Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41d4629c-96c6-3d99-b420-e9c0b88dc750.roa
File:                     41d4629c-96c6-3d99-b420-e9c0b88dc750.roa (raw, json)
Hash identifier:          xFF9To3/TgwFK6n9zclPYq0X/Y+eh/T0SNnc5/iuuJM=
Subject key identifier:   35:02:83:6A:CC:73:43:91:DA:78:A9:1C:EB:2D:BA:A1:7D:67:DE:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BA0B522931EE6D731DF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41d4629c-96c6-3d99-b420-e9c0b88dc750.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33652
IP address blocks:        69.241.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:a0:b5:22:93:1e:e6:d7:31:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=51db3a43-2b6f-42b8-9431-493ab1d6027c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:ea:f4:f0:fe:2b:7e:ab:6b:88:e5:7a:20:
                    6c:55:41:cc:59:79:98:e3:d0:88:ea:31:c6:a4:14:
                    e0:71:72:48:5c:c6:50:8b:45:80:1d:ef:96:8b:34:
                    83:9c:dc:d3:70:ea:ea:7e:b0:ee:30:f6:5f:2a:15:
                    80:9a:bd:a6:a1:fa:a2:b3:d9:e5:98:da:3b:0b:51:
                    ec:a4:ca:45:bf:d2:6a:49:f3:1b:62:a3:58:f1:ee:
                    5f:66:d8:43:b3:75:61:8b:b7:09:dd:30:27:72:63:
                    a8:05:86:fb:87:58:5e:14:ef:e0:dc:36:d8:66:5b:
                    ca:30:10:c9:ea:20:98:6d:5c:31:f7:53:ea:34:d9:
                    c3:f3:36:bc:2a:12:8f:3f:6e:49:7a:6c:e9:40:95:
                    db:15:10:4e:92:ce:48:b1:c5:d2:64:bc:51:81:ca:
                    df:66:fd:29:3a:0c:8f:ba:1a:e9:75:6f:cd:b4:c3:
                    0c:9e:db:3a:af:57:db:fd:ea:db:d8:bc:6a:68:77:
                    f2:d1:ad:f7:9c:f0:ff:5a:d6:6e:5b:85:28:a8:d0:
                    a7:e1:09:2e:64:69:bf:3a:6d:ec:7e:f0:4d:35:d8:
                    88:3d:9e:a7:ea:d8:57:35:91:94:54:99:5e:a4:2c:
                    ac:21:06:99:81:49:79:9b:50:92:a9:9b:59:2e:bf:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:02:83:6A:CC:73:43:91:DA:78:A9:1C:EB:2D:BA:A1:7D:67:DE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41d4629c-96c6-3d99-b420-e9c0b88dc750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b9:4c:98:5b:83:75:62:95:5a:49:c5:b7:08:45:cb:d4:c5:
         4f:b6:9d:7a:e4:e6:86:64:7f:28:12:77:f6:c6:88:05:47:96:
         4b:f2:a8:68:e3:6c:9d:a6:3e:30:08:89:f5:6a:4e:57:a2:76:
         f4:b1:7e:d1:a0:a7:66:26:de:79:c2:67:6a:4b:02:ae:ee:a1:
         3d:56:a9:2e:8f:c0:03:93:76:54:28:97:c2:39:d7:6c:1c:a8:
         a9:be:b9:47:c7:f1:a8:94:50:df:9f:ba:de:30:89:de:1a:73:
         11:a3:3d:fc:cb:9c:34:44:2a:45:b6:2f:b3:49:cf:ce:af:fb:
         c8:87:cb:07:6c:0f:fa:7c:27:b0:4f:d2:90:19:09:a7:80:ae:
         39:51:90:05:c9:10:64:9d:0b:89:9b:e8:bd:56:4e:90:06:b0:
         4b:11:70:af:64:cc:be:55:5c:46:39:44:2f:45:66:f2:f8:c2:
         4d:7b:60:d5:48:54:fd:b1:9b:91:0e:d1:86:9f:69:68:ec:80:
         e2:c9:2f:35:c7:d3:88:53:1c:73:50:58:cd:65:db:8b:57:a8:
         1e:e9:28:6e:ce:f4:0a:e6:6c:11:1e:ee:f3:16:17:a7:4d:09:
         5c:9d:09:9c:a5:46:6e:e1:74:61:dd:40:02:a7:f4:fa:1b:60:
         1b:d8:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:41:58 2024 by rpki-client on console-fra.rpki-client.org