Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b83224b6-02a4-3334-bffd-e12180d69d72.roa
File:                     b83224b6-02a4-3334-bffd-e12180d69d72.roa (raw, json)
Hash identifier:          uXLt9/q22SYyHIVTRSrB5eSHMGCdQTCblPqK5Qutg8s=
Subject key identifier:   25:98:13:A4:26:99:72:DD:91:E2:BA:A6:68:E4:B7:08:C7:C1:63:46
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285847A30BF8DC2184191BD735C580
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b83224b6-02a4-3334-bffd-e12180d69d72.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     12083
IP address blocks:        24.214.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f8:dc:21:84:19:1b:d7:35:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=e4020970-ff73-42ae-af84-de94aff598b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:4c:1c:3d:a1:87:5f:41:81:ea:d9:22:0d:
                    f7:86:71:0d:b8:b4:03:9c:a9:6f:39:3e:6f:bd:e7:
                    46:e4:50:5a:fb:37:c7:7e:b1:10:e6:d9:fe:38:eb:
                    7b:62:8b:e9:f4:db:c8:ff:e2:39:e6:5c:f4:bb:d5:
                    27:df:12:2f:3e:26:e0:48:71:de:bb:c5:46:4b:3c:
                    64:85:12:37:93:a0:ad:c8:bd:d5:c7:d3:51:92:32:
                    11:04:84:e7:b9:bb:c2:7a:e4:9e:e8:a4:7e:8b:4a:
                    6b:54:9e:42:ea:65:ee:90:6a:ba:01:6a:ec:19:10:
                    9d:e2:e8:29:23:fb:ed:e4:83:7a:67:c3:ff:6e:34:
                    fd:b9:12:ab:40:7f:af:56:a4:80:83:6a:8f:75:d8:
                    67:48:7d:9d:b4:cf:9a:b0:9c:b7:df:60:76:f0:ef:
                    70:f8:60:f9:ed:19:cd:b3:e1:9c:67:5e:67:7f:f0:
                    3b:a1:f0:de:c6:eb:03:1c:3e:f0:b1:b6:03:04:15:
                    42:2d:3d:22:43:9b:05:7e:ef:e8:60:20:6e:3e:8b:
                    ca:f2:2a:0c:52:1f:fc:25:43:fa:01:d4:fa:5d:44:
                    60:8c:8d:bc:94:b5:d8:b8:f1:06:ee:56:a5:5e:cf:
                    98:c3:53:0d:45:6e:0c:88:e2:6e:32:4f:50:61:19:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:98:13:A4:26:99:72:DD:91:E2:BA:A6:68:E4:B7:08:C7:C1:63:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b83224b6-02a4-3334-bffd-e12180d69d72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f7:67:99:c9:c1:07:56:96:77:ea:84:d7:65:3f:d6:cd:de:
         b1:92:30:69:10:44:c6:be:20:8e:df:fd:14:62:c0:ef:b2:48:
         64:c4:d0:be:d6:0a:3c:30:6c:b7:63:7b:e3:ae:9e:a5:55:c8:
         ac:f0:69:cd:56:15:7a:fe:73:ee:18:f4:c9:21:fc:7f:3c:17:
         86:c7:bf:92:e5:cd:3b:80:86:74:99:60:25:12:b5:c9:74:ae:
         22:cd:9b:75:cc:8b:09:9e:08:e6:e3:68:f0:3b:ba:b9:52:77:
         95:fa:9b:e6:03:86:ed:37:a6:bd:91:49:d7:59:0e:69:b9:1c:
         e4:3b:42:00:46:94:5f:11:7c:9b:85:f2:71:8e:ae:fe:c9:41:
         3b:cd:a2:39:02:81:b8:84:4c:07:29:37:05:45:39:61:ac:51:
         4d:09:fb:ea:bc:ae:e5:f7:52:36:82:75:d9:56:b4:6c:2d:9a:
         21:a6:5f:fa:d7:35:fd:ac:18:1c:24:b6:cb:d5:48:f0:45:75:
         c2:38:3a:2c:bd:5e:e5:5d:a2:0b:72:be:4d:f4:45:06:f5:0f:
         5e:6e:d2:fd:04:f5:89:49:09:5f:2a:42:d6:9d:d6:76:08:e7:
         df:fb:68:22:42:25:88:d1:78:15:c5:92:46:58:c1:ac:dc:f1:
         88:88:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:58 2024 by rpki-client on console-ams.rpki-client.org