Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bc4160-c0a4-39aa-b676-7f2e2811ad1d.roa
File:                     b2bc4160-c0a4-39aa-b676-7f2e2811ad1d.roa (raw, json)
Hash identifier:          FNLIU1I37FRhF2itR5bWngJddLWt8ooVJy636ukrFKk=
Subject key identifier:   30:08:72:8B:93:D5:E3:48:22:3E:0E:EF:30:0E:77:11:8F:2F:DB:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5603E4E4EC7FA5D467860
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bc4160-c0a4-39aa-b676-7f2e2811ad1d.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.125.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:60:3e:4e:4e:c7:fa:5d:46:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=a1a60c86-0ccd-420a-8b48-fd72b24296c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f4:7a:0e:77:2c:9c:1a:c7:b5:c2:7a:fd:89:
                    a5:41:b1:db:34:2c:be:6a:5e:17:38:68:46:35:0c:
                    c4:54:bf:c5:28:51:bf:00:93:b2:58:a0:c0:8d:ea:
                    97:d5:10:68:34:ed:a6:e4:4f:d4:56:b7:13:a0:30:
                    29:94:8c:79:2e:11:de:e2:3c:fe:3d:2d:ca:6e:f8:
                    17:9e:fc:fc:13:87:40:5a:1c:89:ba:4f:8c:3c:69:
                    ac:b2:ce:09:5f:b0:ad:f5:ce:28:47:28:71:42:b1:
                    1d:9a:8a:4c:0d:84:ab:e7:8c:5f:3f:2d:c2:5b:76:
                    07:0a:5c:38:dc:aa:1f:b3:3f:13:c0:6a:84:4b:2b:
                    65:81:9c:80:51:23:dc:ea:d3:47:ec:4f:40:9e:71:
                    c6:64:cb:72:e0:b5:9c:c8:23:55:67:91:4a:2d:75:
                    bd:57:24:fd:74:91:ea:24:bc:fc:ec:4a:63:da:45:
                    1a:f2:05:fb:38:c9:e7:0a:f8:f3:9d:f7:76:5b:eb:
                    db:8e:3f:01:98:d4:3d:6d:d9:e6:c1:f2:bf:ba:4a:
                    84:de:0e:d6:b6:7c:00:fd:4d:9e:cf:19:17:58:2e:
                    ec:5c:cd:4a:8d:48:35:a5:84:43:71:4a:ae:2e:e7:
                    94:4f:f2:52:07:44:e6:4a:35:0c:0c:88:08:16:a8:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:08:72:8B:93:D5:E3:48:22:3E:0E:EF:30:0E:77:11:8F:2F:DB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bc4160-c0a4-39aa-b676-7f2e2811ad1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.125.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:4b:af:0a:d7:a3:39:25:b7:42:6e:2e:cc:30:99:01:74:07:
         59:b0:49:1e:23:b2:de:27:98:7f:15:b2:89:3e:24:f5:1f:47:
         39:02:ce:a3:3b:b4:dd:a8:b9:52:a2:d0:32:29:53:08:93:04:
         29:89:fe:77:a6:60:46:e4:c2:c0:ec:f1:1e:fd:3d:94:51:64:
         a5:b5:d2:37:08:3d:8b:a3:e0:ec:33:2c:b9:ab:b7:68:4b:53:
         94:06:8a:e6:a9:74:20:2d:75:f4:ec:37:00:a1:38:b7:63:3d:
         86:a8:fe:65:c3:c9:96:72:fe:60:73:ff:a8:e3:16:21:10:28:
         3b:45:9a:6e:8c:04:80:1d:91:7d:a0:8d:16:90:29:95:6b:26:
         50:7c:a8:a9:84:f1:2a:04:a4:e7:9c:a1:f5:be:88:14:7c:ff:
         40:b8:c3:96:d7:73:30:57:a3:fb:9b:67:63:37:76:43:35:f4:
         a5:78:d5:ec:bb:dc:b6:b3:73:c7:01:f7:a1:0b:07:7b:5f:31:
         0a:f1:df:a7:ba:91:f2:9c:d6:42:6e:c8:f0:50:9e:f2:23:0e:
         94:58:56:41:91:6e:1a:a2:97:d9:f0:b7:b3:9e:42:74:30:6d:
         11:31:55:de:02:fb:9e:13:36:65:8c:fe:4c:b7:e0:16:c3:d6:
         ad:b4:4f:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5WA+Tk7H+l1GeGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
YTFhNjBjODYtMGNjZC00MjBhLThiNDgtZmQ3MmIyNDI5NmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vR6DncsnBrHtcJ6/YmlQbHbNCy+al4XOGhG
NQzEVL/FKFG/AJOyWKDAjeqX1RBoNO2m5E/UVrcToDAplIx5LhHe4jz+PS3KbvgX
nvz8E4dAWhyJuk+MPGmsss4JX7Ct9c4oRyhxQrEdmopMDYSr54xfPy3CW3YHClw4
3Kofsz8TwGqESytlgZyAUSPc6tNH7E9AnnHGZMty4LWcyCNVZ5FKLXW9VyT9dJHq
JLz87Epj2kUa8gX7OMnnCvjznfd2W+vbjj8BmNQ9bdnmwfK/ukqE3g7WtnwA/U2e
zxkXWC7sXM1KjUg1pYRDcUquLueUT/JSB0TmSjUMDIgIFqinowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAIcouT1eNIIj4O7zAOdxGPL9tuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJiYzQxNjAtYzBhNC0z
OWFhLWI2NzYtN2YyZTI4MTFhZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH0KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALBLrwrXozklt0JuLswwmQF0B1mwSR4jst4nmH8Vsok+JPUfRzkCzqM7
tN2ouVKi0DIpUwiTBCmJ/nemYEbkwsDs8R79PZRRZKW10jcIPYuj4OwzLLmrt2hL
U5QGiuapdCAtdfTsNwChOLdjPYao/mXDyZZy/mBz/6jjFiEQKDtFmm6MBIAdkX2g
jRaQKZVrJlB8qKmE8SoEpOecofW+iBR8/0C4w5bXczBXo/ubZ2M3dkM19KV41ey7
3Lazc8cB96ELB3tfMQrx36e6kfKc1kJuyPBQnvIjDpRYVkGRbhqil9nwt7OeQnQw
bRExVd4C+54TNmWM/ky34BbD1q20TwA=
-----END CERTIFICATE-----
Generated at Sun Dec 22 16:40:22 2024 by rpki-client on console-ams.rpki-client.org