Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa
File:                     8b0133f6-1583-3502-8817-00f78f135afb.roa (raw, json)
Hash identifier:          wR9TXSvTfg2C1b7SU8fwTRUpiF2kGIqXpTmMees0XEY=
Subject key identifier:   4E:9A:0F:30:75:79:67:31:52:2B:01:F4:B8:A7:55:78:F6:EC:88:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049C4606069B84288A121C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     21508
IP address blocks:        68.86.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:c4:60:60:69:b8:42:88:a1:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=ef833acd-7d39-49e5-aa24-4326ec79d816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:86:40:d9:54:79:23:2c:f4:2e:85:af:0c:
                    c3:6d:55:41:6b:17:ef:0b:81:d5:67:14:90:23:70:
                    eb:1a:d7:96:d1:d1:1c:0f:e3:46:43:b7:ab:a8:66:
                    71:27:e2:d9:a5:e6:13:a2:4a:0f:e9:c7:41:c5:b4:
                    74:3e:82:dc:e6:77:1c:e0:ec:fd:2e:07:de:82:f9:
                    44:75:ea:a8:70:3c:43:93:ec:c7:b6:6a:49:8e:62:
                    fc:f2:e9:0b:07:8f:0f:49:0d:c9:d2:84:dd:a4:8c:
                    e9:4d:39:60:a0:24:a4:5e:b6:bd:d7:2c:33:e0:12:
                    aa:a9:a9:04:fd:05:3b:b1:e8:a3:21:0e:e6:3c:b7:
                    de:ee:49:5a:ff:c1:80:03:ab:8c:4f:e2:90:1c:8e:
                    0a:27:5d:bf:bb:91:96:5c:b4:0e:18:ef:ff:44:2f:
                    13:97:7d:ab:7e:a6:22:36:01:91:5e:0d:66:69:f4:
                    c8:44:fe:21:85:a0:8a:64:48:8c:a6:44:02:0d:97:
                    de:d8:a6:08:f5:a6:a2:31:49:61:bf:f2:24:fc:77:
                    7b:f2:fb:ec:89:86:5d:a7:da:be:ed:92:20:2b:96:
                    d0:f0:5c:d2:c4:bb:66:64:1a:de:5d:0f:c4:eb:a0:
                    94:59:a4:c6:90:b5:66:2d:d2:65:1b:4b:51:cc:78:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9A:0F:30:75:79:67:31:52:2B:01:F4:B8:A7:55:78:F6:EC:88:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:ca:e7:7d:02:28:bf:d2:cc:13:83:e8:39:95:a7:49:f7:
         31:dd:6b:6f:da:d4:c6:fb:fc:41:18:8a:39:60:dd:1d:f9:0c:
         07:13:6b:4e:e9:a9:99:84:94:94:61:92:c8:ac:03:f6:6e:61:
         14:26:4b:dd:80:1c:cf:f7:86:d9:bb:57:2d:3c:88:46:44:56:
         df:f7:09:c9:a7:8a:d3:96:d6:ed:65:e2:b4:f1:bd:d6:c3:f3:
         be:f7:62:78:63:1c:34:33:e0:ae:6e:58:d7:8c:63:dc:04:9b:
         ec:76:64:00:cf:24:d0:11:2f:2a:fd:82:bc:4b:b1:fc:02:da:
         2f:f9:2c:a1:c8:e7:0d:66:48:7e:26:94:aa:41:f1:f3:51:e9:
         9c:85:a9:8a:51:4b:2a:cd:80:0d:cc:32:94:1c:c1:c9:1c:fc:
         94:64:4e:8a:f9:26:0e:81:dc:7e:c2:86:19:1a:07:86:fb:cf:
         1c:17:e9:24:04:ec:87:b0:09:53:b2:25:a6:85:fe:13:3b:69:
         e1:46:ae:f2:56:b9:3e:43:88:2e:ad:3a:20:3a:d3:20:71:9f:
         ac:59:a0:72:ad:75:a7:ea:5c:1d:fe:42:7c:0d:af:16:a3:96:
         47:1b:1f:d9:ec:af:1f:39:08:ed:b8:df:03:b8:e4:8b:60:55:
         0c:05:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:05:13 2024 by rpki-client on console-ams.rpki-client.org