Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/2c4dd1e1-22ad-3153-953e-a0fdb434a42e.roa
File:                     2c4dd1e1-22ad-3153-953e-a0fdb434a42e.roa (raw, json)
Hash identifier:          X/eS2tNMbsyObZl0+QsTP7XIb4GdNEa47QWHwf2R+pA=
Subject key identifier:   0B:0D:F6:62:76:D5:24:96:52:86:48:1D:E9:A6:AD:68:3E:20:67:F4
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F43285845FC19300F90FEBA08CE49C180
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/2c4dd1e1-22ad-3153-953e-a0fdb434a42e.roa
Signing time:             Sat 25 May 2024 01:00:27 +0000
ROA not before:           Sat 25 May 2024 01:00:27 +0000
ROA not after:            Fri 23 Aug 2024 01:00:27 +0000
asID:                     27364
IP address blocks:        24.129.245.0/24 maxlen: 24
                          24.129.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fc:19:30:0f:90:fe:ba:08:ce:49:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: May 25 01:00:27 2024 GMT
            Not After : Aug 23 01:00:27 2024 GMT
        Subject: CN=15cebdd8-3c17-4f05-b0d6-5ede4d3271b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:37:92:05:12:ec:6f:7e:d5:41:f8:c0:33:33:
                    14:e0:d8:47:72:d1:20:64:12:b4:0c:26:90:3c:a8:
                    d7:ef:f2:4d:c6:1b:c7:8f:0d:49:9d:5d:2c:31:a2:
                    f3:ba:8a:a9:31:45:76:24:be:3c:1b:55:1b:e2:50:
                    c2:65:3f:5d:79:d8:a0:bc:52:69:37:83:36:fb:dd:
                    59:8b:54:c2:aa:eb:f6:67:e7:09:19:99:d3:98:f5:
                    f3:0e:f0:40:5e:5c:b0:d3:78:49:d5:66:47:21:11:
                    f6:1d:ab:13:63:63:1d:d0:c1:f3:a4:be:71:25:ee:
                    f1:bc:8e:72:6c:54:c9:c2:5f:80:68:d5:46:b3:f7:
                    80:df:00:ea:8a:7e:13:9b:5d:87:f3:2b:1c:49:89:
                    59:67:8c:33:6a:79:80:c6:c1:23:d1:f1:a4:e6:a9:
                    e6:24:dc:c3:8e:3b:5f:c7:23:0a:b3:56:7d:8c:0a:
                    55:bb:63:3d:41:1e:df:ee:f4:60:98:1a:c2:73:b8:
                    47:a2:96:e7:ef:16:83:06:63:b0:7a:75:93:79:ce:
                    78:3f:fd:0f:1f:9d:44:aa:d6:24:7c:7e:c6:c2:7c:
                    79:e4:ab:9f:d3:df:62:52:d1:9d:bb:bd:d7:54:d6:
                    75:66:64:89:fe:6c:4d:4d:a1:1c:6b:87:6c:eb:6f:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:F6:62:76:D5:24:96:52:86:48:1D:E9:A6:AD:68:3E:20:67:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/2c4dd1e1-22ad-3153-953e-a0fdb434a42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.129.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:50:64:29:61:d5:40:4f:92:ae:08:45:df:58:f6:b8:fe:b1:
         2d:ea:84:ef:fc:4c:07:8d:a2:00:68:8b:f3:c6:d8:b9:47:52:
         32:15:ee:d4:6f:96:9d:10:3a:ca:12:e4:07:8b:fc:b6:08:e6:
         89:70:db:19:07:9a:c0:03:54:97:db:6d:34:55:b7:fb:aa:86:
         0d:cb:d4:43:80:d0:f7:3c:ab:30:f4:33:e5:ef:a8:2a:db:14:
         3f:82:19:e5:38:66:e6:1b:61:42:1d:1f:7a:eb:9d:18:76:48:
         90:b0:00:a0:a1:0d:c4:1e:fb:4b:1b:5a:ed:82:39:99:6d:49:
         83:1d:58:83:4c:f7:e8:c2:33:4b:b3:1e:91:55:b8:5e:51:29:
         ed:56:02:64:f1:8b:7b:07:f0:ad:67:e9:83:42:cd:ad:b2:af:
         20:c4:d3:bf:92:6b:0b:56:6e:90:98:32:40:ba:ae:7e:ca:10:
         81:37:fa:cc:35:39:36:f8:fa:3e:bf:39:8b:c7:8f:27:b0:e3:
         f4:e9:4a:3e:3e:58:ec:17:05:8e:a2:89:9e:1b:c9:3d:4a:4a:
         7e:30:c7:06:49:d8:43:47:81:f0:ea:7c:fc:36:7c:6a:97:52:
         84:79:3a:c1:a1:f5:59:0b:21:35:3c:0b:e4:f0:c8:b9:33:b0:
         55:11:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:08 2024 by rpki-client on console-fra.rpki-client.org