Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa
File:                     f43ca66a-a36b-341e-bc5d-391204812929.roa (raw, json)
Hash identifier:          mL+/VHlcZ2r2VL/9OibvgAgQN5xdiLwFN8TQDSSEEbg=
Subject key identifier:   9A:FA:FE:29:42:F0:6F:70:72:22:EB:8F:32:CA:4F:75:39:2A:9E:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABE00B7811D50BE0DBF780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        24.7.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:e0:0b:78:11:d5:0b:e0:db:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4eb8a882-5649-4fe2-b294-80f72f00130d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:1b:73:6d:32:7a:f2:ac:21:93:f0:f5:bc:
                    83:1b:d0:cd:93:94:70:d6:df:ed:b7:b2:72:4f:98:
                    c9:8f:8d:80:43:57:31:85:ca:1f:bc:9e:12:2f:16:
                    76:e5:08:aa:95:4c:a0:b3:19:cb:9b:64:17:24:63:
                    6f:24:e9:d7:1f:e2:f0:ea:75:66:54:0b:e0:6e:58:
                    ee:1c:07:8b:78:3e:2b:af:2f:2c:1d:99:73:74:71:
                    d0:4d:34:0c:4d:9a:3a:ae:e5:94:4b:b3:f4:4d:b7:
                    e4:cd:90:c1:84:6a:59:03:83:ac:0f:54:a7:fc:76:
                    c6:ee:6a:d1:65:97:4e:83:9a:b9:9c:13:d5:bb:78:
                    b9:b2:15:0b:28:53:15:76:55:b1:bc:3d:62:ab:b5:
                    44:14:e1:bf:e8:b7:d6:6c:7a:27:fd:4f:5b:b2:23:
                    a4:aa:89:d1:12:9c:97:f2:38:25:ed:e8:63:95:24:
                    b2:40:b1:e2:0d:13:28:bd:3a:43:82:aa:20:8f:35:
                    07:46:5c:e6:7e:f4:08:1e:9c:4b:f6:59:67:d7:e7:
                    79:5f:db:8e:a7:79:70:78:49:a9:04:2c:c6:c3:70:
                    8c:79:e0:c2:11:5f:5f:6a:73:fe:1f:4c:b2:3d:29:
                    15:cf:43:56:48:cd:2c:d3:33:65:92:54:89:6c:c7:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FA:FE:29:42:F0:6F:70:72:22:EB:8F:32:CA:4F:75:39:2A:9E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:e4:76:50:39:dc:7c:05:e8:8f:96:5e:81:bb:fb:d5:ee:
         cb:a7:65:fa:ae:92:54:ae:45:23:5a:92:24:9d:cc:0e:c1:2e:
         35:ea:e6:d1:45:6a:4a:f8:01:24:91:84:25:e2:dd:31:2d:0a:
         b4:8a:a1:49:f1:a0:33:49:6c:8c:56:54:7b:f4:74:02:c9:6e:
         51:b3:c2:13:79:ac:8b:1b:01:bc:22:06:32:08:e2:bc:32:90:
         41:4f:81:11:69:02:9d:27:b9:d0:d8:f3:e3:14:8d:81:7d:21:
         38:6b:01:43:7d:c1:54:7f:fa:9d:b0:35:89:84:db:c4:a6:60:
         59:d2:67:ba:24:73:c9:52:6c:4b:c4:f5:f3:3d:de:16:44:40:
         cb:7a:bd:f6:d3:b8:89:fb:9a:70:e1:92:86:89:25:8c:06:f5:
         99:21:7f:40:84:c4:7b:a4:51:c7:78:4c:3f:77:47:f3:6c:2b:
         62:c7:2a:b4:f6:f0:3b:34:c0:41:32:d7:f0:e1:b6:84:d4:55:
         4c:88:d3:3e:e0:a4:c7:39:89:45:00:d5:73:af:94:b4:ca:0b:
         cf:8a:f1:f7:90:eb:e8:f9:bd:ad:fa:f4:fc:8e:c4:93:b0:1a:
         b8:34:0f:0b:84:72:7b:de:51:87:6a:bf:9b:32:b7:5b:fa:d7:
         b5:9f:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:23:57 2024 by rpki-client on console-ams.rpki-client.org