Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d20f2-0e5b-37e2-8e95-c8546d40d479.roa
File:                     943d20f2-0e5b-37e2-8e95-c8546d40d479.roa (raw, json)
Hash identifier:          58IPaYDSKOx2lCGA8hobrURkYpWI3L/jBFSGSNUCQrk=
Subject key identifier:   02:E8:59:94:81:FF:70:C8:00:57:52:EE:38:77:58:19:0A:DB:F2:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C1D9BE965ACE6A191B480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d20f2-0e5b-37e2-8e95-c8546d40d479.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        107.4.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:1d:9b:e9:65:ac:e6:a1:91:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f640b6d5-cb19-4908-bca5-be39b783424f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:be:7e:6d:ce:93:2f:89:72:b6:f1:94:8a:
                    e2:dc:f4:28:0d:e2:49:3e:ad:bb:f8:f6:78:5d:48:
                    7e:e6:42:1b:e5:06:43:3c:b1:25:b5:c4:44:72:26:
                    83:11:22:3a:97:3c:6d:12:e7:74:69:ae:0c:b1:e6:
                    5c:80:56:a4:07:56:5b:be:8c:40:58:48:eb:af:a6:
                    31:7e:34:f8:ce:d2:1f:52:10:53:bf:d5:74:71:94:
                    68:d2:41:94:31:4b:ea:ef:ae:cd:ad:49:e1:e7:43:
                    28:4e:ae:1c:3d:1f:96:83:63:52:ca:6a:07:5f:f3:
                    ba:f3:ef:20:60:68:44:6c:ef:e9:3e:f1:64:ff:04:
                    b3:b9:4f:aa:59:49:1c:77:e2:be:20:c9:f9:96:e5:
                    15:fd:77:d7:60:4f:14:f5:a6:77:07:af:a5:82:b6:
                    f2:f2:bf:c9:82:2f:da:07:e3:bb:b2:05:86:6c:84:
                    dd:c1:1d:f0:81:48:87:f8:5e:c9:80:c3:5b:bc:15:
                    fb:0d:3e:0e:1d:e6:94:35:8f:f8:1a:e7:3c:85:fa:
                    ef:d8:62:ac:91:7a:a2:7b:94:c0:6d:ec:48:db:a9:
                    6b:6b:e7:a5:66:03:6f:49:13:08:5c:c2:c2:4d:df:
                    4c:f9:c9:bf:ab:4b:6c:68:e4:61:d6:56:e1:30:ec:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E8:59:94:81:FF:70:C8:00:57:52:EE:38:77:58:19:0A:DB:F2:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d20f2-0e5b-37e2-8e95-c8546d40d479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a4:54:06:8f:e2:6a:ab:61:fe:73:5f:d6:6b:20:f5:eb:07:
         6e:0f:9e:5e:f5:2f:d3:cb:a5:61:2d:da:2f:78:71:b4:0e:42:
         21:d6:6d:a0:67:76:b8:f6:fa:da:2a:05:a9:a4:16:cc:b0:64:
         c8:15:c7:ff:97:f8:42:0a:eb:f9:48:d0:f4:64:98:91:39:f0:
         9e:06:a6:48:0e:71:7a:80:ea:92:33:72:8d:be:a4:cd:14:33:
         1a:be:db:da:b5:8c:0b:d1:e3:97:a7:97:04:df:e0:c2:f2:47:
         f3:7b:76:9e:31:be:b1:c2:58:45:ae:ce:85:6a:a4:f4:fb:e4:
         59:7b:88:99:30:35:99:0e:e0:f8:02:f5:93:05:38:d8:83:67:
         50:73:49:99:b4:8b:cb:81:6b:bd:f8:ff:51:b1:19:50:dd:f7:
         be:07:ec:18:d9:ce:5e:65:eb:5b:fa:21:65:d5:b4:5b:47:c6:
         ad:b0:fd:35:2d:b9:20:12:77:89:90:57:12:6f:ec:bb:aa:36:
         f9:e0:d2:77:f2:d3:0e:91:7e:54:06:c8:b6:6c:62:c3:2e:c7:
         1f:f4:7d:f1:13:93:f2:81:c5:9b:63:8f:3a:ef:16:a1:5d:34:
         35:cd:b2:b1:9c:13:e4:18:0a:1e:6b:47:26:ae:22:b4:e3:ef:
         48:7b:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:48:54 2024 by rpki-client on console-fra.rpki-client.org