Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a438e845-cf8b-3a33-a3c3-0f00c05c1046.roa
File:                     a438e845-cf8b-3a33-a3c3-0f00c05c1046.roa (raw, json)
Hash identifier:          vOTkXVRGR2V7RJdtvCFKPQrn1DjQfWBEoISDg6xBHtc=
Subject key identifier:   9A:41:D9:BA:DD:6A:D4:8E:FF:94:A3:98:BE:83:D0:4B:7A:03:A1:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460FA41DCA876422CE276AFF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a438e845-cf8b-3a33-a3c3-0f00c05c1046.roa
Signing time:             Sat 01 Jun 2024 01:00:28 +0000
ROA not before:           Sat 01 Jun 2024 01:00:28 +0000
ROA not after:            Fri 30 Aug 2024 01:00:28 +0000
asID:                     22258
IP address blocks:        76.138.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:a4:1d:ca:87:64:22:ce:27:6a:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 01:00:28 2024 GMT
            Not After : Aug 30 01:00:28 2024 GMT
        Subject: CN=bca341ef-8858-4add-88b4-e5df808f3d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:85:50:9d:44:c3:37:af:89:f2:31:65:5a:
                    80:9f:8e:05:b8:27:75:97:e1:f3:37:52:c3:55:01:
                    80:d4:b4:bd:54:5c:8b:96:36:32:b5:3f:2b:7a:a1:
                    7e:dd:b5:94:af:a4:b7:f4:e1:ec:b1:b7:9c:4a:93:
                    76:2f:f9:94:cc:cf:28:53:91:fd:4a:93:e9:d1:a1:
                    8f:3a:8f:d1:76:82:37:7d:96:aa:46:71:27:2a:ad:
                    0a:4b:5d:c5:7e:5a:bb:e8:9f:f8:75:d3:a7:08:d5:
                    29:7e:c0:10:e5:94:81:bd:36:a2:0d:c1:d3:c5:8e:
                    6a:33:0f:2b:76:20:21:23:ce:e7:2b:e6:98:c0:4c:
                    d8:c6:17:bc:0e:23:91:dd:d0:4a:1a:ab:d2:e5:d2:
                    3e:ce:32:6b:c4:07:7a:3f:97:2a:2d:95:be:8b:b2:
                    cb:83:94:57:63:9e:f2:79:a2:d1:9f:f9:3f:73:f9:
                    e2:9c:f6:87:c1:55:e5:5e:55:41:06:6b:a5:f4:89:
                    90:8c:94:4c:67:0d:f8:d1:e8:fd:eb:33:de:e9:c3:
                    23:ff:8a:78:fe:42:d3:db:33:8b:3c:a5:db:fe:0f:
                    43:38:fe:12:a2:ce:da:b5:f3:a9:f9:53:46:0f:54:
                    85:d8:b1:3a:3a:24:c0:1b:e5:41:d4:57:c0:95:59:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:41:D9:BA:DD:6A:D4:8E:FF:94:A3:98:BE:83:D0:4B:7A:03:A1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a438e845-cf8b-3a33-a3c3-0f00c05c1046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:8a:5c:f2:49:15:d5:97:00:2e:1d:bc:42:da:b3:a4:ab:42:
         86:31:cf:7e:d4:a7:6a:7b:f8:78:ea:b9:54:44:cf:70:74:15:
         18:1a:00:f6:9d:4e:49:8c:7f:ab:bf:ae:96:90:4d:1e:53:0f:
         a5:c3:1a:7e:3c:ca:f5:ea:09:22:37:5b:60:c3:ef:44:af:82:
         43:ba:3c:0f:c7:f8:f6:96:81:7c:9e:da:6d:02:91:0d:a8:87:
         79:e0:25:c9:3d:9d:e6:f9:06:45:5f:29:2a:8d:98:62:34:95:
         c2:15:95:c8:7e:35:d4:97:5d:84:61:a4:a3:6b:ce:b7:93:d1:
         26:7a:3c:6d:ee:29:3e:38:76:e8:fa:cd:41:ef:ae:bd:22:61:
         fd:20:ff:9c:6f:ed:41:c3:28:a7:06:e4:5a:33:5b:f1:27:49:
         e3:70:ae:39:91:7b:15:7c:47:60:f7:a0:bd:14:d4:c1:d3:9a:
         d5:a1:ab:2e:30:b1:b5:0f:85:9a:ba:ca:29:17:f5:31:d4:ee:
         7d:80:ef:67:f6:ca:6c:ab:b6:57:98:e8:13:7e:d4:8e:67:1c:
         10:d9:cb:c9:bd:7e:8a:4e:35:18:7f:d5:cd:8e:cf:0f:ab:98:
         67:37:f4:25:14:b5:eb:46:7d:ae:b2:16:03:a6:5e:e3:74:03:
         25:36:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:02:37 2024 by rpki-client on console-ams.rpki-client.org