Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4136c9ad-a97b-3cae-bdfc-95421bc2871d.roa
File:                     4136c9ad-a97b-3cae-bdfc-95421bc2871d.roa (raw, json)
Hash identifier:          R1NBYGrK2wbSweecj14e46mDKHuNQpjMit5ogkf7S60=
Subject key identifier:   F5:CA:B8:FB:B7:99:49:16:E1:AC:CC:4A:87:1A:74:DF:EE:2F:71:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004967C904F5A046841B9D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4136c9ad-a97b-3cae-bdfc-95421bc2871d.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        71.228.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:67:c9:04:f5:a0:46:84:1b:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=b961afb1-a737-4661-892f-91820bb138ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:98:65:35:29:d6:d3:c5:cf:67:83:b4:a6:
                    34:fc:59:9f:19:6f:34:b9:be:07:42:f6:a7:87:42:
                    97:00:8b:54:85:e5:88:a4:14:cf:ff:4a:93:77:6c:
                    0f:c2:9a:e5:26:39:0d:90:fd:8a:9f:f3:c5:69:e3:
                    4d:5d:cc:f0:a2:f0:d9:ff:fa:8d:12:2c:0d:22:21:
                    fd:09:1f:db:c6:7f:fc:a4:32:ae:58:cf:4b:17:e5:
                    73:4b:96:1a:4a:aa:73:9c:5d:54:ed:fd:5b:4a:df:
                    29:f2:88:0e:f3:0d:03:82:21:75:16:42:f8:1b:18:
                    ea:56:8a:79:53:c9:02:50:f2:f8:10:cf:6b:30:8f:
                    cc:37:77:0a:24:1b:ea:c9:74:93:10:db:a8:e2:b0:
                    41:1f:f8:f3:2d:eb:9d:6e:48:12:de:56:54:d0:da:
                    6d:9a:be:58:bd:f8:f4:e3:7d:46:4a:b7:a5:5f:38:
                    02:f5:54:c1:1e:03:a0:d1:32:d6:c9:50:ae:78:3b:
                    99:2f:20:2b:4e:78:5e:da:16:1c:c1:7a:0d:cc:ee:
                    c4:78:f8:ae:27:c5:f2:00:d6:93:95:03:a9:65:48:
                    6e:31:4c:0e:0a:97:bf:d1:2b:0b:62:9e:30:cd:4a:
                    77:09:98:47:32:28:b0:77:67:45:80:9a:0e:74:65:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CA:B8:FB:B7:99:49:16:E1:AC:CC:4A:87:1A:74:DF:EE:2F:71:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4136c9ad-a97b-3cae-bdfc-95421bc2871d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:76:83:d4:7c:02:49:14:75:63:59:e3:7e:11:fb:c3:b8:7a:
         fa:93:d3:1d:5c:c5:cd:ce:1f:92:45:08:d9:99:96:3f:7d:ea:
         0b:0b:a9:47:67:35:b1:4f:a0:4d:76:85:d7:dc:63:ba:6b:c4:
         9f:8d:65:aa:a1:de:4a:b3:f4:07:71:9d:85:45:21:c6:09:65:
         d7:60:91:d3:0e:db:0d:e0:dd:72:16:c2:c1:b9:5f:f2:20:b2:
         e0:7e:e9:41:61:7f:3d:26:33:4e:00:8a:12:11:04:e2:4b:03:
         67:44:97:d3:c1:72:73:6e:05:85:9c:76:3c:42:cd:88:a2:33:
         00:1f:7d:ae:fd:6e:7d:93:d4:0a:d6:32:c4:75:ad:02:27:84:
         ec:24:c7:76:3a:90:08:49:29:a5:52:f1:a5:e0:81:bd:8f:d0:
         ed:dd:92:e4:7d:8b:f2:42:64:20:bc:d9:a4:18:69:ef:08:e0:
         9e:7a:95:a3:9f:66:dc:03:85:11:d3:6a:e8:55:65:cb:60:dc:
         68:cd:b0:53:1d:d5:90:0b:dc:db:b9:f3:b3:65:5c:b0:ee:31:
         9e:b3:c2:2b:c3:d7:e5:23:4a:f1:77:c3:f1:e0:e7:d8:ba:2c:
         d2:fc:d2:9e:7c:d3:f8:d7:e7:2f:2a:0b:65:1e:9f:2c:7c:41:
         f2:78:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:29:05 2024 by rpki-client on console-fra.rpki-client.org