Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
File:                     520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa (raw, json)
Hash identifier:          tUKJjCf0Ofxtt7qRwlsW1OgMCXmMKYnJ4+vVpwMpIbk=
Subject key identifier:   55:0A:D3:01:76:E4:CE:36:07:79:2F:AC:9C:72:0A:21:F4:0E:BA:83
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858473D25EC902EEC6B83B954D980
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     53720
IP address blocks:        24.246.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:ec:90:2e:ec:6b:83:b9:54:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=c283b50b-fec2-40b4-b333-b2324d6e5b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:58:69:25:8f:b9:5c:f5:2c:ac:09:90:e0:
                    51:cf:21:b1:f0:62:d1:66:d8:91:fc:c7:f9:16:51:
                    a1:f3:a6:ba:19:5e:46:29:d7:08:47:9e:54:f2:1a:
                    00:56:62:4c:31:0e:70:b8:38:04:59:16:c2:4f:40:
                    41:74:29:92:c8:a2:93:bb:ff:db:69:72:ac:1e:95:
                    f3:e8:96:44:e3:c3:b6:3a:a2:7c:56:43:be:a5:5b:
                    c9:71:ed:a1:03:d2:db:b8:98:19:af:5c:e7:30:a1:
                    67:ac:97:a3:30:37:2c:9b:80:11:61:98:e9:aa:e3:
                    16:d3:23:b5:5f:75:65:8b:0e:e5:c6:02:ca:45:96:
                    c6:26:56:c7:fd:83:44:56:41:b6:6c:25:c4:4b:d6:
                    df:00:51:4e:4d:9c:93:87:a5:e0:35:d7:63:33:ba:
                    b3:35:1a:1e:a6:72:83:b1:d1:75:97:25:a1:b3:b0:
                    4f:f7:a4:c6:74:26:61:4d:49:35:b2:fc:50:8a:4a:
                    f7:56:84:d7:1d:e7:0e:38:d7:ad:80:5a:96:a8:2a:
                    d8:09:1a:55:a0:0f:48:1a:8b:8d:ee:a9:3e:a8:5b:
                    1f:42:41:dc:0b:ab:af:c4:2d:19:2c:8f:56:a1:df:
                    8f:4b:f5:f3:43:86:de:98:33:72:8d:db:a7:3f:0d:
                    fc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0A:D3:01:76:E4:CE:36:07:79:2F:AC:9C:72:0A:21:F4:0E:BA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:1f:77:56:77:c3:a0:e8:fa:69:f9:f2:dd:ae:a8:81:46:f0:
         fa:36:ca:3d:5c:2f:af:74:f3:5f:c7:6e:ca:8e:66:6c:d1:d0:
         da:95:41:e8:bf:c9:70:11:eb:a6:e6:2c:6b:65:24:48:ad:72:
         a0:52:8b:d7:ec:00:c5:09:90:d6:c3:a0:35:52:30:cc:a4:22:
         7b:72:eb:f6:ba:5c:ad:1a:92:04:46:39:30:d9:b6:bf:19:11:
         af:b1:ed:12:ee:a8:3a:e6:8c:7c:5b:dc:4b:b4:3c:d6:51:85:
         29:05:4c:24:0a:87:2e:65:af:28:58:bc:48:14:64:f2:39:26:
         8d:4b:1c:52:47:67:de:f6:68:af:83:cc:d6:8d:90:17:41:3b:
         27:c2:96:c7:2b:60:1a:19:0d:e4:5f:5a:37:a9:85:73:94:db:
         f3:58:fc:bc:59:01:be:15:49:bd:87:94:64:2b:f4:60:b7:bd:
         30:d1:f6:79:6d:d7:8d:36:ca:6a:e4:9d:2d:b8:75:b7:ee:78:
         c9:1a:2e:81:e0:5e:8d:4b:cc:79:b4:4c:2d:d4:05:0c:1f:21:
         ce:0d:aa:28:74:85:5a:50:48:34:32:b8:93:c8:ce:0b:cb:d9:
         87:3b:b8:bc:c1:ec:16:8d:e5:8b:ab:6d:af:22:be:14:4d:38:
         2d:2b:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org