Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f239b6fa-84c3-3411-999a-941facee50f8.roa
File:                     f239b6fa-84c3-3411-999a-941facee50f8.roa (raw, json)
Hash identifier:          TUbgXBRSq4fQif5iSdq0lEjS7QToUu3Q2NKZWd146TU=
Subject key identifier:   D4:72:2F:65:CF:70:E8:70:0B:D5:AD:22:0C:E3:87:B5:DC:E1:39:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5D19416460CF6BC0E6EA1
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f239b6fa-84c3-3411-999a-941facee50f8.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.99.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:d1:94:16:46:0c:f6:bc:0e:6e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=235864ee-5f11-4ad1-b7c1-cfbc099f10fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:1d:bb:61:1c:f0:ff:9b:07:3a:b0:91:a4:
                    2f:81:23:99:ef:f2:46:7e:2a:0f:e7:6f:b0:07:e7:
                    41:f8:c5:26:de:97:74:e2:f6:21:39:77:db:1e:79:
                    84:4f:3f:30:60:f7:34:5a:2e:de:cf:e6:07:37:9d:
                    2b:e6:2b:68:18:8e:54:96:db:50:d0:74:75:31:06:
                    77:3e:51:a8:86:7b:84:11:5d:81:9b:a8:64:78:fc:
                    2e:bf:2a:b9:cf:fc:dd:07:96:8f:53:11:ed:12:1e:
                    be:54:3a:32:fb:0e:69:b6:a3:ea:7a:7c:4f:21:95:
                    00:c8:26:5c:23:0b:eb:82:59:9f:32:bf:b8:fb:ce:
                    26:6d:44:b6:7c:9f:02:2d:8b:d7:af:9d:d1:e0:b0:
                    78:43:64:f7:6a:78:d0:02:39:83:c6:17:05:c7:92:
                    ed:9c:07:db:0f:ae:a5:b1:44:27:f2:3c:62:08:1a:
                    ca:43:82:55:d0:44:3f:0d:29:e4:3b:5e:ee:66:00:
                    04:40:a9:4d:4f:09:39:fb:b8:ca:18:a8:8d:0f:5c:
                    2a:60:ee:5f:3f:5b:46:c3:28:ae:1c:b3:07:c6:6f:
                    62:fb:91:ca:3a:d7:47:b4:9b:c8:b5:14:4a:be:4b:
                    fc:28:c5:f1:11:77:c8:2b:d2:20:78:54:d8:29:15:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:72:2F:65:CF:70:E8:70:0B:D5:AD:22:0C:E3:87:B5:DC:E1:39:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f239b6fa-84c3-3411-999a-941facee50f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:3d:e5:1f:b8:7b:0b:8c:33:a0:d2:23:2f:7d:ff:dd:17:
         6c:f8:a1:3a:32:4d:f1:02:7a:c3:49:7b:dc:db:4e:2c:7a:f1:
         80:38:9b:c0:94:c6:db:a9:3e:e2:3d:4a:4e:4c:0a:02:2f:b4:
         8b:39:d3:8f:7c:ee:7f:fe:2f:00:83:5e:61:60:ef:51:11:9b:
         8f:2a:62:cc:f0:31:24:b0:fe:43:36:d0:86:c8:20:cc:38:8e:
         cf:29:c9:0f:84:b2:da:41:74:08:89:3e:50:fb:26:3a:95:23:
         7b:c7:38:da:d1:06:13:e5:28:e1:6f:f2:a6:9c:86:8c:3b:82:
         8a:c5:b9:11:a3:65:e8:2f:4b:70:c9:90:2d:dd:6c:33:6f:d2:
         04:8b:85:7c:3f:0c:21:39:ec:c6:be:f6:7a:9f:e2:aa:58:84:
         9b:5e:89:1b:7d:6e:e0:e4:ad:46:5d:a5:68:1e:bb:63:3d:e8:
         8f:cb:35:e5:6f:76:89:04:4f:e8:22:bd:e7:85:44:27:70:37:
         ae:2c:53:34:dd:0b:8a:f3:26:fd:3d:7f:d3:ae:d1:6c:45:b8:
         13:9f:02:83:d2:31:4c:da:fd:c7:17:20:35:11:d3:0c:2f:d8:
         d4:f1:b5:ea:de:5b:c0:43:e0:54:56:55:b1:8c:4e:34:82:dc:
         28:f8:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:37:53 2024 by rpki-client on console-fra.rpki-client.org