Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
File:                     08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa (raw, json)
Hash identifier:          tLV8f6oTymcpoZ6f4eeW61UYJv2Vho6k3hqtErl8H44=
Subject key identifier:   AA:6B:5D:EC:7E:ED:B7:51:50:C4:D4:62:C1:F2:1F:0A:E6:66:95:A4
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584799467588573A82EF96660A00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     11232
IP address blocks:        24.225.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:75:88:57:3a:82:ef:96:66:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=63490a83-b644-46d9-ac15-dfb75e9e88ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:4f:de:aa:a7:31:2c:32:10:20:b7:b3:9a:
                    ad:dc:31:23:ea:ae:6b:25:d3:ea:05:b2:67:cc:4a:
                    fb:02:05:82:6e:8f:d3:bf:f7:f5:6e:fe:2d:c1:40:
                    e5:a4:94:45:d0:99:2c:44:36:0e:4d:22:83:b1:85:
                    7f:e3:3c:9d:81:61:1d:06:bf:75:a3:d5:46:a5:c0:
                    a1:7f:7b:e4:28:7f:bd:8b:16:bb:3e:fa:36:3a:d4:
                    66:57:25:8e:81:52:70:63:5e:f0:dd:9f:1f:cc:d2:
                    c3:d3:4c:8a:5f:1b:57:0c:c6:e7:90:8a:da:c1:06:
                    80:47:c1:fd:5d:71:e4:c7:13:e3:57:6c:2d:58:60:
                    1b:60:5c:bc:5b:98:6b:d2:b4:54:bf:2b:d0:68:65:
                    88:d8:80:7a:84:99:75:1c:62:bb:8f:0b:45:8a:f3:
                    99:04:e1:c8:62:1a:98:4a:ce:98:61:4b:bf:f2:c0:
                    11:4c:a6:ea:bb:47:d0:22:a3:f6:c6:10:75:ad:5e:
                    1e:35:ed:90:40:c9:e2:e8:3b:01:e0:46:54:bf:0a:
                    ee:ee:ae:d9:8f:cc:bb:88:dc:57:82:2c:b1:53:20:
                    51:ab:aa:44:7f:af:2d:e6:c8:9b:03:e0:33:1d:a9:
                    90:8e:d5:84:a0:26:ad:05:3b:f9:4b:b1:a3:6d:75:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:5D:EC:7E:ED:B7:51:50:C4:D4:62:C1:F2:1F:0A:E6:66:95:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e8:00:f4:95:44:fa:68:a5:ae:4a:6b:90:73:93:0c:ed:7f:
         75:d2:11:4d:35:80:59:46:ba:29:78:8e:bb:7e:5f:ed:49:40:
         b2:4e:aa:7e:bb:12:01:02:bd:9f:2a:47:08:c7:6a:b6:7d:a5:
         96:76:0d:a5:f0:b8:b1:ed:06:21:9c:14:f1:b6:a9:c1:5e:9e:
         f0:d8:36:9a:1b:1d:89:06:de:b3:00:f9:4d:1d:ec:2f:b5:28:
         b1:ef:6c:6f:3c:9f:c7:2c:de:b3:fb:28:a4:f9:2c:37:51:3a:
         f0:77:6a:7a:6b:f1:7f:25:45:52:e8:5d:95:a4:6b:0a:f8:0a:
         ee:dd:9e:e1:81:73:7d:11:b7:89:c1:d7:e0:a3:92:09:df:65:
         89:44:18:47:1d:b1:c1:9e:8b:51:31:66:b6:34:f5:c5:0d:78:
         92:bd:4b:84:f4:be:a4:8b:69:65:64:39:77:49:53:77:d8:02:
         43:bc:97:31:4c:85:e0:77:82:87:36:98:25:e7:b4:87:02:bb:
         f5:db:a5:81:b7:ed:bc:ad:02:49:24:50:bc:9f:b6:40:86:85:
         68:20:fb:bf:d8:4d:b9:39:0e:3b:07:d2:dc:ed:45:e0:b7:77:
         e0:e3:a1:96:6e:fa:f8:cc:db:b2:29:39:2a:27:19:3e:f2:3f:
         7b:37:7a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:45 2024 by rpki-client on console-ams.rpki-client.org