Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ace27dfb-a3fe-3164-a35b-f6a6323690a5.roa
File:                     ace27dfb-a3fe-3164-a35b-f6a6323690a5.roa (raw, json)
Hash identifier:          7RDukHNu/4inBcMiXAOqD6/6hERFAFK9YH0kNxJEqkQ=
Subject key identifier:   B3:67:F5:6C:CC:12:A9:28:3B:DD:63:80:B2:37:1C:FB:B3:B3:F1:FC
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285847A30C0168925517D1047CE6A0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ace27dfb-a3fe-3164-a35b-f6a6323690a5.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     12083
IP address blocks:        24.35.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0c:01:68:92:55:17:d1:04:7c:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=c1048b2e-06f4-437c-bcb5-e4efcb629b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:3e:47:11:52:49:f0:a2:2c:0c:1f:87:e6:
                    0f:9f:a8:40:d3:b1:9e:26:d7:8f:fd:d9:31:7a:21:
                    28:68:3f:db:25:85:b8:d5:28:ad:7d:73:cc:11:cc:
                    ad:6f:68:39:8e:0d:72:91:b8:d6:b9:05:e0:f2:08:
                    ba:c2:04:2a:a7:05:07:6f:a8:52:71:b4:88:af:19:
                    e1:bd:3b:dd:e2:fe:7d:f3:ec:41:69:41:34:1b:ed:
                    5e:95:fd:18:37:01:ee:1f:14:a5:ab:3d:be:25:42:
                    49:f2:7e:24:53:6f:d2:72:e0:74:f8:dd:5b:66:b4:
                    e0:1c:ce:50:8f:c8:d8:0c:db:4e:b1:c5:53:27:9e:
                    19:7f:93:1e:74:0d:a6:03:86:d1:7c:96:8d:a1:2c:
                    d4:41:61:67:66:aa:40:98:24:dd:9b:6a:c5:ec:a3:
                    21:63:be:e9:05:c0:80:9c:f1:73:93:1d:26:b2:a4:
                    33:4e:3b:27:8c:a8:08:da:4d:b4:91:e3:0a:6e:56:
                    9c:a0:e3:4f:81:1d:67:9c:f3:39:44:12:6b:f7:47:
                    81:0f:86:32:73:a8:6a:75:2a:34:a6:69:1b:46:99:
                    cd:01:8d:dd:87:92:1c:75:9e:31:b4:0e:df:e9:75:
                    51:33:bf:06:a2:d0:14:22:18:de:7e:25:05:b7:33:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:67:F5:6C:CC:12:A9:28:3B:DD:63:80:B2:37:1C:FB:B3:B3:F1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ace27dfb-a3fe-3164-a35b-f6a6323690a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:f3:88:2c:71:60:36:94:7a:9e:47:f9:63:d1:34:70:6c:
         f2:e4:ba:8d:f4:7a:6a:fa:0b:a7:eb:88:41:3f:9c:7c:43:06:
         a0:82:11:eb:4e:dc:1d:01:ed:03:a1:92:81:24:a8:75:5f:c2:
         37:66:f6:79:3c:9c:e4:3f:38:5c:fd:1a:fc:a1:af:3d:8b:4f:
         f0:b2:24:78:6e:ec:f4:3d:7e:d4:ea:c3:5d:92:23:35:fc:5b:
         44:66:76:64:f7:39:2f:d6:e2:e0:ed:02:0a:a9:42:ea:b9:b5:
         f9:f2:8b:f3:9f:4c:14:7f:0c:66:8e:e6:61:d9:e0:d1:a5:44:
         a4:14:53:72:c8:28:d1:02:1d:cc:90:c9:a0:f5:36:38:e6:40:
         91:f9:ad:78:d2:5f:f2:2f:94:57:2f:e8:c1:5e:49:93:85:72:
         04:4e:d5:e1:55:73:d8:4e:12:af:d4:bf:ce:40:10:4c:10:87:
         cc:e6:ad:ef:9f:f9:83:3d:73:78:59:54:99:fa:56:1d:70:32:
         77:6d:42:2b:78:3c:ea:2c:29:a3:ec:ce:f6:36:24:8a:83:7e:
         14:b0:2d:4e:7c:07:c1:9a:88:3e:2c:98:59:a6:9c:2e:96:ce:
         16:eb:f5:2e:b6:1f:0c:98:ed:b3:47:7f:5f:07:01:c0:dd:bc:
         3f:2e:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:29 2024 by rpki-client on console-fra.rpki-client.org