Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39429b41-3a64-3f2a-8e98-385f64fc9ef1.roa
File:                     39429b41-3a64-3f2a-8e98-385f64fc9ef1.roa (raw, json)
Hash identifier:          9DxgfupuhjwAWAGjqxFulLicpH5FPsiucC1bvCeFl/4=
Subject key identifier:   4F:4A:00:A7:B8:78:9B:7E:8F:8E:59:B4:BD:C5:3C:17:66:60:BE:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AFCA554C0ABE6BC2E5F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39429b41-3a64-3f2a-8e98-385f64fc9ef1.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        69.138.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:fc:a5:54:c0:ab:e6:bc:2e:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=35ec237e-9f7e-43b1-8685-8bc0cb987cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:8c:bd:8b:d3:9a:1a:5a:34:e7:35:88:52:
                    50:4c:86:a7:91:27:14:13:77:93:0a:91:65:3c:d7:
                    87:81:b5:36:41:d3:1a:4f:30:dd:5d:16:44:4b:cc:
                    5e:75:f4:a7:5c:ce:8f:14:8c:33:5e:56:2f:c4:be:
                    08:98:c4:c6:f5:b2:8b:85:4c:46:4d:11:e1:14:a1:
                    10:43:0a:62:79:db:2a:a6:84:c5:89:f0:ab:dc:67:
                    a1:77:a2:e5:3f:fe:fb:96:76:41:28:30:a7:12:a4:
                    c4:8a:6f:4d:21:ce:78:c8:c2:0e:20:ba:04:55:7b:
                    27:ec:0a:4c:bc:e9:02:ef:5d:e9:7e:42:df:d6:8a:
                    ac:da:15:c0:ef:1e:0c:4d:f8:df:ca:2d:cb:15:9c:
                    42:1a:39:75:fe:d6:fd:4b:ea:38:c5:79:32:a5:1f:
                    7d:46:65:c3:d7:bb:ca:59:18:10:50:56:1f:23:73:
                    32:da:81:5f:de:43:3e:cb:61:29:5d:af:2d:90:88:
                    9c:dc:1c:a3:11:d4:8c:20:94:91:20:d9:e4:9e:fd:
                    6b:d6:bb:44:28:21:86:2e:8d:0e:0a:0b:e3:a4:1e:
                    08:58:d7:e1:6b:9c:94:3f:49:f0:38:04:b3:24:6d:
                    96:f3:c9:75:c2:5b:06:13:40:fd:bb:c0:1b:35:2a:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4A:00:A7:B8:78:9B:7E:8F:8E:59:B4:BD:C5:3C:17:66:60:BE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39429b41-3a64-3f2a-8e98-385f64fc9ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.138.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:de:5d:38:74:df:07:98:ce:c5:d7:a6:f4:80:ec:d9:86:
         a1:3f:78:7f:d5:1c:85:56:92:6c:13:0c:af:10:01:c4:6b:14:
         63:5b:26:e7:c8:2b:19:67:a6:05:83:87:8b:74:59:30:0b:d3:
         51:3c:a6:f1:90:d2:62:d7:14:d6:53:df:70:61:28:9d:06:17:
         6f:ca:3f:2d:50:a9:cf:03:98:f9:a0:05:72:7f:5f:1c:87:8e:
         d9:5a:0b:f2:78:d0:d9:19:a4:7a:f5:96:8e:ba:c8:7b:d6:d0:
         26:48:16:ab:21:f1:ea:71:2f:a3:80:b7:f2:2c:52:28:2b:6a:
         46:e4:b9:34:68:86:bd:f3:fc:59:be:d1:58:30:a9:fc:5f:56:
         5c:c3:56:67:04:b2:88:63:11:53:a2:00:ab:98:f7:fc:5d:0a:
         a2:5f:2c:0c:85:3e:09:5e:66:6a:59:76:d2:38:c2:e4:a0:9e:
         0d:d5:03:83:dc:96:bf:fa:82:60:c2:14:7f:93:9d:ff:e6:f6:
         82:80:35:07:a2:54:19:54:d8:f9:38:54:fe:bf:68:0e:1a:1b:
         b4:c7:64:dd:b1:37:31:87:01:e5:f2:08:f5:c4:c2:39:54:c3:
         3d:94:aa:63:0e:dd:a3:62:4c:2e:3e:d0:a8:df:05:16:c3:fd:
         11:6b:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:58:20 2024 by rpki-client on console-ams.rpki-client.org