Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb0bbac-4c48-3511-a484-c36265b48942.roa
File:                     4fb0bbac-4c48-3511-a484-c36265b48942.roa (raw, json)
Hash identifier:          9oFn79ArPDubEg5OOOlwLYGeJIM/n5t0M4q42yNPe3M=
Subject key identifier:   E8:13:F6:AB:68:60:2D:68:26:2E:94:E1:3D:19:3F:45:04:BA:3A:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049ADC3CE5AD2A065FB82E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb0bbac-4c48-3511-a484-c36265b48942.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        70.89.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:ad:c3:ce:5a:d2:a0:65:fb:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=59ec2ba1-dd79-4d9e-868b-159aa71c7abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:f0:bd:27:4b:fa:8b:1c:55:bc:79:6a:a8:
                    ef:8f:d9:0c:67:58:4e:c2:48:90:85:ad:90:4e:9d:
                    25:d2:36:dc:97:a7:47:55:b5:7e:49:72:a2:6f:1b:
                    df:87:ef:a2:02:74:58:29:fb:e9:71:02:ff:22:78:
                    fa:e8:ba:7e:40:f1:ff:66:17:a5:5a:2a:72:28:a2:
                    67:96:cf:e6:6d:5e:8b:dc:bd:45:05:11:cb:f5:44:
                    07:c1:2d:d0:26:c8:14:d9:2f:50:bb:f1:a1:94:76:
                    b9:d9:7d:40:5d:fe:3d:33:12:01:4c:48:3a:4d:d8:
                    95:ae:1b:c9:65:6b:f7:46:db:c7:3d:7d:65:a3:f2:
                    e2:a8:bb:cb:02:2e:a0:be:36:02:bb:6f:a6:72:fe:
                    b8:d6:dd:2b:68:7b:a5:2f:9a:95:b0:ba:0a:87:3b:
                    0f:cd:2b:25:e7:95:60:94:b8:cc:90:52:5a:20:09:
                    9a:05:1a:27:f0:b3:fd:76:29:d0:80:63:0a:27:0a:
                    b8:0a:52:a1:53:57:ce:69:51:93:88:ce:0d:c3:b3:
                    8c:6c:d5:b5:0a:e7:bf:59:c8:24:93:2e:a9:17:41:
                    b0:de:f1:d8:55:57:b2:e2:d8:59:67:ba:2c:50:e4:
                    24:97:8f:b1:d8:0f:b0:34:5d:73:d2:dd:96:9e:cf:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:13:F6:AB:68:60:2D:68:26:2E:94:E1:3D:19:3F:45:04:BA:3A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb0bbac-4c48-3511-a484-c36265b48942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.89.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a7:fc:d3:6d:14:86:1d:53:9b:96:ab:0b:37:a2:1e:7f:bc:
         d1:62:20:aa:ac:39:02:f3:6f:fd:55:02:5b:e2:ac:46:80:a4:
         a5:12:63:a0:9c:0a:a3:e1:50:ee:7a:46:f1:2f:31:96:07:7c:
         fe:8d:03:1f:10:97:9c:40:f0:0d:23:41:42:5f:7c:bd:7a:0c:
         29:fa:84:05:fd:f1:69:e6:46:3a:5c:25:eb:67:1b:f5:ba:78:
         70:b2:5f:c5:ae:84:56:29:c0:e9:3d:10:76:44:50:f1:09:aa:
         8d:7c:1c:03:16:78:fa:04:b5:a5:d3:7f:1c:80:b9:be:a8:01:
         1a:48:e8:05:80:ec:2b:01:c9:96:8c:47:4d:3c:f3:e8:9a:a7:
         d9:10:c3:06:bb:28:82:18:52:86:1f:3b:da:76:47:e5:cf:5a:
         f4:3e:1c:f6:65:b8:c0:9e:ba:9f:41:3a:d3:5b:c0:24:c4:c4:
         7f:d5:d0:37:2a:e0:51:e3:1a:d4:12:87:fb:aa:bf:3c:a4:2d:
         0f:e9:96:00:d2:11:00:08:32:33:8e:98:e0:9c:6d:a1:d4:01:
         23:a6:91:e7:83:e4:58:f2:67:85:d9:8e:eb:ad:d6:ea:37:1d:
         be:3a:b4:dd:26:ef:43:ad:63:9a:8e:78:aa:5d:56:94:a8:df:
         0d:93:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:29:29 2024 by rpki-client on console-fra.rpki-client.org