Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d502866e-956c-3607-834a-cfaa0982d52d.roa
File:                     d502866e-956c-3607-834a-cfaa0982d52d.roa (raw, json)
Hash identifier:          /HHaWswIr98pxopA/g9D/L+MVPz0RM3uNtY33om5Toc=
Subject key identifier:   39:B6:22:30:72:B2:5E:C3:0B:92:CE:91:5D:9A:AF:6E:A8:4D:08:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF194F9C904E3F7BC68D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d502866e-956c-3607-834a-cfaa0982d52d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        24.60.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:19:4f:9c:90:4e:3f:7b:c6:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=dd3887e7-0ca0-4f2b-9378-4539a4686c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:51:85:9d:f2:76:ab:a7:be:b2:c5:9b:2f:
                    90:5a:19:c2:e7:c2:52:20:87:06:75:e2:b5:a8:c9:
                    03:c7:29:3e:bb:e7:e5:b8:89:ee:e0:55:e6:1c:ca:
                    0e:d7:fa:87:56:30:61:c1:af:83:b7:73:19:4b:e0:
                    82:90:39:93:77:e1:3a:83:be:60:06:78:02:c9:4b:
                    2b:f4:5c:1e:1c:60:e0:ae:63:12:71:1f:7b:e5:8c:
                    4a:74:91:1d:e7:94:27:69:68:8c:49:c2:b1:d4:0b:
                    c5:d4:93:94:08:4e:d6:4d:c4:13:52:28:22:fa:bd:
                    8d:a4:52:82:71:42:85:d9:6d:5e:06:2f:b5:db:10:
                    07:28:27:67:39:b1:97:ef:76:c6:8f:4d:c2:f2:c2:
                    a8:a6:74:ec:15:4a:9f:54:15:d9:92:db:1d:77:80:
                    b9:31:d7:99:d4:f4:a8:db:1f:11:ae:cd:46:e7:0c:
                    53:e5:45:20:77:80:47:16:90:8e:24:10:e1:b8:3f:
                    0d:35:d3:55:a8:de:3b:72:68:15:fb:b4:0c:b1:69:
                    a1:b8:aa:1e:0d:46:fc:54:bc:e7:29:59:23:af:80:
                    79:73:29:7b:f1:84:bd:ef:55:af:42:1a:bb:4e:b0:
                    99:0d:1f:f0:f1:01:7f:bf:26:a7:3d:7a:7d:71:73:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B6:22:30:72:B2:5E:C3:0B:92:CE:91:5D:9A:AF:6E:A8:4D:08:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d502866e-956c-3607-834a-cfaa0982d52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.60.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b7:04:07:fd:2b:b6:3b:8c:e8:81:71:41:76:56:5d:ba:9d:
         02:07:35:61:92:b8:bf:45:c6:ed:2a:df:4a:87:62:88:76:c4:
         4e:62:16:6f:be:58:b2:7c:91:ad:22:4f:af:5d:f0:90:94:49:
         13:44:c4:40:35:9e:bf:37:21:f2:b8:19:07:ea:3a:0a:f3:16:
         9d:8a:22:d0:f0:54:49:b6:10:de:e6:80:9c:5c:4b:81:6c:95:
         4d:41:a2:92:92:68:85:f6:25:c0:a6:5a:05:b1:11:18:e4:70:
         a6:2c:ff:7e:2b:8c:03:06:de:70:9a:80:cd:95:63:99:fd:5e:
         be:86:9d:29:b8:9b:5d:5e:6c:ee:6f:45:64:d3:77:e1:cc:4c:
         45:e6:20:64:14:83:01:de:22:57:57:2e:1d:cb:d9:4f:de:1f:
         4a:5b:1c:b5:be:2c:3f:23:98:bb:c4:48:2b:00:14:0e:70:22:
         f8:24:da:e5:42:77:49:2b:71:76:1a:e4:eb:4e:14:01:c7:d3:
         4d:98:32:fb:04:a8:93:0d:7b:f1:fa:c6:42:1f:a0:3f:68:12:
         32:ea:98:3f:6e:90:d9:c8:d1:04:76:a5:c0:dc:8f:b8:b6:da:
         b0:ee:d2:6a:d0:ec:ac:92:4f:69:53:dc:d3:cd:fd:5d:bb:44:
         0d:e6:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:56:54 2024 by rpki-client on console-fra.rpki-client.org