Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3446ae0d-7c1d-3fee-93a5-4999ff723eec.roa
File:                     3446ae0d-7c1d-3fee-93a5-4999ff723eec.roa (raw, json)
Hash identifier:          Ol9pUp0zQjKsyxRAbL0/TL7o3YmAFvtwhFC7S6qYJm0=
Subject key identifier:   23:4B:55:76:1F:68:DF:F2:10:F1:66:33:F7:3E:A5:71:87:97:38:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049CFF63A74E667522A6D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3446ae0d-7c1d-3fee-93a5-4999ff723eec.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33489
IP address blocks:        76.29.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:cf:f6:3a:74:e6:67:52:2a:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=51d6f4e4-f888-4726-ad8c-f2306e8c851e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:8b:e8:f7:4c:ed:fb:e1:c9:bf:b9:4c:07:
                    c8:e9:a4:81:8b:7f:51:33:11:37:81:e9:9c:5b:a4:
                    ef:b4:1c:88:57:99:c7:af:56:38:ab:be:af:9b:84:
                    c7:2b:10:65:aa:ef:3d:ee:d8:c3:58:67:4c:78:40:
                    af:00:56:03:78:a2:32:68:34:5c:8c:c8:0c:23:8d:
                    19:f6:2a:73:cf:6e:af:9b:50:ac:6c:4d:97:22:be:
                    35:2f:93:a0:50:71:40:72:2a:d9:35:c2:68:c1:1a:
                    4a:e1:15:2a:db:22:67:64:c2:0a:44:61:54:bc:91:
                    32:51:22:7f:b3:47:f8:d0:0b:dc:8f:1f:37:27:3f:
                    ea:0a:c1:d3:f5:52:ac:c8:42:ca:43:67:df:3c:b9:
                    db:c5:61:f4:b6:25:8c:13:85:23:7f:3c:41:69:f0:
                    71:20:bb:78:c6:4d:ab:27:b0:fd:7f:0e:43:01:ca:
                    8c:97:2d:7c:1d:bd:3c:98:36:8b:b0:53:a8:d9:0a:
                    0c:4f:9a:ea:d7:9a:e6:04:47:4a:07:d2:04:28:ae:
                    36:f9:cf:45:fd:4c:58:27:5b:9f:3e:48:d7:fc:43:
                    29:d0:b0:09:6c:d9:54:0e:fa:83:1e:ac:e1:ce:74:
                    e6:df:3d:7a:9d:7b:c7:78:1e:e9:1a:67:e8:59:e2:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4B:55:76:1F:68:DF:F2:10:F1:66:33:F7:3E:A5:71:87:97:38:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3446ae0d-7c1d-3fee-93a5-4999ff723eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.29.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d3:ef:e5:c1:8f:9d:eb:b7:6d:31:c9:0f:e8:7d:35:4e:c5:
         f6:cf:97:46:df:35:b6:14:d6:fe:12:75:54:7a:6e:b9:bf:49:
         05:33:6a:ae:5f:82:ee:57:aa:7f:3d:97:6f:d7:08:c5:8e:83:
         08:08:83:c2:c3:d5:5d:8f:56:c8:8f:c6:77:9c:90:f0:b4:91:
         90:46:d6:6a:00:99:b4:42:64:76:f5:d2:c0:ba:70:63:46:0c:
         79:ed:fc:d6:c2:52:60:95:93:65:83:5a:5d:6c:c2:37:f7:ee:
         86:ca:64:7c:b7:f2:3d:e6:98:a8:51:b5:74:49:22:6d:a4:3c:
         08:f8:49:a7:96:09:50:2e:1e:c4:e3:1a:16:56:c2:20:e0:2e:
         78:71:87:6d:68:1e:0d:99:3b:33:03:de:24:4c:ce:71:9e:e5:
         6f:64:a8:2d:52:79:99:59:72:49:59:37:36:f9:8d:37:1f:f5:
         82:d8:73:30:f6:c0:a3:08:b9:c5:9f:54:64:b9:de:0a:fe:71:
         3f:e8:69:7b:16:b4:7f:7a:4b:2b:c9:2b:d8:84:77:d4:6c:e2:
         4f:7a:29:30:75:ca:98:54:e7:e6:80:38:6b:f9:f8:1e:9c:4f:
         df:e0:88:06:79:41:ac:a9:8c:cc:1c:e4:63:0d:ef:c9:c2:7b:
         e2:9c:bf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:55:43 2024 by rpki-client on console-ams.rpki-client.org