Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/380f7655-19c8-3b48-a42d-e55d4477c550.roa
File:                     380f7655-19c8-3b48-a42d-e55d4477c550.roa (raw, json)
Hash identifier:          HDJoWZ0fr4ouTGk31Z381nR2iSR0DYWpinhUZAUlDDE=
Subject key identifier:   34:28:84:F1:E8:66:49:12:ED:E0:B8:98:D3:B9:26:2C:27:1F:5D:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C528F1B9DE261856DD7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/380f7655-19c8-3b48-a42d-e55d4477c550.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33657
IP address blocks:        68.87.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:52:8f:1b:9d:e2:61:85:6d:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=45932624-b121-4122-a32f-bd95f42a4a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cb:18:59:fc:93:03:2d:03:29:2e:34:f2:96:
                    b8:d2:28:ea:11:67:95:45:d0:e4:9d:73:da:4d:53:
                    14:4d:a8:10:74:6d:c9:6f:fc:44:a8:2a:dd:35:fc:
                    a2:f1:d8:67:90:97:57:44:68:66:1e:25:12:f8:06:
                    55:9e:9e:a9:1c:a2:4a:63:b4:72:a8:41:12:a3:55:
                    f3:a3:0f:93:10:93:09:a3:de:11:23:24:b0:42:e2:
                    98:82:95:6c:bb:c9:d1:cf:c1:62:49:42:37:c6:68:
                    ca:96:0a:25:8c:1f:7b:0f:6b:00:ca:92:d1:5b:67:
                    87:a1:a1:bc:49:ad:21:b2:f4:28:d0:bd:2a:36:cd:
                    aa:79:07:d0:b8:b1:68:78:8f:e8:f4:b9:5a:2b:4a:
                    91:dd:fc:28:24:60:e7:43:5a:15:6b:42:1e:48:50:
                    4f:72:42:80:79:f4:96:95:09:47:e6:dd:19:29:d5:
                    b8:a3:43:e8:12:9d:89:d0:d3:91:44:07:00:07:26:
                    fb:c6:ae:b1:a0:1d:66:1a:42:82:ca:ac:32:9a:48:
                    8d:46:1c:75:cf:00:b8:9e:7b:24:e9:48:5a:61:c3:
                    37:af:d9:a8:b1:5f:ba:05:ff:de:a0:ec:0c:54:0a:
                    1f:81:4d:68:7d:3f:c6:34:9a:34:53:dc:fa:43:93:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:28:84:F1:E8:66:49:12:ED:E0:B8:98:D3:B9:26:2C:27:1F:5D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/380f7655-19c8-3b48-a42d-e55d4477c550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:46:0c:4f:c7:59:25:5e:57:3a:0f:a6:f5:28:11:1f:62:
         d0:78:95:70:a5:e6:9d:11:95:27:b0:62:41:8f:02:29:9f:a3:
         90:18:9e:dc:cf:c1:1e:66:47:36:2b:12:62:5f:74:89:e1:72:
         d4:c5:9a:38:e7:48:04:01:cf:4c:ba:b1:aa:5a:90:5a:8d:b6:
         62:63:a0:05:8e:e4:e3:d3:6e:83:c3:05:95:26:db:f4:ba:b7:
         c9:18:a1:d5:63:37:0b:b4:aa:3d:f6:4f:1c:43:b7:b8:ce:2d:
         d4:c8:47:55:f5:50:5f:ce:4e:76:9e:05:c9:09:91:d2:2a:94:
         05:a3:82:2f:80:e3:3b:6f:5e:4d:0c:7e:a4:a2:0d:e3:3c:2d:
         5a:f1:09:63:23:f4:03:e7:17:3a:12:9c:45:21:24:f0:66:5a:
         dc:15:dc:fd:05:72:b6:c5:00:e4:c3:39:82:2f:fa:54:f6:e8:
         92:5a:33:17:cd:07:b2:61:47:17:c8:10:1b:30:03:52:70:2f:
         1c:d2:31:b5:47:92:e2:04:3a:5b:c7:df:ca:5e:5a:96:73:b3:
         f4:ef:ca:40:07:e7:00:a7:12:a0:bb:02:78:cd:07:94:59:aa:
         3e:53:ee:24:94:7f:38:6d:46:b5:4f:eb:08:36:4c:6d:01:a4:
         01:b1:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:58:18 2024 by rpki-client on console-ams.rpki-client.org