Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4750a3f-a69b-3117-892f-f095483ce2a3.roa
File:                     e4750a3f-a69b-3117-892f-f095483ce2a3.roa (raw, json)
Hash identifier:          Ca+lX11ewrGGyKehoS/AJUHIckcBXArZUe8t9ODGcqc=
Subject key identifier:   2B:79:64:49:55:E9:20:0D:AA:B6:75:C0:CB:21:DF:7E:99:E5:17:8B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584761719164357F91B877C051D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4750a3f-a69b-3117-892f-f095483ce2a3.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     20940
IP address blocks:        184.24.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:91:64:35:7f:91:b8:77:c0:51:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=a45bc962-60c4-4900-ab8b-1141f8a7c536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0c:2a:f9:b9:73:1e:27:d9:b1:ca:1d:2a:29:
                    53:c9:33:06:04:0b:cd:06:aa:4d:1a:e8:18:5a:85:
                    6b:b8:21:c8:86:ec:e6:b1:57:3f:be:22:97:85:b7:
                    bb:3d:e1:33:ca:33:0f:15:53:92:9a:99:bb:6e:45:
                    4c:97:8b:60:f7:e2:4d:dd:07:c1:11:85:cb:80:1d:
                    8f:c3:5b:a5:22:42:71:e3:55:a1:c6:e7:cd:30:ca:
                    28:f4:d4:12:95:29:be:3e:af:93:e2:35:2e:ce:88:
                    d7:95:20:0a:58:14:78:44:3d:67:ba:14:48:0f:d1:
                    61:44:39:6d:39:24:db:8f:0e:9f:74:f6:18:47:0f:
                    59:96:fb:d3:04:6f:f8:d4:2f:25:38:f2:e1:63:bf:
                    56:f9:8c:aa:b2:1b:f8:34:2b:61:1b:3a:6c:00:ae:
                    1b:da:e3:95:fd:0c:c8:b9:8c:30:83:2b:54:bd:f8:
                    af:57:db:06:ea:27:25:8b:12:50:b4:79:ef:d6:1c:
                    08:45:85:08:5e:2e:10:e4:23:75:a2:3c:ba:6b:f3:
                    27:82:11:f9:87:0a:8a:6c:2c:5e:c2:8f:ef:35:1a:
                    d0:e3:c9:0e:6b:5f:15:20:0a:0d:62:66:7e:bb:f8:
                    e2:67:18:cf:33:49:71:66:d8:5b:e0:0d:7a:a1:53:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:79:64:49:55:E9:20:0D:AA:B6:75:C0:CB:21:DF:7E:99:E5:17:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4750a3f-a69b-3117-892f-f095483ce2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.24.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f4:e4:78:d8:ca:f7:d1:f7:3a:50:75:1f:09:94:45:1a:b1:
         d6:86:db:c0:dd:47:64:26:dc:23:07:5d:28:6b:b4:c0:f3:be:
         8f:72:01:b5:98:86:93:42:b8:43:8e:13:8c:a2:2d:2d:56:56:
         27:5e:c8:b8:9c:8f:e3:54:92:da:b6:0d:29:70:ce:46:7f:cf:
         6e:d9:3f:a5:8a:18:33:59:67:32:7f:5e:51:19:9d:a4:c7:9d:
         72:ca:fc:22:77:01:9f:6a:d0:d9:58:bc:7a:98:1c:67:8d:58:
         71:f9:b6:94:84:63:86:27:9a:a0:a9:1e:cf:67:dc:13:77:73:
         df:99:90:31:38:a4:27:f2:67:39:51:e0:21:d4:36:c9:5d:6c:
         3e:d2:00:9c:63:c3:d4:f7:a4:9b:4b:8f:a6:05:d9:03:16:82:
         44:a2:80:ab:df:26:4b:3a:22:f7:0d:6c:04:f3:7f:a5:28:44:
         24:7d:52:55:93:b3:33:2c:61:31:f4:5e:0f:77:21:c8:a9:27:
         fe:9f:29:25:98:71:c4:94:81:ea:3e:0c:08:b8:99:b0:d4:2e:
         d6:df:eb:86:c3:51:7d:c8:ac:81:57:e0:9f:e6:e1:f5:21:f5:
         e3:8b:a2:f1:97:0c:a9:59:be:5c:a6:fc:e0:a1:6d:ef:a2:f9:
         26:06:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:36 2024 by rpki-client on console-ams.rpki-client.org