Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/460f81f0-9420-3bcf-b9cb-d9b74e0094a2.roa
File:                     460f81f0-9420-3bcf-b9cb-d9b74e0094a2.roa (raw, json)
Hash identifier:          7u0NEFN1S7zCaLOct2MyFXGiBvrG2XrUOMo13jPa0Bg=
Subject key identifier:   35:6A:17:45:EA:0F:21:9B:50:5A:1F:F4:D6:89:56:3D:1B:49:29:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89999A0E8519DD6A894F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/460f81f0-9420-3bcf-b9cb-d9b74e0094a2.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        71.59.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:99:9a:0e:85:19:dd:6a:89:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=4c747076-f2c0-452c-9bcc-e70c27ca60a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:44:5e:2f:4a:cf:2b:78:71:f6:6c:b7:85:
                    0e:8a:44:d2:c6:d6:5f:f8:40:f1:25:e2:dd:9b:f5:
                    6a:30:ed:7f:c3:04:07:a3:30:3d:3a:eb:51:a8:50:
                    cc:90:cf:06:6f:7a:11:b3:7f:2f:e1:93:6f:8e:2a:
                    78:00:66:1e:16:76:69:1e:10:fc:24:7d:5f:18:90:
                    43:70:65:b2:1d:96:01:63:ed:78:18:26:5b:0e:14:
                    b4:c6:d4:b1:da:22:a9:cd:0a:aa:91:58:e6:82:32:
                    b2:6f:80:67:69:09:6b:d7:fd:27:b7:f5:b8:41:2e:
                    fd:1b:39:67:de:61:af:c2:7c:1d:19:3d:e6:2c:0e:
                    51:42:ae:3a:33:3a:dd:60:c3:1c:16:a9:67:c0:9c:
                    36:b6:a1:e1:12:16:67:ed:00:a8:4f:b6:41:f6:1d:
                    92:db:f2:6a:ab:05:ac:34:c6:c2:10:b4:f0:ea:b2:
                    6b:e0:1b:76:a1:2b:89:76:15:52:23:66:3c:af:07:
                    e4:3a:31:57:74:75:09:03:d3:b7:bc:73:83:f5:45:
                    79:0b:13:d3:5e:73:5b:4e:3d:78:36:c6:93:ca:e0:
                    16:b6:30:ba:11:15:b1:c7:8c:9e:11:96:3e:58:3d:
                    73:03:e6:93:7b:ca:0f:38:7f:b1:17:2e:40:27:76:
                    73:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6A:17:45:EA:0F:21:9B:50:5A:1F:F4:D6:89:56:3D:1B:49:29:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/460f81f0-9420-3bcf-b9cb-d9b74e0094a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.59.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:75:71:77:0f:19:d0:f9:91:e4:68:84:16:f8:6e:18:42:6c:
         28:bb:e2:2c:49:8a:8a:80:90:3c:ae:c0:fd:53:fb:d7:02:04:
         46:24:d6:c3:c3:77:ca:2f:9f:ef:14:b7:67:c9:ec:ae:a0:ac:
         75:1b:ba:fb:85:14:db:a6:d2:94:2b:f4:ce:5a:54:7d:87:b0:
         79:d5:4d:25:c1:82:d6:3c:30:6c:ba:a2:ac:2c:eb:8f:8d:bb:
         4d:80:d2:a3:27:7f:69:cb:cd:f5:31:6b:71:6a:2e:19:23:eb:
         ce:e8:65:12:d1:2f:66:7b:7f:41:e0:60:b6:4e:fd:fd:dd:3c:
         92:11:ab:97:8d:eb:f5:00:9a:da:3f:c7:49:d9:71:b0:09:4b:
         75:5c:00:3b:fb:ef:2b:55:e4:05:d1:3e:0d:af:f3:fc:cb:f8:
         f0:91:94:09:52:2c:e5:e8:bb:b3:34:5b:17:aa:f8:35:61:55:
         af:36:17:8f:31:1b:32:6f:b7:7d:6e:a0:10:5c:33:dd:a1:38:
         d9:a1:43:a8:c3:0c:e2:f3:c5:40:a3:52:f1:eb:47:f8:25:d5:
         ef:f0:a0:d9:7a:4d:03:75:2e:60:e4:a3:94:af:3f:32:38:0a:
         3f:69:fa:c0:f5:12:f0:a8:c4:87:be:cc:32:02:de:02:e3:40:
         bf:3b:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:40:55 2024 by rpki-client on console-ams.rpki-client.org