Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9476e99d-1550-3f0c-b6b2-88d6a76166a7.roa
File:                     9476e99d-1550-3f0c-b6b2-88d6a76166a7.roa (raw, json)
Hash identifier:          Evc7pvlvFBiHp2N2j/t1gwfdomcnofZRFWVxFFdbYRo=
Subject key identifier:   4D:86:D3:2B:6D:19:52:5A:E2:6E:A4:6D:E3:34:B4:0D:7F:67:D3:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584600494FC0B98648279DD0E680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9476e99d-1550-3f0c-b6b2-88d6a76166a7.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        67.187.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:4f:c0:b9:86:48:27:9d:d0:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=20c3a5a7-c258-4bf8-86a9-9ed9ec1d41f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:da:cc:eb:da:48:34:1c:00:63:74:c3:d5:
                    bb:57:92:be:cb:6c:90:c0:28:e2:94:bc:2e:9e:cc:
                    09:ae:8e:99:ea:03:be:77:4f:5b:6c:54:fb:79:aa:
                    ff:0b:c6:2c:59:b9:66:e0:20:fc:a2:b8:c2:67:35:
                    07:b8:ae:64:de:75:62:c1:cc:df:01:19:2c:ac:78:
                    14:f3:ba:c2:22:88:23:ad:d9:11:7a:ce:a4:00:84:
                    c1:d4:85:ec:42:22:1f:fb:b3:48:10:8f:fd:50:e6:
                    d9:86:cd:d4:ed:1c:e3:75:74:bc:98:44:28:d2:8e:
                    4f:46:20:5c:b0:da:07:00:55:88:98:ee:07:2d:7c:
                    fa:58:32:a0:56:9e:63:8a:75:43:cf:97:91:e9:21:
                    9e:b9:e5:26:09:e9:4e:2b:56:dc:47:df:4a:e9:b9:
                    45:13:c0:58:36:fc:b5:63:07:25:50:07:cd:96:68:
                    88:45:2a:26:d4:c8:a5:2d:6a:12:03:68:a5:2a:8e:
                    06:58:c8:af:80:2b:5f:5b:36:9f:41:0d:f5:6d:18:
                    b0:f0:e5:23:db:1c:b8:92:6a:4c:d4:76:3b:c1:c3:
                    b9:89:e0:3f:3c:66:dc:ea:1f:30:68:90:56:13:ce:
                    37:3d:72:a6:44:9c:b2:8c:40:39:26:c6:f5:55:13:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:86:D3:2B:6D:19:52:5A:E2:6E:A4:6D:E3:34:B4:0D:7F:67:D3:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9476e99d-1550-3f0c-b6b2-88d6a76166a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.187.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:42:10:c0:6f:00:5f:5e:9f:0a:ee:18:06:3c:57:85:3f:
         37:e5:27:08:95:af:4a:31:86:5c:16:ce:71:93:0d:c4:ef:28:
         42:21:b8:e5:f9:87:e7:af:7a:a4:ed:ef:0d:a2:5d:6a:87:14:
         7d:f0:26:c3:b7:8b:f0:15:f2:02:4a:a0:7f:4b:81:5f:de:9f:
         dc:09:a3:65:09:c5:77:53:e6:1b:bc:71:bd:66:d6:86:1b:7b:
         86:6c:f6:ca:7c:63:c9:6d:2c:14:05:5e:cb:0c:05:f9:dc:91:
         f5:76:41:f7:ad:70:16:95:2f:ef:bb:59:ce:f3:08:cd:8e:97:
         30:d7:d4:17:ba:01:53:72:ef:a4:34:cf:05:fd:8b:25:cb:f9:
         86:11:52:a2:72:97:86:36:d8:10:90:c1:f9:37:a6:e3:0e:92:
         16:d2:95:27:13:a8:41:5d:6e:d6:0d:93:47:5c:48:95:86:60:
         bb:71:10:19:46:7e:b6:29:5c:a2:d3:12:93:92:d8:c8:c8:f1:
         df:d6:06:e3:3f:91:75:db:8f:b1:16:84:77:b3:f4:38:74:bb:
         3a:0b:f6:f6:7a:27:4b:70:64:23:d9:f6:98:c1:8e:f4:b7:d0:
         06:67:be:92:00:8b:82:23:d0:80:16:34:f4:41:7c:34:7d:bd:
         b3:2d:10:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:02:01 2024 by rpki-client on console-ams.rpki-client.org