Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa
File:                     24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa (raw, json)
Hash identifier:          X3rNidoA+lCsxpS0p5tUQSRzk5LUXg9tLDPO4Tjh4bs=
Subject key identifier:   B8:C7:72:5E:02:75:8C:AE:C9:2C:C3:86:D9:22:E7:7B:ED:FB:FC:13
Certificate issuer:       /CN=07dfbd1d-6e11-4871-b406-d40f36507b8f
Certificate serial:       010D0C9F432858473A5B7DF93602742FF7F0C680
Authority key identifier: 86:CE:D4:C7:12:D5:B5:AA:1C:73:9D:66:FB:29:D7:E4:BF:61:4A:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     33229
IP address blocks:        170.39.24.0/23 maxlen: 23
                          170.39.27.0/24 maxlen: 24
                          2602:fd2f:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7d:f9:36:02:74:2f:f7:f0:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07dfbd1d-6e11-4871-b406-d40f36507b8f
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=a6b4023c-62c6-467c-8164-887bb086283a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:4d:19:dd:7a:98:15:a1:86:ff:bf:c8:96:
                    29:5c:7a:36:09:74:a8:5b:22:84:79:2c:51:29:1d:
                    aa:35:46:3d:bc:b9:ba:08:4d:72:c8:24:8c:4d:0b:
                    37:7d:f2:0d:0f:1a:39:05:1c:5e:6f:ad:26:48:a8:
                    41:58:1f:90:32:39:f5:be:7f:8c:56:00:28:6b:98:
                    7a:4c:06:d0:0c:44:18:16:5d:8a:e0:56:41:bc:65:
                    79:1d:b9:60:04:6f:1a:df:6c:a2:97:fd:88:a4:84:
                    4a:0f:6d:63:79:9d:af:ad:80:93:f9:b5:6d:d6:2e:
                    b5:5d:ee:91:bd:c6:32:b6:0a:bf:43:59:65:5c:01:
                    78:07:85:88:07:d8:ed:44:b4:ac:91:c4:fc:39:27:
                    d1:82:e6:95:de:59:c7:5b:56:4d:49:c0:d0:11:36:
                    f1:a7:0f:88:02:f4:0c:83:7e:d0:7c:3a:31:8a:77:
                    7a:77:99:5f:82:7a:db:9d:6d:45:0e:1e:bd:70:c2:
                    fc:00:b1:8a:e5:c3:3f:c6:61:ce:83:f4:90:48:dc:
                    cf:a7:b1:53:72:80:87:3e:da:64:bc:a9:f0:a3:f8:
                    f3:f4:bc:48:bd:1d:e5:b7:5f:3e:b7:47:5d:16:13:
                    37:09:85:6c:52:0d:65:bc:72:09:da:76:2d:a6:6c:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C7:72:5E:02:75:8C:AE:C9:2C:C3:86:D9:22:E7:7B:ED:FB:FC:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.crl

            X509v3 Authority Key Identifier:
                keyid:86:CE:D4:C7:12:D5:B5:AA:1C:73:9D:66:FB:29:D7:E4:BF:61:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.24.0/23
                  170.39.27.0/24
                IPv6:
                  2602:fd2f:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:91:d5:88:b7:3b:07:e2:40:9f:c5:36:2a:5e:4c:b0:91:d8:
         e6:1c:ae:88:10:65:4c:95:39:d1:fd:3f:bb:e8:30:e5:aa:7f:
         f9:5a:30:d7:43:d4:ae:e9:e8:8d:0f:b2:10:57:77:a4:e1:e2:
         32:30:5d:f0:59:76:62:de:e9:bf:d3:fe:b1:cc:01:17:5e:c3:
         70:b4:51:0e:83:93:62:e3:46:c3:27:23:24:bf:ba:ea:81:ec:
         9f:d4:17:0e:44:55:39:f5:b0:d2:19:c5:bd:6f:07:0e:fc:b0:
         0f:eb:2e:9e:c5:dc:fa:4a:c3:94:72:14:e7:36:a0:44:ee:dd:
         f8:96:0e:4c:1a:05:86:07:ed:07:5f:90:21:56:ba:95:2d:53:
         bd:07:64:32:94:30:c3:93:e0:43:93:fd:f1:05:1d:4b:c9:ac:
         36:6c:3e:b4:7d:ba:f1:ff:c0:71:1f:fa:96:2c:95:60:c1:3e:
         1f:6c:fe:ff:48:78:75:e5:52:0c:81:b1:cd:d7:85:e4:85:17:
         e6:e1:17:ce:df:d6:72:cc:ca:d9:ad:b7:4d:b0:a0:f6:09:0b:
         46:8c:3a:aa:58:16:d9:90:ec:ec:c9:d1:4e:34:38:6f:cc:6d:
         d0:29:8f:66:ac:c4:f0:87:05:55:73:12:7a:50:a0:d2:ed:f3:
         53:3d:ce:dc
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEc6W335NgJ0L/fwxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDdkZmJkMWQtNmUxMS00ODcxLWI0MDYtZDQwZjM2NTA3
YjhmMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
YTZiNDAyM2MtNjJjNi00NjdjLTgxNjQtODg3YmIwODYyODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTJNGd16mBWhhv+/yJYpXHo2CXSoWyKEeSxR
KR2qNUY9vLm6CE1yyCSMTQs3ffINDxo5BRxeb60mSKhBWB+QMjn1vn+MVgAoa5h6
TAbQDEQYFl2K4FZBvGV5HblgBG8a32yil/2IpIRKD21jeZ2vrYCT+bVt1i61Xe6R
vcYytgq/Q1llXAF4B4WIB9jtRLSskcT8OSfRguaV3lnHW1ZNScDQETbxpw+IAvQM
g37QfDoxind6d5lfgnrbnW1FDh69cML8ALGK5cM/xmHOg/SQSNzPp7FTcoCHPtpk
vKnwo/jz9LxIvR3lt18+t0ddFhM3CYVsUg1lvHIJ2nYtpmxhdQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFLjHcl4CdYyuySzDhtki53vt+/wTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wN2Rm
YmQxZC02ZTExLTQ4NzEtYjQwNi1kNDBmMzY1MDdiOGYvMjRlNGQ5MTctOGZmNS0z
NzYwLTgyZjctYmZkMWI4NDI5ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDdkZmJkMWQtNmUxMS00ODcxLWI0
MDYtZDQwZjM2NTA3YjhmLzA3ZGZiZDFkLTZlMTEtNDg3MS1iNDA2LWQ0MGYzNjUw
N2I4Zi5jcmwwHwYDVR0jBBgwFoAUhs7UxxLVtaocc51m+ynX5L9hShAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wN2RmYmQxZC02ZTExLTQ4NzEtYjQwNi1kNDBm
MzY1MDdiOGYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBqicYAwQA
qicbMA8EAgACMAkDBwQmAv0vABAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYpHViLc7B+JAn8U2Kl5MsJHY
5hyuiBBlTJU50f0/u+gw5ap/+Vow10PUrunojQ+yEFd3pOHiMjBd8Fl2Yt7pv9P+
scwBF17DcLRRDoOTYuNGwycjJL+66oHsn9QXDkRVOfWw0hnFvW8HDvywD+sunsXc
+krDlHIU5zagRO7d+JYOTBoFhgftB1+QIVa6lS1TvQdkMpQww5PgQ5P98QUdS8ms
Nmw+tH268f/AcR/6liyVYME+H2z+/0h4deVSDIGxzdeF5IUX5uEXzt/WcszK2a23
TbCg9gkLRow6qlgW2ZDs7MnRTjQ4b8xt0CmPZqzE8IcFVXMSelCg0u3zUz3O3A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:08 2024 by rpki-client on console-fra.rpki-client.org