Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a116a274-5e0e-30a4-abd9-9a0aaca42f9c.roa
File:                     a116a274-5e0e-30a4-abd9-9a0aaca42f9c.roa (raw, json)
Hash identifier:          pvTPY/XK4cr59PF09vtoHE9RRbRwgNMZsncK+1iFE8o=
Subject key identifier:   EC:B7:F5:45:BD:E3:C1:01:5A:DA:E8:C0:37:05:15:4A:29:2A:8F:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AF322C48574BA3DC9B880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a116a274-5e0e-30a4-abd9-9a0aaca42f9c.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        68.53.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:f3:22:c4:85:74:ba:3d:c9:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=a9193b21-62ac-4a24-9339-89b8740648b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:cc:06:f8:40:dd:87:2e:86:09:dc:b9:a9:
                    be:52:a0:68:11:ea:f2:85:ff:f6:4e:f1:89:8a:50:
                    0c:25:06:65:5e:5e:1c:e3:f7:29:3b:b6:23:38:4f:
                    c1:56:db:ed:bd:db:cb:10:13:c4:0e:ef:2b:15:5e:
                    3d:24:a7:aa:e4:58:d1:92:07:c4:f1:b4:71:37:74:
                    c2:10:7d:39:54:f4:e9:8a:3f:09:8a:7f:e5:74:63:
                    1d:18:4e:e2:55:57:a6:d0:bd:34:eb:8c:3f:c4:31:
                    9e:5f:36:c3:52:84:c7:eb:05:b8:0a:f1:a2:7e:79:
                    eb:c8:f5:61:78:4f:70:b5:68:cb:91:89:58:c4:a5:
                    01:63:0e:b1:0d:de:16:47:54:1f:49:ca:4d:c2:ed:
                    b7:34:ce:c7:19:74:3d:92:b7:77:9f:c3:60:53:75:
                    ab:f3:5e:76:44:a9:ac:f8:ce:c0:47:33:ba:b6:0c:
                    d9:19:7c:3d:77:7e:f3:be:21:6f:d9:7a:f0:21:37:
                    01:7e:62:ca:14:b6:ce:ff:5c:48:25:cf:13:9c:b1:
                    b6:8d:04:18:e0:d8:f3:1b:ba:a7:3f:df:23:e2:d8:
                    ab:78:cd:12:33:b3:6e:fc:9e:e3:d4:59:a5:ad:85:
                    39:8b:ef:56:a5:0d:59:35:11:10:70:f9:66:b9:e6:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B7:F5:45:BD:E3:C1:01:5A:DA:E8:C0:37:05:15:4A:29:2A:8F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a116a274-5e0e-30a4-abd9-9a0aaca42f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0f:95:65:11:5f:f3:6d:95:6c:82:28:9d:c2:69:99:01:08:
         78:76:f9:5d:45:92:13:d8:8e:22:53:21:6b:fd:01:30:d4:23:
         5e:5f:77:db:18:f5:62:9e:32:33:a7:5d:65:29:8a:ce:63:43:
         12:ec:d3:7a:de:0a:71:29:33:86:f4:33:73:85:24:56:5e:ac:
         40:33:a4:90:a9:29:23:94:e0:75:90:59:f6:be:cc:48:cc:c8:
         19:6c:95:c5:de:09:f0:85:e3:39:bd:c1:7c:d8:0e:09:4d:4f:
         31:be:3d:86:91:e5:b4:40:d6:b6:cd:69:f5:fa:33:5d:bb:fc:
         fd:40:7a:4d:ac:2b:da:a3:a7:d3:16:6c:c5:c8:49:85:bd:6f:
         08:ea:70:46:ac:aa:16:fb:0a:1d:53:21:cd:5a:26:d0:46:02:
         bc:ed:8d:fb:4a:46:68:79:c7:76:ab:a9:5d:55:b1:97:07:be:
         22:e0:7a:c3:bd:d7:2d:85:42:34:dd:a6:95:1a:3e:b8:0f:4e:
         09:fc:a6:12:92:11:0f:a3:76:9c:07:4a:8c:c5:9d:2b:ae:78:
         fc:7f:d2:f6:74:36:cb:6d:bc:0c:54:f0:08:93:8c:15:4e:66:
         40:0c:1d:ab:b4:07:89:a5:2a:0b:0a:ed:8b:2d:39:44:5e:a1:
         4d:ca:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:50:00 2024 by rpki-client on console-fra.rpki-client.org