Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d69d53-77d8-3909-bb46-46f8649771a7.roa
File:                     21d69d53-77d8-3909-bb46-46f8649771a7.roa (raw, json)
Hash identifier:          L5LlEUBIssp24PoVdvNct9Y+rC/MFY6cNhwvM5+G1VI=
Subject key identifier:   B9:EC:37:19:E6:89:12:A5:E3:A7:DB:E4:45:96:79:FC:A1:36:56:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460FA42AC3778F9EA306330F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d69d53-77d8-3909-bb46-46f8649771a7.roa
Signing time:             Sat 01 Jun 2024 01:00:28 +0000
ROA not before:           Sat 01 Jun 2024 01:00:28 +0000
ROA not after:            Fri 30 Aug 2024 01:00:28 +0000
asID:                     7016
IP address blocks:        174.181.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:a4:2a:c3:77:8f:9e:a3:06:33:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 01:00:28 2024 GMT
            Not After : Aug 30 01:00:28 2024 GMT
        Subject: CN=70ff4d04-cae8-43be-aa14-49d5093bbfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:72:5e:78:12:8c:b2:5c:bd:95:7e:a5:a4:
                    de:56:7c:9e:0d:e2:b0:3a:41:8d:a9:0f:e7:87:a4:
                    b3:99:67:3b:c6:c6:31:ea:2a:17:8b:bc:01:63:82:
                    fb:0e:63:18:c5:7d:09:7e:4e:25:be:ad:0a:65:6c:
                    ff:94:36:1d:54:4d:5e:d0:ae:d9:1a:fe:02:28:a0:
                    16:60:f3:cf:6e:80:ab:3f:b6:f9:9b:95:e4:7f:90:
                    1f:9e:4c:80:5b:22:be:f3:3f:ae:46:55:bd:43:54:
                    1d:7e:be:de:37:85:55:93:bf:5a:7a:6f:08:2c:64:
                    1d:84:7e:b2:65:6e:ed:32:35:eb:01:b0:23:64:3d:
                    de:a3:84:f4:7a:61:61:72:8d:c6:ab:8d:f2:99:71:
                    c3:03:e5:03:07:59:0e:ae:14:57:3c:bc:cd:11:d4:
                    75:3c:c3:f3:c2:a2:6b:b1:14:e3:d2:c9:fc:f9:0e:
                    8b:2c:6e:05:ab:69:7a:90:fe:b6:9e:e2:41:31:21:
                    9e:af:cd:da:a5:92:a7:71:cb:ad:bf:3a:ad:f9:f2:
                    c2:62:3a:1c:06:48:95:4c:b2:d9:96:e7:c1:48:22:
                    a6:05:b6:ca:02:3d:e5:36:d5:04:e8:ca:42:16:19:
                    19:89:6a:04:1d:5d:7e:b3:5b:da:8e:f7:10:d6:38:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EC:37:19:E6:89:12:A5:E3:A7:DB:E4:45:96:79:FC:A1:36:56:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21d69d53-77d8-3909-bb46-46f8649771a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:83:bf:8a:fb:39:6e:d7:04:43:05:ab:39:b2:8a:56:75:1b:
         51:ab:b0:42:45:e5:b1:d9:9b:78:f8:c0:1d:0b:a5:8f:7f:2d:
         79:7c:53:68:ef:0f:37:8a:fc:a6:46:f3:25:06:62:fd:50:73:
         d4:35:57:76:5a:6f:5f:22:93:9b:f1:62:d1:ab:a2:7f:bb:de:
         e9:61:ce:a3:a4:23:10:4e:a4:45:74:da:d2:f5:8d:78:bc:20:
         0a:d6:3f:25:e4:0d:79:b3:ae:c1:21:d3:40:f5:4f:da:98:da:
         ec:3f:32:70:80:58:47:85:4b:cc:84:94:bd:0d:1e:f5:b3:e1:
         58:86:ba:cc:e8:c9:26:8a:98:c8:e8:1f:73:30:79:7b:fa:8d:
         f4:16:c8:10:34:15:b2:1d:1e:79:c1:ac:0f:dc:c8:88:ab:21:
         e2:5a:55:00:4b:2c:23:c9:4d:74:cc:49:48:e2:0f:4f:3b:c5:
         de:fd:44:a6:95:d5:67:25:88:76:e3:27:74:50:fe:5a:bc:de:
         dc:a2:be:da:82:f5:9a:69:04:7f:10:13:fa:21:a6:0c:ec:39:
         7f:c7:bf:86:9e:d8:95:03:a3:df:e1:e0:b6:47:3c:61:07:3d:
         4e:22:07:d8:2c:3a:d6:f6:52:ec:c2:25:3a:8e:e3:35:d8:55:
         38:ce:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:57:27 2024 by rpki-client on console-ams.rpki-client.org