Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
File:                     bb344849-76d8-36a8-801c-c856e304a3a6.roa (raw, json)
Hash identifier:          dadQghFLKCxnE72zD/7iAU5Sn8VOs0oaV2BhJnzDUEQ=
Subject key identifier:   ED:9D:21:45:FD:E3:8C:CB:09:68:76:1C:DB:81:A9:DF:48:33:81:BE
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858471E70662402356A450143ECE0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     33141
IP address blocks:        24.38.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:66:24:02:35:6a:45:01:43:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=c5bdb9f1-db69-4ff0-9ce8-a1403e04f2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6e:04:fd:fc:ac:43:8a:cf:6b:75:5e:9e:1d:
                    c0:5f:c7:0f:4b:8d:ba:12:e8:17:17:d8:d0:56:31:
                    68:e1:69:be:3b:db:05:c6:82:bb:28:3c:b4:86:93:
                    8c:bb:c6:14:60:81:9f:9f:0f:b3:b0:78:4d:59:34:
                    9d:73:27:a6:ca:57:17:03:61:dc:82:38:6c:f9:c7:
                    f1:40:78:1f:5c:af:e8:9f:3c:50:8f:ef:fb:4c:35:
                    c2:5e:fd:e6:22:fe:73:b6:60:b9:ed:4d:38:16:b8:
                    69:ec:49:37:18:9d:af:35:f1:16:ae:e7:99:ea:fe:
                    78:ec:67:3b:d1:d3:e0:18:c2:ee:bc:9d:ba:f2:d4:
                    ad:5a:e3:6c:4c:47:93:84:fb:bf:af:9f:a4:13:e4:
                    fc:94:3b:f4:64:41:3a:a8:f1:ed:59:50:89:15:e5:
                    2c:9a:c8:a2:21:98:17:d8:a9:20:b3:79:a6:71:d7:
                    97:29:20:4a:dc:df:dd:a0:73:54:73:83:41:c5:62:
                    80:8c:6c:09:a4:21:94:64:b8:e4:a8:0e:1f:22:79:
                    9c:e7:a5:d6:ce:fb:2d:96:76:c1:96:4d:63:9c:a2:
                    c8:d5:55:8a:13:c1:29:f7:a7:92:c3:9f:b1:03:04:
                    d0:43:69:5a:5d:ba:23:0b:04:e4:92:3a:1d:d6:fa:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9D:21:45:FD:E3:8C:CB:09:68:76:1C:DB:81:A9:DF:48:33:81:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:82:df:3e:7c:54:0d:d0:83:68:a6:fe:54:62:cd:2b:a9:e5:
         0f:4f:20:92:7c:32:4c:2b:27:3a:9d:1c:6d:de:08:d8:e8:2f:
         95:25:e8:36:90:18:b3:73:b5:f2:00:98:cf:06:93:77:1e:af:
         6f:19:d9:df:9d:89:fb:9f:10:b5:97:eb:59:af:cc:8e:dc:ba:
         d4:7b:1b:2d:4f:6a:61:7f:d6:2d:b8:8f:dd:1e:33:c4:48:0c:
         44:8c:3e:f0:e1:c2:7b:38:c0:3b:c0:a0:ee:59:44:ea:f7:d9:
         de:99:d4:db:59:c1:9f:5d:96:65:fe:a2:40:3c:16:8f:94:a4:
         64:2b:10:b2:d9:6f:8e:06:2a:53:5e:19:25:7f:58:21:88:66:
         78:78:8b:c0:0b:53:e5:14:74:e0:8b:70:87:cf:c4:67:a9:88:
         cf:5e:1a:93:ee:1d:1a:82:96:48:33:f2:63:87:b6:6c:35:cd:
         68:4b:b8:b9:fb:98:fc:5d:25:ad:5b:c3:32:6e:19:42:e7:55:
         d2:79:49:51:f4:6e:47:9c:13:b5:cc:2a:e4:e3:73:59:cf:d2:
         8b:94:77:38:6b:63:cb:5e:25:34:48:ec:21:6f:3a:6c:0b:1b:
         ca:ba:9d:81:ab:11:47:6b:a5:c2:3d:9d:30:b9:42:69:ad:84:
         e2:e0:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org