Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90551b5-6aea-39d9-82a2-b052a9ba3dcb.roa
File:                     a90551b5-6aea-39d9-82a2-b052a9ba3dcb.roa (raw, json)
Hash identifier:          T0w0n8XRrCY+iFraobCNMZwtvzE2+LCmahtBmxAIpKc=
Subject key identifier:   AE:CE:E1:03:5C:C9:55:36:67:DE:64:3F:1A:68:80:05:A9:0B:03:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBB688E267A5AE3A6F9780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90551b5-6aea-39d9-82a2-b052a9ba3dcb.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        24.104.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:b6:88:e2:67:a5:ae:3a:6f:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=ad09eb26-df48-4e5d-b9c5-943c3e5873f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:11:3c:53:c5:63:bc:ac:7a:88:53:ae:55:
                    6c:02:27:d6:e7:f1:87:b9:19:77:78:76:aa:7b:20:
                    16:f0:42:59:ed:13:83:9f:ed:70:5b:51:1d:8b:ae:
                    95:0f:37:a9:f6:21:4c:e6:c8:a9:a9:54:6f:fc:80:
                    1b:8e:16:70:b7:73:78:ff:41:ef:a5:e7:22:ef:30:
                    5b:09:fa:39:8a:02:8e:3b:37:9f:32:4c:0a:fd:f0:
                    ec:e4:ea:10:6e:af:97:3a:b7:df:10:a7:39:b1:b1:
                    b2:c9:c4:67:30:6b:05:5e:f8:66:27:5f:cc:87:40:
                    3e:30:28:ad:3e:fb:1e:ba:23:5f:13:28:20:56:97:
                    aa:6e:ba:62:a8:7b:f8:3a:f8:cb:5f:81:67:50:db:
                    ba:1e:8e:a6:84:bf:d3:33:07:a6:78:26:1e:6b:e0:
                    11:e2:2e:d2:cb:f5:32:be:e3:7d:5d:97:b0:a9:3f:
                    48:d6:ce:76:41:5b:8b:52:85:89:2d:5a:49:34:65:
                    4e:8b:43:5c:65:c1:a1:a7:21:dd:fa:6c:e1:47:ff:
                    c3:3f:41:97:61:0b:a4:8a:a0:d8:43:75:cb:fb:aa:
                    a7:74:4d:42:98:f1:17:59:2b:49:d6:e9:65:79:03:
                    fb:58:c9:8a:a3:9d:85:29:57:ce:87:b4:5a:c8:b0:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CE:E1:03:5C:C9:55:36:67:DE:64:3F:1A:68:80:05:A9:0B:03:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90551b5-6aea-39d9-82a2-b052a9ba3dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.104.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:ac:b1:89:88:ac:c9:1f:b3:60:7c:fd:2f:d5:e3:33:41:
         3e:17:27:36:c9:9b:cb:c4:5e:ed:86:08:5a:18:7e:38:b4:cd:
         99:a2:c7:6e:f4:b2:69:27:1d:18:7b:4a:39:79:de:2e:5c:c5:
         e3:a5:1d:4c:4b:ac:67:31:de:e4:f6:57:5e:30:f0:eb:57:05:
         05:16:3a:90:c9:4e:ab:9a:8e:72:4c:f7:cf:13:b0:76:25:c7:
         68:1f:c0:8e:9f:4c:be:3f:a1:b2:66:c4:f4:22:aa:3d:a2:4a:
         07:7b:3f:ed:29:31:8e:3a:0e:9b:52:89:10:e4:d5:a4:33:12:
         0c:fa:73:dd:02:41:0b:8c:88:fe:9d:18:74:df:20:a2:99:8a:
         ea:81:0f:4e:f1:3e:18:a5:f3:85:b6:7d:0c:d4:7a:b0:74:b9:
         12:e1:94:de:ea:ae:43:92:50:63:34:6c:12:73:83:f1:1b:07:
         4f:47:f3:14:98:a3:44:64:ef:e2:d1:2b:76:81:95:31:e4:bf:
         f5:23:30:6f:aa:62:6c:30:b3:90:64:23:ea:24:52:db:10:cb:
         56:ec:be:cd:25:38:0a:fa:84:94:ab:11:9c:48:da:44:59:30:
         2d:8d:83:4b:93:05:1f:12:e3:8f:62:62:b0:70:80:bf:f1:fa:
         e5:18:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:26:04 2024 by rpki-client on console-fra.rpki-client.org