Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2edd654-6896-33e6-8ade-70be73b9c534.roa
File:                     d2edd654-6896-33e6-8ade-70be73b9c534.roa (raw, json)
Hash identifier:          r7VydnJPU92Pux1FvS3I6LQmiu7a9zPKJy6hIt+lxjE=
Subject key identifier:   87:D6:F0:40:EF:75:3F:DE:55:E3:4C:F7:70:6C:0A:31:A3:F1:25:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBB5FFB27F20102F1CB640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2edd654-6896-33e6-8ade-70be73b9c534.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        24.12.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:b5:ff:b2:7f:20:10:2f:1c:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=26673e00-5a8f-4097-b299-a051e8e4b957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:95:e3:93:86:05:c2:6b:b7:e3:99:dd:8e:
                    fb:d6:0f:16:75:65:ea:bb:39:78:87:fe:93:b6:7f:
                    8b:e0:62:1f:c3:83:0f:32:d8:2f:76:73:0e:e7:1d:
                    76:07:46:f5:70:e1:6a:13:2a:51:5d:c0:23:a0:1c:
                    6a:38:81:a2:be:18:e4:2a:00:8e:37:a5:88:32:93:
                    ef:a5:af:f3:4c:3c:0d:4f:42:f9:49:03:c6:c5:d1:
                    b9:f4:ea:98:8e:12:62:76:b9:22:6d:a3:f9:48:c2:
                    61:e4:e1:e9:b4:4a:84:19:7e:e7:01:b9:23:6a:8e:
                    84:9d:da:42:5c:ac:dd:df:f3:c0:74:af:93:ef:d3:
                    d4:ae:c9:08:37:96:f3:86:6a:55:fa:21:45:f6:e5:
                    dc:02:b6:9b:e8:c7:0f:5d:3c:0d:8d:2b:bd:5e:6d:
                    9c:d3:a6:7f:ed:05:a5:2c:99:2d:5b:7e:e4:16:05:
                    55:bd:db:0b:74:3b:0e:68:79:9d:e4:3d:32:5e:18:
                    8c:56:ce:12:95:d5:27:ed:0b:47:39:fd:7e:23:80:
                    b8:a9:c1:5d:56:bd:f7:dc:2e:8d:83:35:5b:23:1b:
                    ec:b0:ef:4c:bc:02:d9:83:ca:d3:a5:7a:7d:77:3a:
                    bd:16:e1:85:ae:53:99:fb:85:b7:f2:bf:2e:a7:d8:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D6:F0:40:EF:75:3F:DE:55:E3:4C:F7:70:6C:0A:31:A3:F1:25:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2edd654-6896-33e6-8ade-70be73b9c534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.12.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ee:d3:b8:b1:90:f8:f7:49:e4:ca:59:48:0f:8b:dc:5e:83:
         71:c5:9d:8e:ec:52:f7:2e:e4:91:07:73:1b:8f:e3:26:60:2a:
         cf:95:c3:1d:d9:ce:10:a7:f4:1c:97:14:a5:47:71:c5:60:62:
         20:1b:b5:35:9e:d1:f7:b2:57:7b:d2:d6:31:b3:d2:90:42:da:
         c0:6e:f7:34:85:21:92:9f:00:6a:da:65:6b:75:6a:a7:1e:13:
         2b:46:f2:6e:0e:79:4b:e7:fb:14:05:04:81:ac:28:3d:43:76:
         d3:3a:94:e1:2a:dc:60:0a:b8:15:6e:d1:b0:98:e3:01:6c:9d:
         20:23:7b:6c:fd:2c:82:e2:cf:db:4e:f7:92:ac:aa:d1:ff:f3:
         a3:fb:c2:61:4e:1d:f0:69:23:42:b1:3f:9e:5a:95:e3:a5:3a:
         fa:d5:cd:cb:9b:9d:73:8e:39:67:7c:49:25:cc:13:ca:52:c7:
         3c:38:38:93:62:70:fe:26:c3:97:d7:61:db:2b:6a:c1:c3:09:
         60:69:86:0b:35:09:6f:eb:af:e1:8b:b5:9f:cf:c1:f3:86:38:
         93:2d:3b:a9:52:33:33:bd:f6:d8:9b:d5:bd:c7:58:08:1f:fb:
         54:79:7c:ff:5e:86:b2:9d:e2:7a:f1:dd:ec:c2:3a:ad:4e:18:
         ba:7e:ff:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:33:28 2024 by rpki-client on console-fra.rpki-client.org