Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/36c68fa7-e937-3cd6-a3fd-e98e18bb1b14.roa
File:                     36c68fa7-e937-3cd6-a3fd-e98e18bb1b14.roa (raw, json)
Hash identifier:          nKr3vXk0SKaceJ0FT8W9Kg63MDtMCM3AyssGF4ISdq4=
Subject key identifier:   4D:17:96:BF:EB:9C:0E:81:6C:42:00:14:08:A4:A9:6B:69:99:08:62
Certificate issuer:       /CN=a0bcc13a-4107-4c4f-aab3-e4057364f637
Certificate serial:       010D0C9F4328584742BB5DA85E8BF4DFED30F200
Authority key identifier: E7:7A:5D:45:EE:96:33:A2:31:74:54:91:4F:D0:FD:C3:4B:D1:6A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/36c68fa7-e937-3cd6-a3fd-e98e18bb1b14.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     46392
IP address blocks:        162.246.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:5d:a8:5e:8b:f4:df:ed:30:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bcc13a-4107-4c4f-aab3-e4057364f637
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=f24b4ee2-9cca-4cf9-8733-db280abcc902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:33:eb:d2:54:cf:d6:db:fd:52:49:71:c0:
                    54:f4:39:f1:ee:c3:75:f6:11:06:b9:14:b5:01:f4:
                    3c:4e:34:7e:fb:b1:fb:78:ca:1d:81:dd:95:98:40:
                    09:1e:22:7b:46:30:64:c9:e2:ad:68:e7:ce:cc:68:
                    cd:33:ad:30:43:2c:07:3e:d6:3a:45:b5:41:d7:72:
                    48:a9:05:e6:69:dc:72:1f:f4:80:19:25:fd:2a:f7:
                    66:e6:26:08:6b:15:cf:2b:32:e9:08:2c:73:c0:3a:
                    6f:00:e5:d1:c7:41:13:86:73:36:68:90:39:6e:5a:
                    13:41:d9:db:a8:8a:0c:81:07:4c:18:59:8a:9d:22:
                    dc:4a:84:00:c9:8f:76:eb:2d:8c:7a:32:7d:25:fe:
                    8b:13:b8:74:89:7c:56:ca:54:d1:d3:7d:cc:59:af:
                    1d:43:1a:42:4e:38:cd:29:ef:8c:51:89:2d:94:79:
                    e4:29:ec:97:2b:e6:19:59:83:f8:fe:1e:72:67:e2:
                    7b:f0:f4:58:9f:48:96:4b:3e:a4:f9:06:20:9d:86:
                    51:03:33:01:4b:03:b4:4e:d5:a0:6f:ad:0b:08:9e:
                    34:80:64:77:9b:63:7a:be:4a:7e:4c:e1:5b:1b:07:
                    f3:c7:32:82:47:1f:af:eb:af:6d:ec:a2:6b:21:b6:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:96:BF:EB:9C:0E:81:6C:42:00:14:08:A4:A9:6B:69:99:08:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/36c68fa7-e937-3cd6-a3fd-e98e18bb1b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.crl

            X509v3 Authority Key Identifier:
                keyid:E7:7A:5D:45:EE:96:33:A2:31:74:54:91:4F:D0:FD:C3:4B:D1:6A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:58:8e:d6:43:7f:f9:d6:78:ab:a9:1a:b4:cb:44:1e:14:30:
         02:f9:6d:d7:09:a1:4e:e7:75:df:34:f2:a7:37:29:a6:0f:d7:
         cb:39:88:1a:c1:30:79:0a:fd:8e:bb:85:ac:32:86:49:56:39:
         54:42:ca:f9:f6:a9:9a:32:9d:de:58:c7:3b:56:19:eb:93:ff:
         05:3d:fa:eb:3a:80:7f:1a:f4:c2:2e:fa:d2:3d:41:0c:87:16:
         0e:62:9f:09:be:57:17:9a:e0:8a:ac:30:26:44:25:30:00:10:
         8e:28:e5:b3:bf:2f:2c:29:6f:98:8f:c0:e1:30:29:a4:0e:01:
         19:37:e3:e9:23:4a:c7:4f:55:a9:47:58:1d:22:32:eb:e2:89:
         db:a9:8c:1c:59:fb:1c:6e:f1:4f:4a:49:44:45:48:1a:65:dc:
         d9:98:9a:c9:b3:25:37:27:7b:40:48:ee:31:38:99:2b:d3:ce:
         d9:57:2e:13:1c:9e:e4:f1:f4:aa:0d:37:e7:7c:cb:74:4e:d3:
         e6:01:a1:16:dc:bd:92:f4:3e:7a:86:79:99:a2:c3:4b:88:2b:
         cc:26:e7:5c:7a:4f:78:cf:86:ff:62:fd:f0:7d:aa:ac:a2:06:
         1f:d1:c3:4f:c4:be:e8:49:27:ca:5f:3f:7f:b2:6d:b8:21:2b:
         45:7d:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:58 2024 by rpki-client on console-fra.rpki-client.org