Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa
File:                     4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa (raw, json)
Hash identifier:          9Q+XuiwG2PPzhde1n18uRgmnvbbZ+FGkjiH5ddqM8iU=
Subject key identifier:   98:5E:6A:27:92:44:5C:17:B1:35:EE:08:E9:CB:23:A5:88:27:ED:CA
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F432858478E1BD064C4A8119DF97B5B00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     11232
IP address blocks:        24.124.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:d0:64:c4:a8:11:9d:f9:7b:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=b7165863-5724-45c8-8316-47ca3453b4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:45:7f:c9:0e:9d:cb:a7:11:36:d7:12:d4:
                    ad:f7:66:c0:b0:df:28:e2:ce:cb:fb:00:f8:46:6f:
                    af:61:62:83:33:f7:f8:dd:16:34:f5:1c:2f:52:bb:
                    16:e1:0a:c0:f8:ff:69:d9:70:14:0b:18:da:38:07:
                    00:df:06:fd:ab:28:70:fb:3f:35:b9:7d:63:af:3d:
                    77:28:4d:cc:b7:09:6d:9b:fb:d2:82:10:62:d8:19:
                    18:ac:b2:13:93:10:97:cb:94:42:31:d3:f1:dc:db:
                    bb:ec:9e:83:c7:57:fe:f4:8b:02:32:59:51:2d:40:
                    cf:a8:ce:27:08:f6:a5:1c:1f:24:f0:bd:b7:26:0b:
                    86:61:cb:cb:e2:6c:f4:4b:f3:98:f7:3e:39:e1:1b:
                    46:ed:55:07:4d:d4:d9:f9:38:fb:6a:81:4d:15:99:
                    e1:f9:9f:22:e8:da:f8:28:35:95:ef:89:5d:50:0d:
                    2e:fa:20:59:b2:0d:54:3b:e8:03:38:7e:44:4c:7d:
                    57:69:9f:91:25:44:e7:9e:8f:75:96:2b:5e:b9:f8:
                    44:39:cb:ba:ed:6c:0f:69:92:ed:69:6c:b6:51:ee:
                    42:0f:a3:78:2a:f4:91:a0:47:cc:12:32:b1:47:e0:
                    a1:b8:2e:f7:b6:de:47:7b:96:78:72:9e:2a:97:a5:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5E:6A:27:92:44:5C:17:B1:35:EE:08:E9:CB:23:A5:88:27:ED:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4e6b1e1a-b788-3e9d-8b7b-040ff3384d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:81:33:5e:f7:c2:c9:67:bf:12:f6:20:57:7b:51:4a:f7:6d:
         3c:5c:42:4d:b5:29:56:24:8f:8b:f0:8a:30:22:a5:39:8d:81:
         cf:e1:b2:1a:4f:3c:b6:d3:4d:b1:6a:1a:c7:4e:1b:a9:b3:e0:
         2c:86:39:93:0f:52:f3:bf:b6:e1:a6:d9:b7:9c:f1:fe:bf:10:
         a4:19:08:c6:dc:6d:c3:95:a4:19:ba:03:7d:7d:7d:0e:92:52:
         e4:1f:8e:0d:7c:5e:56:59:27:f1:05:5a:fb:98:9f:88:1f:31:
         e1:22:d9:10:de:d8:f0:61:68:12:1e:26:29:69:b0:fa:a3:07:
         db:1d:de:4b:c1:10:88:1b:1f:3b:6f:e8:07:35:ef:ee:c3:08:
         c8:15:9e:9a:51:ec:77:2c:fd:e2:25:7c:ad:e9:54:c6:cb:5b:
         6f:d1:af:8a:f3:73:b7:cc:96:d2:12:13:6e:ad:e6:2d:43:61:
         0e:47:cf:2d:85:c8:f0:76:03:cf:76:ef:22:41:31:71:87:43:
         9e:cb:13:0c:fa:5e:f0:4a:62:5b:a9:ed:3d:96:5e:c3:97:4a:
         cf:8b:4a:f3:54:9b:11:a5:3a:27:f6:df:05:24:7f:3a:59:d4:
         18:cc:30:5e:32:42:ce:89:d4:26:ec:79:f6:98:49:36:88:97:
         e2:8d:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org