:b8:5d:c4:d2:61:92:bf:34:c7:ce:2f:17:04:ee:7b:eb:
         c4:43:f9:b0:cc:b3:3b:fb:bc:d2:52:88:ec:56:95:37:0d:1a:
         b9:93:84:31:30:ae:07:d5:f2:2b:ef:92:e2:fe:9f:0e:ac:23:
         d7:11:c0:d1:37:b7:6d:63:8c:c7:ec:e1:2d:4a:49:ec:9e:4b:
         81:5c:d9:60:4a:14:0e:3a:5d:8f:25:ed:79:d4:9e:2e:07:bb:
         b4:17:aa:26:bd:0b:3c:5b:76:37:a5:81:c4:7e:af:b1:8e:3b:
         c2:29:7f:0e:8d:d9:eb:51:0a:de:9f:64:24:4c:51:23:87:09:
         24:94:9a:57:c7:89:9d:64:c0:a0:00:b6:03:92:a1:e2:a5:6e:
         3f:54:71:d0:70:36:5e:6b:50:12:32:61:48:75:89:54:8b:a1:
         27:e8:0e:7e:58:fc:05:4a:d4:34:64:6a:47:cc:0a:4f:60:6e:
         03:1e:b1:f8:73:48:7a:a2:64:1e:1b:4f:95:c9:80:64:c0:35:
         d9:ac:17:39:e2:6f:63:61:63:05:22:ff:e6:b4:9d:fd:6e:50:
         8a:4d:e9:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsm6CPtHYhZYwI0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
YjQyMTdiMmEtMzM0NC00NzU1LWE1NDgtMjgzOWI1ZWM0MTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5IzQXQ8xV4Q03mx71IF3S0x9QMd/H5fXUxa
B600TAKOa+eG1k4JRt6DfgurAdqYIxcT0NvlnhbKFK+fK6SApYkbM4MFErqJTv7T
OSZNZsqXaehPNVH/GaaFIG8zfTFLIcnuK0gkhYwjV3rQbcRrPS8V+Jo1zlejRQLM
YZRju/RiK+SsPAhxgKFhS0hqQpN7YFbs5HpmGgcZ6TcSo4Kg50FqUKTqQsiIBjX7
Gs/ttjgu5tHOSWP4JCWJZRm91FWFD1NUuUNHYav1+fNV9aZISEnXEHHUBvQU0wVH
iKIl3EE5Gg9WJvVxtkNP7sgJAXdgI+yNg60Ba7hqZN4Si08I2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOX8iXFLpI/NLBPYlYPE+VNuE5s+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNmZGQwZjMtMGVkYi0z
ZDFjLWI3NmItY2UyODMwZDAwOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGA9YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL3iPAH85Nt0LfxBJP/wMD76xxPRLADpdod2mr/IX/s1Ns5ozjY1uF3E
0mGSvzTHzi8XBO5768RD+bDMszv7vNJSiOxWlTcNGrmThDEwrgfV8ivvkuL+nw6s
I9cRwNE3t21jjMfs4S1KSeyeS4Fc2WBKFA46XY8l7XnUni4Hu7QXqia9Czxbdjel
gcR+r7GOO8Ipfw6N2etRCt6fZCRMUSOHCSSUmlfHiZ1kwKAAtgOSoeKlbj9UcdBw
Nl5rUBIyYUh1iVSLoSfoDn5Y/AVK1DRkakfMCk9gbgMesfhzSHqiZB4bT5XJgGTA
NdmsFznib2NhYwUi/+a0nf1uUIpN6cY=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:12:12 2024 by rpki-client on console-ams.rpki-client.org