Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d452308-b5ae-3985-8b29-e02a73e505a9.roa
File:                     6d452308-b5ae-3985-8b29-e02a73e505a9.roa (raw, json)
Hash identifier:          vdvsu8bIsykrp5kqWZolxt3vLD4OpyyALehSP7rwTGg=
Subject key identifier:   E6:42:18:28:98:23:F8:CB:D2:93:E3:AA:47:92:69:B8:53:30:06:D8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459E935BC1FA723C72256C3940
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d452308-b5ae-3985-8b29-e02a73e505a9.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     22006
IP address blocks:        165.254.24.240/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:5b:c1:fa:72:3c:72:25:6c:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=4963e133-b87c-4af8-bfaa-04748b9bad7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:75:c6:4e:5c:f0:79:26:3e:5c:db:9e:04:
                    d6:52:d1:93:24:27:c0:96:86:4f:96:d7:d1:2f:30:
                    32:4f:6b:7f:12:72:1a:99:40:f2:74:8c:70:db:62:
                    08:d9:5f:5a:f6:ca:c6:26:b3:66:eb:23:41:bb:ed:
                    90:a8:2a:7f:8d:9f:53:fd:b2:80:72:da:a4:a1:ae:
                    d9:dd:7a:b6:92:a9:11:69:1c:cd:21:cd:7e:e9:41:
                    fb:71:a9:0f:7c:2a:76:67:be:bd:a3:4f:e7:e4:f4:
                    6e:4d:5c:41:80:cf:db:e5:88:c2:1d:ef:33:e0:d8:
                    66:da:5c:55:e8:7b:85:03:01:81:a0:0b:d1:18:27:
                    20:6a:14:88:02:57:2b:ed:ed:95:16:5a:83:13:8a:
                    95:cf:87:72:2b:ad:d2:b3:82:49:21:c9:16:51:d3:
                    d0:a6:18:05:f4:b1:0e:4d:98:c7:8b:61:fe:da:3e:
                    56:1d:d5:3d:a9:e0:1f:99:b7:a0:e4:7f:e7:08:04:
                    33:a5:28:c8:18:0a:ba:50:eb:74:64:a4:85:7c:52:
                    a9:d8:d8:d7:92:4b:c9:33:c0:50:9b:23:d7:a8:65:
                    db:09:ba:f3:dd:0a:30:62:ef:6e:2c:33:90:7a:44:
                    2b:72:8f:b5:84:96:e3:3c:e0:3f:24:8a:48:c3:d8:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:42:18:28:98:23:F8:CB:D2:93:E3:AA:47:92:69:B8:53:30:06:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6d452308-b5ae-3985-8b29-e02a73e505a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.24.240/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:c7:ff:2e:ff:84:71:65:23:f9:fd:89:c6:93:55:20:91:
         cf:0d:7e:55:4f:01:74:a9:76:dc:5a:f0:b7:e6:2a:bc:34:57:
         44:f7:c8:56:ab:df:b1:c9:30:a6:33:a3:dd:3a:9d:00:af:6c:
         2d:84:ec:f2:59:5f:20:ff:a4:39:8c:1b:59:0c:56:cd:fc:bf:
         d6:ad:51:b9:ca:c3:45:48:f0:01:e3:6e:4f:6c:fd:b6:06:2a:
         68:ba:47:2b:5e:d9:60:fa:4d:cf:96:5d:62:f2:9a:37:24:2d:
         87:0a:87:6a:e2:ab:6a:ed:5c:43:98:3b:92:04:3b:a3:1f:b3:
         46:4d:7a:cd:03:0c:00:15:37:ce:c1:7a:ac:db:38:6a:10:b4:
         76:dc:13:d9:1c:f5:ef:86:05:04:c8:61:75:0d:5d:07:d3:82:
         93:a8:75:ad:2b:c7:5a:4d:eb:c6:43:76:b2:b5:de:56:62:4e:
         7e:4f:d0:fa:62:52:7a:97:55:75:7c:fb:5b:18:ae:09:20:bd:
         e6:05:60:52:92:47:f9:a1:7f:73:4c:00:ca:77:a5:86:98:42:
         a9:0d:07:64:da:56:4d:7a:3a:23:b5:46:18:2d:fc:75:77:99:
         01:46:6a:1c:88:24:50:f1:39:6b:3a:2f:41:03:d9:47:d8:f1:
         b8:c3:94:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:44:13 2024 by rpki-client on console-ams.rpki-client.org