Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e186afc-349b-3efe-a320-7513181dc3c0.roa
File:                     2e186afc-349b-3efe-a320-7513181dc3c0.roa (raw, json)
Hash identifier:          IU/gtQvsK2hG8Cwgk5ijb+bVE7MEZtJh15jW4LG/BvU=
Subject key identifier:   D5:CC:3A:08:43:A5:D2:ED:D9:1B:1B:C2:17:E3:53:96:5F:80:A6:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B229FE392A90678031A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e186afc-349b-3efe-a320-7513181dc3c0.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        107.3.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:22:9f:e3:92:a9:06:78:03:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=6ae727bb-0090-4058-974a-277accccb1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:80:bb:a5:9e:04:3c:16:aa:83:e0:52:36:c9:
                    c2:81:10:b3:30:ac:6c:7e:89:6a:e8:6a:1c:96:1c:
                    0e:d6:7e:b8:58:9a:bd:05:fa:42:f6:73:bc:ad:3a:
                    e7:93:24:c0:f0:72:3c:b7:81:95:e1:5a:e2:4b:8f:
                    09:13:d7:4a:de:c0:ba:65:51:ed:cd:fb:fc:f5:6f:
                    5a:68:d1:db:84:5d:b6:e0:73:9f:78:51:70:43:fe:
                    24:b7:11:40:ba:06:ab:26:20:f4:6a:b5:8e:32:53:
                    49:64:ba:c5:6f:2a:ef:78:ca:64:81:14:b3:0b:dd:
                    4d:50:77:b7:4c:4f:4a:ec:67:e6:ed:30:6e:44:25:
                    85:6b:4b:10:93:4e:82:b8:fc:38:76:bf:0d:9c:57:
                    02:eb:15:1a:4b:60:9c:92:7d:7b:68:67:aa:f2:19:
                    78:62:13:fb:21:a3:7c:b4:91:41:9e:02:b9:9d:eb:
                    70:2a:af:a7:62:8e:89:65:86:b7:03:11:54:29:00:
                    e1:6a:b1:40:c3:a2:55:83:ff:61:6d:04:46:22:d8:
                    f9:1e:bd:08:46:e0:b5:e6:d6:26:10:b8:99:79:b9:
                    77:63:ea:70:12:b0:fa:62:2b:1d:d2:b6:7f:39:a9:
                    cd:32:f9:57:aa:1c:d3:e1:75:6a:24:fd:bd:13:36:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CC:3A:08:43:A5:D2:ED:D9:1B:1B:C2:17:E3:53:96:5F:80:A6:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e186afc-349b-3efe-a320-7513181dc3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.3.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:78:04:ca:c8:2d:b7:70:ba:0c:b0:cb:25:e6:7f:9e:1c:
         99:8c:88:a1:c1:2a:ac:3c:46:11:ca:c6:c8:05:7b:f4:c0:73:
         4c:8c:89:44:60:8f:7b:c4:18:1c:fe:7d:6e:b1:95:d6:fb:f2:
         cd:71:ca:38:f2:d3:c7:d9:8d:13:f2:9f:67:d5:60:22:e0:7c:
         74:aa:9a:88:54:60:bd:e5:5c:a5:92:21:0b:42:16:88:15:e1:
         1c:24:dd:48:b9:e6:f2:95:34:21:29:24:e3:29:4e:14:0d:7f:
         56:23:f2:d6:5a:2d:4f:c8:0b:d0:fb:9a:15:a8:3d:21:15:e3:
         88:31:e1:9b:74:e2:c6:51:43:09:9e:8e:e3:f3:96:aa:b5:25:
         db:f0:8b:75:20:ff:d1:60:8a:c4:a2:43:5f:97:41:2d:2a:d7:
         0d:33:bf:83:69:51:f5:c7:2f:97:df:3e:a3:12:c5:de:53:63:
         07:28:02:d9:ba:9c:85:a1:7c:d6:fa:ad:c5:4e:c5:85:5c:e2:
         8b:76:33:d2:73:31:68:5d:78:21:61:ba:f8:23:b0:1f:65:91:
         aa:9c:ad:5c:db:a0:d4:6f:a6:d9:88:5b:7e:02:f7:5e:66:0a:
         ff:6b:7f:cc:0a:e5:76:0d:ee:a0:32:d2:f5:ba:78:0e:f8:64:
         60:e2:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:21:32 2024 by rpki-client on console-fra.rpki-client.org