Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2deaaf20-e662-3f02-aed2-6a9265122f91.roa
File:                     2deaaf20-e662-3f02-aed2-6a9265122f91.roa (raw, json)
Hash identifier:          ecnkNsb5ejcGeGazZS4ejyNdWZZs/PPTE8X0uj2w07M=
Subject key identifier:   3E:80:F0:58:76:A6:35:B9:83:2C:AC:87:DB:5E:F8:3C:6D:57:B1:B7
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584785BBA8537B7681668A74F920
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2deaaf20-e662-3f02-aed2-6a9265122f91.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     4922
IP address blocks:        24.56.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a8:53:7b:76:81:66:8a:74:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=83fe3a12-4ba5-45af-9e50-2e4d1b621a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:38:d4:9d:d5:05:2b:5d:d5:4e:e9:e5:1c:
                    17:31:39:8b:c7:74:b5:e4:11:a6:21:a2:db:16:ca:
                    38:6f:83:a9:5e:13:88:6c:7e:9e:ce:1b:23:cb:80:
                    74:4a:b6:5f:71:15:4e:4c:d8:15:cc:95:03:d9:cd:
                    e6:35:d3:23:6f:6c:b8:82:0b:1c:cd:9d:e4:71:d7:
                    13:81:a6:35:06:cb:61:68:eb:25:8a:15:c6:f3:ef:
                    3f:b5:2f:bb:3b:56:1a:5f:44:92:5c:f2:65:4c:aa:
                    c9:11:49:fb:44:50:d1:8c:1b:e2:ba:8c:8a:a0:d1:
                    06:10:45:42:c6:62:e7:aa:30:07:28:86:81:72:42:
                    8e:da:49:29:55:dc:55:19:5d:8b:32:56:4a:41:ff:
                    e2:bc:de:80:65:47:e5:eb:0b:78:6d:43:65:86:65:
                    2f:cf:cf:c7:f5:9f:59:69:d0:0c:aa:f6:40:70:1b:
                    f7:de:2d:a4:5a:33:4b:4f:18:d5:0b:52:ec:ca:f4:
                    18:09:e5:4e:3f:9b:92:86:36:d1:d4:ed:5d:9d:04:
                    82:d0:2b:3b:fd:87:ed:09:29:37:38:a9:c5:de:4b:
                    8c:2b:60:7b:be:b1:da:f2:7c:bb:44:e5:fa:57:4f:
                    45:7c:81:e6:73:24:76:9d:b6:2e:0f:05:e9:fa:3b:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:80:F0:58:76:A6:35:B9:83:2C:AC:87:DB:5E:F8:3C:6D:57:B1:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/2deaaf20-e662-3f02-aed2-6a9265122f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:34:7f:c1:0e:7c:b3:0d:48:99:47:0f:40:66:9c:c2:e3:
         33:f4:9c:d4:86:44:4f:1b:85:e6:d2:ee:98:5b:a5:8b:17:7d:
         46:fc:5a:c3:53:27:cb:c4:6a:4e:5b:f9:94:a6:ff:55:c4:ed:
         94:28:51:14:2b:8e:52:4e:04:64:fb:5a:4d:09:7f:41:e3:fe:
         4c:d7:4c:1c:c0:9e:9d:35:1c:5d:46:12:b1:90:7d:7e:7b:45:
         ea:41:00:45:87:c3:fd:2b:30:c5:a3:6e:6e:92:29:f8:b5:cf:
         2a:7f:0d:72:ce:5f:4c:06:0a:da:30:e1:f9:55:9b:7b:18:88:
         55:93:9f:69:ba:c8:36:bc:25:ee:85:a3:37:02:f8:ee:8b:30:
         f9:9f:3b:e9:9f:e6:c1:2c:91:52:3f:34:bc:48:f8:77:a1:d9:
         0f:78:e6:bb:e5:ef:f2:71:7e:a7:99:84:cc:96:1e:80:28:53:
         35:83:2e:8a:72:74:93:ec:5c:54:d4:b2:20:16:f0:a5:04:de:
         c6:72:d5:c0:87:8d:87:f0:e5:09:6f:39:39:c7:b2:e6:49:65:
         8c:b0:d4:99:b5:69:85:25:95:a1:8f:26:bb:07:d5:17:5f:19:
         8a:cb:c0:37:7f:ef:0a:19:cb:bc:b6:ae:56:f6:93:38:32:83:
         c2:0b:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:40 2024 by rpki-client on console-fra.rpki-client.org