Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57d0efc-9ded-39d1-8e79-b222f2c13c5f.roa
File:                     a57d0efc-9ded-39d1-8e79-b222f2c13c5f.roa (raw, json)
Hash identifier:          Htf/rS2S9sYXydAJ/Yuw9WL23ZKmyUIjJdvKWggCOtA=
Subject key identifier:   7C:A0:15:0E:31:E1:F0:E0:1A:94:5E:F8:3D:52:57:48:0D:40:97:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C65F3E0C114DB7DE597500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57d0efc-9ded-39d1-8e79-b222f2c13c5f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.34.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:5f:3e:0c:11:4d:b7:de:59:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a4c6d7a4-037c-458c-a40c-920059daa2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9b:c3:62:a4:db:a2:05:37:ad:73:60:ef:d0:
                    53:a7:b8:c7:9c:e2:e4:e6:f9:aa:49:74:4b:b4:4d:
                    b2:21:3b:b5:20:86:ea:07:dd:5c:21:2f:c3:b1:d3:
                    47:9b:79:04:4e:0b:84:02:33:ca:3b:47:65:c0:dd:
                    0b:dc:ac:30:4f:e0:e0:1f:c4:1f:50:c7:c6:bf:49:
                    3a:6c:cd:91:d7:41:40:6e:bc:e2:9a:b2:d6:0a:64:
                    f8:28:03:80:cf:39:32:43:94:59:c5:1f:a0:ad:a0:
                    e7:35:9f:e3:08:90:52:0e:58:26:f1:93:f2:47:a5:
                    80:4f:15:1f:1e:5f:f8:13:06:b4:92:d8:13:fb:7a:
                    05:b7:11:fa:93:bd:9f:d1:fb:e5:2f:5d:97:cc:4d:
                    00:f9:e1:7c:a5:02:79:5d:41:cd:aa:fc:09:ba:5c:
                    03:ed:fb:0a:50:42:68:d6:e5:46:00:a0:62:0a:34:
                    99:8f:a7:c1:db:c2:ac:bc:2d:65:58:68:73:20:0d:
                    f4:1c:1b:cd:4a:bd:92:68:a6:b1:46:4e:13:ea:0b:
                    6b:79:28:a3:68:63:9d:f8:6f:77:80:69:8c:b4:92:
                    77:a8:85:31:39:e9:b5:40:2d:78:45:b8:3d:4f:28:
                    e6:55:d7:05:98:53:4e:39:1a:00:a2:89:ab:41:fd:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A0:15:0E:31:E1:F0:E0:1A:94:5E:F8:3D:52:57:48:0D:40:97:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57d0efc-9ded-39d1-8e79-b222f2c13c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:83:4f:66:b6:b7:62:cb:54:ee:7d:a1:e1:0a:83:b2:5e:71:
         27:69:83:ee:19:93:54:f9:37:c4:31:61:ea:b3:6f:e2:03:7f:
         d3:e0:98:14:e3:44:76:0c:a8:29:0c:e7:57:76:56:e4:58:12:
         8d:d2:78:6b:01:97:e5:68:c5:49:d9:4e:1a:b9:a9:01:3a:15:
         6c:44:1a:c3:af:7d:dd:e5:cd:81:49:2d:96:b8:f7:f9:5e:b7:
         c6:d7:ed:f4:35:e8:e9:16:fb:19:62:37:4d:99:51:d2:57:25:
         d0:bb:fe:a2:f4:2f:3c:a1:68:84:61:8d:1d:30:23:1d:c1:db:
         d6:79:23:29:74:89:a0:18:1e:b0:00:5b:1c:44:17:88:3f:8b:
         b0:f5:38:20:c0:2d:04:ad:f4:1a:3c:78:68:f8:8d:31:17:ed:
         21:9e:c9:95:5e:bf:b9:9e:60:d7:40:5c:24:ca:da:70:15:fa:
         45:c6:f2:86:8a:0f:71:71:46:1a:21:8a:de:52:70:fc:ce:92:
         b0:58:b9:e3:06:75:f9:3d:72:06:2d:5d:a4:e8:bf:21:c1:df:
         22:df:df:22:57:6e:b8:90:aa:c1:5c:95:ca:4f:10:90:a8:cf:
         73:10:cd:83:aa:c0:8c:79:ed:0b:bb:ed:e7:12:ce:10:76:66:
         d9:80:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:02:36 2024 by rpki-client on console-ams.rpki-client.org