Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/669a0bd0-b062-3d56-a2a8-a6f32b954b09.roa
File:                     669a0bd0-b062-3d56-a2a8-a6f32b954b09.roa (raw, json)
Hash identifier:          JKMr7kr0Gxg+1zHjJnChzukVfsdPz3o5ncAEZuKk/5M=
Subject key identifier:   B1:F4:B9:AB:87:B5:64:3C:D5:36:B0:95:48:4E:34:10:B0:7B:63:75
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584799467450A5E9B8D610893640
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/669a0bd0-b062-3d56-a2a8-a6f32b954b09.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     11232
IP address blocks:        24.52.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:74:50:a5:e9:b8:d6:10:89:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=aecfdd67-8c40-49b5-aa9c-94c4b1555965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:e6:84:7c:f2:f7:3d:16:81:3b:7f:ff:8f:
                    e7:32:3f:4d:33:6b:63:cc:18:ba:ba:ea:5f:3b:7a:
                    30:d4:5f:47:5f:a1:e8:5b:04:27:f5:c1:71:be:04:
                    4f:bc:c8:28:ac:12:95:0e:dd:58:16:0e:84:0c:38:
                    7e:70:fd:45:ba:fa:22:89:c3:e1:e2:55:0f:9d:7a:
                    b9:0d:e5:18:d0:fe:a7:03:c5:4d:b8:b6:fe:e8:bb:
                    b1:02:6d:ab:5b:c0:1f:5d:c6:81:7c:bb:c0:03:cb:
                    37:59:98:50:c9:6b:b7:41:59:d0:3b:22:e6:4e:02:
                    09:4f:5b:5a:c0:4b:51:51:c0:bb:80:61:26:43:9c:
                    60:e9:c3:87:19:71:d8:5c:75:fd:dd:46:3b:1e:b2:
                    ab:e4:30:17:0c:7e:df:a8:19:84:34:a5:94:e1:60:
                    29:40:e4:16:08:64:83:c2:55:03:ad:81:95:ea:5d:
                    e9:18:68:20:cb:82:dd:41:ec:69:e7:60:0d:94:27:
                    90:6b:55:4c:df:00:8a:24:15:e9:78:a4:5a:f4:c2:
                    e4:72:29:b1:04:11:e9:eb:4f:d8:e0:d9:63:a6:7c:
                    24:a3:d4:e4:00:37:c4:9c:e6:54:f3:94:ba:88:f0:
                    ff:a8:87:3e:bc:6d:7c:22:0d:97:96:a9:2d:97:5d:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F4:B9:AB:87:B5:64:3C:D5:36:B0:95:48:4E:34:10:B0:7B:63:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/669a0bd0-b062-3d56-a2a8-a6f32b954b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.52.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:3e:ac:c8:9a:ff:7a:2c:24:ae:72:cc:c1:82:3a:20:bd:
         cc:ec:9f:1b:f6:5f:51:5e:c0:be:d8:86:a2:12:28:bb:ef:56:
         30:4b:95:2e:42:67:6d:fa:87:f9:01:15:e2:c5:18:56:6d:66:
         f3:5f:d5:6f:02:80:33:a8:d2:53:0a:4b:f6:de:f2:81:ce:ab:
         50:52:a8:e2:bb:fb:c7:98:5d:f3:0d:48:50:11:9d:4b:3e:70:
         fa:1d:24:bb:31:5b:2e:b5:8c:48:0f:a6:06:2a:6d:7c:d4:94:
         64:3c:e9:81:09:ae:26:c6:77:e6:f9:56:c5:6a:d3:69:5c:6b:
         3e:bf:03:17:4c:3e:38:60:43:bc:97:ea:72:cc:66:7f:f5:12:
         28:59:90:54:ac:78:30:e6:9c:4c:c2:dc:3b:b9:e1:bf:fd:4a:
         7a:60:3a:93:77:f8:0c:98:4f:82:b4:27:9d:47:b4:9c:f7:59:
         f9:74:6c:cf:47:23:f4:3a:11:dd:ea:e8:81:d3:82:94:4a:47:
         5b:e4:dd:16:1a:f4:07:b5:e7:51:b8:c4:d3:de:ce:a7:cb:dc:
         d0:0c:ec:5a:02:a3:64:06:22:87:c4:93:62:46:05:b4:97:35:
         ef:fd:9d:c1:3b:a5:aa:92:0a:9d:0e:29:83:36:35:3a:79:4e:
         e6:f8:ed:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:03 2024 by rpki-client on console-fra.rpki-client.org