Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa
File:                     256a31a1-c209-37d9-b60b-1ccbb0d76830.roa (raw, json)
Hash identifier:          kh4K97bbiIemiSk+QXjyIIq9DyG7b6ALx7YhRhOnvLo=
Subject key identifier:   91:A1:8F:64:A9:1A:4C:FE:08:06:F6:A1:B9:AC:1D:16:62:A6:1A:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B02F2189C9235A43EC200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        71.228.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:02:f2:18:9c:92:35:a4:3e:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=4e4e2b2a-f982-491a-9478-5bc13c1b6d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bc:f4:62:11:24:54:5a:69:c7:24:82:f5:c9:
                    f1:ef:88:a8:64:e4:bc:ee:dc:a3:25:05:e5:f5:3f:
                    ef:80:cf:bc:66:b0:1d:fe:6f:c6:4f:41:82:30:8e:
                    71:21:32:79:97:58:f1:04:33:56:25:12:0b:d5:26:
                    38:85:f8:6b:6e:00:08:8d:8a:a3:53:65:f1:35:ec:
                    ae:1d:02:9d:c8:6f:a4:74:70:3c:ed:87:75:2d:bf:
                    61:2e:2d:ff:d7:9a:10:de:1d:c5:80:ec:5e:22:82:
                    ac:1b:15:16:25:00:e9:10:af:61:43:cd:c1:f2:40:
                    7d:22:14:68:6f:65:40:a0:3f:e5:2b:85:4c:fb:bc:
                    7f:62:38:cd:bc:82:6c:fe:3a:93:8d:00:41:8d:5f:
                    de:f4:81:16:a6:f0:92:50:ee:1e:29:5a:a4:91:f1:
                    a4:82:d5:63:43:c0:6d:c8:88:2a:3d:0f:41:57:c9:
                    72:f0:bd:d9:f3:4d:e7:0c:4d:1c:2d:b8:7b:a6:bc:
                    8f:8c:d8:48:9f:f8:c2:ec:1c:2d:4b:4d:0d:af:77:
                    86:ec:6f:68:b3:e5:3b:fa:19:ef:22:62:5f:e6:65:
                    08:eb:29:71:95:14:ec:b5:9c:9b:4e:1d:52:e3:4c:
                    5d:c4:2b:65:2f:60:cc:31:c4:b8:0a:6f:1e:4f:bc:
                    3a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A1:8F:64:A9:1A:4C:FE:08:06:F6:A1:B9:AC:1D:16:62:A6:1A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:76:11:a6:0e:ac:76:a4:81:09:93:4d:9a:8a:fa:ce:9c:de:
         fe:52:44:e2:f9:b8:fa:f2:15:68:d7:57:5a:d4:91:bc:50:db:
         75:0d:03:74:15:2a:48:0d:6c:8d:4e:d2:9b:be:d8:85:6c:b6:
         dc:a1:94:fd:d5:c7:b7:c0:0d:cb:fc:55:7a:e4:04:32:6f:82:
         71:c4:f7:cc:3a:6f:d6:4c:bc:fb:16:27:ef:a6:28:7a:0a:ad:
         6f:bc:ff:94:3d:16:6b:7c:b6:c6:10:9e:e3:b0:d3:9f:30:a1:
         ec:ce:74:43:48:98:21:fd:f6:8c:ff:ef:5e:e4:c0:6a:8f:89:
         a9:1d:aa:34:66:fa:c8:a1:e0:11:9d:b2:bb:5b:3f:4e:f4:3b:
         e6:83:b6:98:02:3d:7c:81:67:be:25:10:04:59:e7:6b:8f:0e:
         9f:24:e7:dd:e8:fd:9a:7c:0d:b1:a0:2d:50:bb:38:87:4d:8a:
         19:f2:04:20:16:c2:79:58:60:a4:18:60:70:8d:09:93:60:5b:
         26:ee:eb:a5:6d:cb:7f:38:aa:1f:6d:c6:94:2e:45:ec:d0:79:
         93:69:9c:87:a5:e8:e5:c8:44:54:44:b2:af:5c:b2:c2:98:86:
         a2:c6:fb:53:8a:8b:2e:40:65:78:17:2f:d6:b1:5c:a6:4a:d0:
         1e:03:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:39:40 2024 by rpki-client on console-fra.rpki-client.org