Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d739302a-345e-3fe8-9777-9a05f9de87df.roa
File:                     d739302a-345e-3fe8-9777-9a05f9de87df.roa (raw, json)
Hash identifier:          6nygstNVYLBloL74cXdcNiaP6udKNRsqSWq9pjkynUY=
Subject key identifier:   E2:7C:61:11:5D:82:30:35:21:6A:6B:E3:66:1E:E2:F4:14:0C:35:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C5DA08A676E0B84B3BE100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d739302a-345e-3fe8-9777-9a05f9de87df.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        24.20.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c5:da:08:a6:76:e0:b8:4b:3b:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=0c14250f-32b9-47b1-95d2-52391e7ebd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:9f:5a:82:4f:40:e9:b9:c2:9a:19:a0:b8:
                    6a:0c:63:57:18:16:3c:90:80:82:9c:b4:71:e3:ee:
                    de:de:2b:3c:c7:b9:01:cf:a3:ff:c6:58:e6:76:05:
                    5b:f6:a3:8c:52:59:40:b6:83:08:d6:b7:a1:63:6c:
                    9e:93:c8:80:67:b4:2b:19:66:c1:ae:c9:1a:6a:03:
                    01:67:60:ab:52:0d:ac:96:9b:65:52:4d:44:b6:1c:
                    c7:6a:ea:4d:ad:f3:3c:6b:7c:d0:e8:08:5f:6f:a1:
                    0e:43:5c:53:6d:00:9c:b8:55:59:04:36:91:0e:64:
                    3c:cb:2c:e9:6d:85:2e:a2:6f:af:3d:b6:9b:8e:5b:
                    74:db:96:60:48:3b:ec:8d:f2:22:f8:9b:51:5d:4f:
                    f6:7e:09:5f:8f:45:ce:1f:91:5a:a5:b5:43:38:57:
                    89:16:f1:4f:8f:e0:ae:51:8a:d2:28:e4:0a:3f:ea:
                    cc:be:e3:22:b4:df:0f:c9:4d:1a:e8:c0:46:ee:07:
                    05:c8:cc:0d:2a:0e:8a:5e:d5:b8:8a:47:b2:fd:f8:
                    62:97:9a:fc:d4:79:2a:5b:5b:48:7b:22:0d:71:fd:
                    56:c0:3c:ec:f1:60:d4:be:70:78:6e:f8:e6:aa:2b:
                    4e:d6:92:4b:3d:73:51:8b:fb:dd:ea:2b:04:d1:c7:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7C:61:11:5D:82:30:35:21:6A:6B:E3:66:1E:E2:F4:14:0C:35:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d739302a-345e-3fe8-9777-9a05f9de87df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.20.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:70:c2:f4:5d:21:6a:de:cc:21:c9:ce:0c:54:6f:b0:76:d4:
         d3:0a:ae:ea:69:77:ae:b8:aa:59:84:cd:7e:9d:c5:ed:e6:2b:
         dc:e2:3d:f1:86:df:08:03:82:94:1a:ad:11:2b:59:43:69:e6:
         6d:32:7f:00:93:eb:5e:0e:33:9c:8a:d3:d8:d0:df:2a:45:a6:
         ca:8b:5c:d3:8f:ae:25:5a:04:e4:02:eb:dd:db:7d:f8:88:be:
         e3:d3:ed:40:1f:fe:15:ef:1d:c4:79:66:ba:4a:3a:d1:d9:99:
         95:d5:a3:72:4b:04:25:65:8a:50:83:07:ca:ae:bd:d6:5e:48:
         d4:a4:74:6b:a2:0c:f3:a4:99:bf:cd:d8:a3:99:7d:d2:e5:72:
         1a:54:e2:14:80:12:75:b2:58:8d:b0:57:b1:f0:77:2c:58:01:
         9f:08:5f:c8:f2:d1:29:0b:14:e5:91:f6:a3:dd:57:f0:b4:5e:
         5f:dc:fa:9c:04:ee:91:be:28:f2:6e:28:25:b3:2f:ad:4d:af:
         dd:9f:14:c6:a9:92:50:70:e9:47:af:7c:e3:e4:0b:99:69:29:
         64:40:b7:64:af:cf:51:d2:3d:61:c2:e6:33:e5:6c:b3:97:9a:
         59:4c:d5:b7:bd:f0:33:0f:9b:be:98:bd:78:ad:e4:a6:bf:03:
         88:b9:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:07:00 2024 by rpki-client on console-ams.rpki-client.org