Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c76a747d-7405-3f81-bd6b-5e180250c14b.roa
File:                     c76a747d-7405-3f81-bd6b-5e180250c14b.roa (raw, json)
Hash identifier:          zxOqm9l4PQbUDi1pVQcwnfG3RYf4qrQQy9D5xZI3w1Q=
Subject key identifier:   CD:08:3C:F8:A1:F4:40:EC:FE:CD:38:DA:97:37:0A:F1:F6:6F:FF:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C65DE87F4320B9A2DCFB38
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c76a747d-7405-3f81-bd6b-5e180250c14b.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        24.34.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:5d:e8:7f:43:20:b9:a2:dc:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=fc8e8158-d9ee-40cf-95de-145079f0a111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:35:ce:74:b9:39:41:eb:92:6d:ea:a8:3f:
                    73:e3:21:5d:b3:b4:9f:a2:5b:50:77:ba:02:32:88:
                    dc:2a:6e:1a:e7:0c:5c:fc:92:25:98:78:74:41:f4:
                    29:8a:53:a0:a2:34:97:85:18:51:e5:28:0c:aa:60:
                    67:4b:6c:6f:e0:48:7c:1b:c1:7a:3b:d2:71:70:d7:
                    35:99:e2:5e:e8:42:0f:a1:04:c6:4f:19:e5:92:c6:
                    36:2c:60:f2:16:b3:c9:12:e7:5b:15:af:aa:c5:a8:
                    3c:c4:e2:67:87:db:4f:fc:73:8c:e5:a8:d1:02:ea:
                    6c:5b:9d:ba:68:44:7e:2d:e1:b0:c0:16:b2:ff:25:
                    93:8d:48:17:f9:da:07:6e:b0:ba:f5:4d:14:bc:bb:
                    f7:3f:43:62:93:3c:93:74:c6:84:0c:26:40:60:b8:
                    2e:a6:59:77:77:04:12:4e:96:68:4c:a5:1e:db:73:
                    52:a0:f0:97:0f:09:38:94:01:6c:ae:56:d8:14:b5:
                    9f:a5:c4:b1:c8:94:1a:e9:4f:ec:91:c5:28:96:e8:
                    55:2b:a4:d0:bf:2d:c6:90:96:76:2d:22:43:30:12:
                    93:8a:a8:2a:a5:0e:e4:89:a3:7f:46:2e:ee:32:b7:
                    26:93:25:51:7d:6c:45:7c:6b:65:14:ac:5b:36:e7:
                    80:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:08:3C:F8:A1:F4:40:EC:FE:CD:38:DA:97:37:0A:F1:F6:6F:FF:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c76a747d-7405-3f81-bd6b-5e180250c14b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:58:b4:7d:d2:c2:9e:4e:7f:69:f0:90:30:74:fd:e4:3f:5a:
         ae:aa:81:eb:6b:b7:40:cb:2f:96:63:0b:b7:20:a2:8b:19:cd:
         ad:2d:ec:58:3c:d9:f2:b3:62:b5:15:51:8e:98:3a:0c:f8:fc:
         f5:41:d9:79:46:7e:e4:6c:88:26:6b:9d:6c:17:b3:53:9d:f3:
         9b:51:34:4d:ad:62:d8:93:23:2d:30:66:29:c9:24:7e:21:03:
         c3:24:fc:56:c5:d0:14:bf:fd:d0:a9:52:2a:b9:ce:d0:4e:88:
         4f:d4:aa:99:5f:39:8c:f6:d0:e7:57:64:96:1a:7c:3b:f5:a9:
         16:30:7e:ed:3c:ca:b3:78:b7:3d:16:47:a3:ea:35:f2:5e:69:
         17:8a:f8:1b:ce:80:b8:61:a0:1b:23:13:48:6b:1a:43:0d:99:
         09:0c:3b:8c:5d:43:e3:16:a7:a6:7a:80:f4:89:32:fd:e3:51:
         4d:d2:db:cf:99:2f:36:83:fb:80:ef:51:9a:52:4d:13:f4:00:
         e3:2c:7d:09:d3:49:a2:cd:5c:98:03:f8:55:48:2b:02:2f:78:
         50:74:27:11:b4:e7:be:7f:5b:ed:53:b7:92:f6:7a:c9:e2:25:
         a9:bf:4e:75:b2:ab:b8:a3:de:bc:ad:fd:1e:9f:db:f2:39:84:
         d7:6a:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:05:41 2024 by rpki-client on console-ams.rpki-client.org