Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa
File:                     d204249c-9705-3ad2-9c85-32345972ac3a.roa (raw, json)
Hash identifier:          cLq4ad3Am83SFpmjMgNVRRDubq7XHvb7d6VaaWdJXX0=
Subject key identifier:   CC:F3:44:00:72:B1:F6:40:E8:01:44:0E:B0:CF:33:F1:AA:CD:12:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB13AD880AEF0D6326F800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        24.118.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:13:ad:88:0a:ef:0d:63:26:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=600eea9a-1813-4c23-bd8a-3cdba13b5704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:09:ca:12:20:2c:fa:b6:92:d4:2a:de:90:
                    21:32:02:44:0a:8f:1c:ef:0d:d2:67:96:bb:62:42:
                    06:ab:1b:ea:54:65:ca:ca:7d:f1:51:12:a1:f5:51:
                    8f:66:97:da:9f:20:57:57:73:63:e7:28:ed:37:6b:
                    f2:33:f6:14:6e:8f:39:24:f9:58:75:60:4c:91:dd:
                    7c:9e:2a:07:38:02:21:4b:f4:b1:53:66:96:91:8f:
                    9e:a0:24:9d:17:1c:5d:7c:2b:09:cd:ea:c3:56:a2:
                    95:68:a3:cb:02:36:40:b1:f5:42:05:23:e5:19:73:
                    bf:71:fe:79:91:a4:af:ae:5a:31:03:1f:ca:4e:9f:
                    49:c4:68:b8:42:91:4b:63:49:ef:7a:d7:17:cd:85:
                    d3:aa:c5:8d:4c:c2:58:50:44:e4:01:e9:f3:52:c5:
                    0f:8b:c3:4d:48:14:f1:c3:49:58:53:ab:db:77:31:
                    7e:f4:6a:3b:60:89:bf:65:59:35:62:ef:fc:2c:b9:
                    73:33:19:b5:de:a4:6d:3a:25:22:6f:ff:7a:27:f2:
                    13:59:d5:a2:12:d5:40:ca:5c:30:73:e6:8e:db:aa:
                    76:d3:33:af:b7:aa:49:fd:b8:94:d7:94:b1:15:e1:
                    af:80:09:a9:d7:4b:44:d0:5c:59:f4:f1:2f:a7:1f:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F3:44:00:72:B1:F6:40:E8:01:44:0E:B0:CF:33:F1:AA:CD:12:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d204249c-9705-3ad2-9c85-32345972ac3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.118.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e4:ec:65:6a:8d:ed:bd:ee:1c:6b:2f:71:12:fe:96:cb:da:
         fc:ef:1f:54:14:d1:be:e9:97:3a:aa:da:96:e1:cc:39:1e:16:
         52:67:71:dc:f8:88:49:b1:a7:50:46:05:8f:dc:26:01:b7:85:
         4e:66:c0:4a:03:79:2f:fd:01:6b:df:a8:e4:ac:f1:02:fd:05:
         cc:4c:45:e1:55:a6:ca:3e:c6:5e:a2:f8:76:81:4f:11:12:9f:
         ba:1a:2d:c8:db:5f:af:24:eb:5f:ad:d5:d4:6e:d1:e2:9e:12:
         df:12:ae:63:59:d1:a1:7e:94:d4:2b:f9:69:98:1b:41:e0:09:
         0e:84:fb:da:bf:67:6b:7a:6e:f3:43:db:d2:10:1d:60:00:92:
         c4:e6:a4:f1:16:2d:68:14:af:91:bd:46:2f:8a:41:b1:ff:c2:
         6a:e0:3d:42:e1:9b:46:a1:76:dc:10:6f:67:9e:21:92:19:77:
         7b:e9:e0:4a:28:b6:f8:de:43:92:b0:50:8f:55:dd:e9:dd:03:
         45:a0:41:0a:28:32:03:fc:83:c4:d5:a2:e4:0c:d2:b6:80:40:
         3c:9e:94:bf:de:25:23:e8:d6:3f:37:f6:e2:35:42:30:20:ce:
         33:e0:10:7b:cb:4b:bd:13:e7:57:19:a1:48:32:6f:1e:83:b4:
         a1:a4:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 11:14:00 2024 by rpki-client on console-fra.rpki-client.org