Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10480d2c-5beb-39ab-8536-48bea9f63eea.roa
File:                     10480d2c-5beb-39ab-8536-48bea9f63eea.roa (raw, json)
Hash identifier:          nUbUvAipwRmoUCTz1HKt+MCesDoSHpXyNWR5fT9748I=
Subject key identifier:   A1:E9:EF:EA:FB:28:7C:C7:BF:3B:ED:59:76:87:A0:29:DE:FD:B3:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BA0F7D0C6F129F5739BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10480d2c-5beb-39ab-8536-48bea9f63eea.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33652
IP address blocks:        71.56.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:a0:f7:d0:c6:f1:29:f5:73:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=322fbf8a-f194-4930-87b2-2c60949008d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:5f:df:2d:d1:4d:01:8e:d7:82:06:ca:70:
                    c3:5e:9f:a4:72:b1:d4:22:e5:ca:7f:59:19:5e:53:
                    87:4d:4c:f7:aa:79:70:ce:98:85:92:c4:14:09:37:
                    6e:63:f3:65:a9:1b:e6:70:6c:2d:f5:2b:ee:f2:5f:
                    c8:e3:20:4c:1c:2b:02:cb:f6:1f:b1:37:f4:d1:c1:
                    de:99:52:3b:50:34:5b:58:de:fa:bc:6d:20:9e:fb:
                    93:e1:a2:c6:8f:64:77:d5:ad:b4:9a:9d:29:e3:c1:
                    e9:f3:01:c9:12:8c:b8:e9:b3:20:f3:84:29:52:90:
                    f8:22:5d:20:cf:21:96:70:84:24:db:90:f2:47:33:
                    f1:67:3c:d5:07:f7:96:b7:fa:48:03:ad:fd:6b:13:
                    f7:3a:1b:ba:24:97:46:d0:5b:c3:66:38:83:fb:ba:
                    de:3b:25:61:f3:80:16:3c:79:86:8f:86:f8:63:89:
                    da:d7:30:df:27:f4:e9:e6:77:b9:f4:44:93:59:02:
                    99:dd:06:e4:e1:14:ba:10:1b:97:b0:9f:1d:0c:90:
                    5a:b6:eb:3c:7e:fd:d9:2e:a3:fe:3a:39:b0:f9:60:
                    a2:e2:b0:f6:c6:59:f4:2a:15:60:66:62:b5:46:90:
                    74:9f:22:52:3f:cf:a2:ae:9a:1e:a0:ce:44:e3:96:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E9:EF:EA:FB:28:7C:C7:BF:3B:ED:59:76:87:A0:29:DE:FD:B3:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10480d2c-5beb-39ab-8536-48bea9f63eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.56.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:22:3b:2f:4a:34:04:bc:0c:45:cd:0a:83:6b:ef:20:84:71:
         36:75:33:73:59:40:91:38:63:e6:15:46:01:8d:f7:c0:59:27:
         6a:c3:27:3e:0a:ae:47:a2:1a:d6:93:d2:2a:53:43:98:cc:98:
         01:85:47:96:c6:ad:93:41:7e:9c:63:15:e8:7e:b4:c0:cc:26:
         81:5c:0e:7c:9d:ea:e5:a9:73:05:da:d3:b0:b5:ad:49:51:d8:
         f8:fd:23:5d:78:d1:f7:61:b2:33:ad:8e:56:f8:d7:6f:df:1d:
         70:42:e4:06:99:a0:d8:66:c2:ba:cb:40:c1:14:65:92:93:64:
         04:df:d1:c3:a0:39:45:96:93:c9:e5:f0:d8:48:05:62:ba:bd:
         02:a5:10:88:f5:58:1b:fd:5e:59:92:c3:cd:f7:33:a0:6b:29:
         0b:85:7c:77:10:99:73:86:0f:4e:fc:24:2e:dd:79:55:07:56:
         ed:7f:48:ef:9c:16:23:34:ed:03:a5:e6:19:00:a9:d5:ca:98:
         5f:f7:ad:36:a9:09:40:ba:ae:2f:26:82:8b:2b:bf:00:84:ce:
         2a:85:7f:f5:87:9a:fd:01:56:d0:24:59:d8:b8:73:8b:e9:e6:
         37:05:04:68:35:8d:39:f2:1f:b3:5c:9c:a3:fe:7c:42:73:0c:
         8f:7a:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:39:52 2024 by rpki-client on console-fra.rpki-client.org