Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a829e717-5d8e-355d-aeb6-ffc75d8feec5.roa
File:                     a829e717-5d8e-355d-aeb6-ffc75d8feec5.roa (raw, json)
Hash identifier:          dDmwZ50MUqPPIC6w659Dz84dd6AcioBVi1ldNyNVyvY=
Subject key identifier:   97:DD:1D:29:6F:53:A1:07:9D:54:7E:E2:A6:34:35:D4:65:86:97:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049D783E4DBE209919453C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a829e717-5d8e-355d-aeb6-ffc75d8feec5.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33490
IP address blocks:        173.11.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:d7:83:e4:db:e2:09:91:94:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=9b8c424e-9f60-4a42-b61b-f66b750c282c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:46:12:cc:d4:da:f5:ed:1d:09:69:95:a5:
                    fb:b4:ce:2b:10:3d:ff:2f:51:0a:3c:4f:37:cc:8e:
                    29:44:47:30:7f:eb:b2:c8:36:a1:c3:b7:ab:a2:e6:
                    26:5a:e9:29:fd:82:1d:4c:b7:41:d8:66:e7:70:0e:
                    5a:4e:4d:b3:b9:74:9f:7b:e7:fe:f6:95:14:54:91:
                    45:2c:e1:22:f8:0c:f7:bd:d8:f8:d5:9a:7c:99:a7:
                    02:c5:d7:09:98:b8:c0:cb:e5:00:d3:75:8d:5a:b9:
                    7e:ab:ef:c8:a7:59:d9:0e:8e:67:ca:15:6e:39:1a:
                    f1:da:8f:9b:78:28:f2:34:55:d6:5f:d5:1d:6b:ee:
                    21:49:2b:01:d8:59:47:8b:12:da:25:4b:8a:2d:6a:
                    a5:f9:fc:e3:1d:af:07:55:fa:ed:e6:eb:73:17:36:
                    05:54:4b:dd:c9:4f:b7:dc:5a:6a:00:0d:e8:41:93:
                    52:a1:b1:12:31:26:be:81:38:97:a7:51:50:3d:79:
                    b7:1f:0c:d1:54:bf:89:8c:e3:c0:8c:c7:69:be:da:
                    3b:6a:67:2e:30:d7:7b:37:65:5f:0a:15:5a:7c:0d:
                    2b:df:83:ab:15:e1:eb:e6:34:95:d0:cc:a1:04:c4:
                    20:c1:82:27:7b:40:c9:a6:70:9c:50:24:c8:73:97:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DD:1D:29:6F:53:A1:07:9D:54:7E:E2:A6:34:35:D4:65:86:97:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a829e717-5d8e-355d-aeb6-ffc75d8feec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.11.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:07:14:c8:85:f2:3e:bb:f3:68:4b:b2:91:38:20:fe:be:7b:
         80:33:5b:ad:33:a2:6d:1c:ce:e2:af:b7:54:99:ae:f8:13:98:
         4e:79:57:4a:38:d1:93:c9:d2:78:fb:5e:a2:ca:6d:b8:9b:10:
         1d:65:4a:77:9c:40:02:57:bc:14:49:7d:46:0d:3a:cd:34:c4:
         83:e0:9a:8a:42:c9:98:62:da:c6:a4:df:ba:f1:4a:f5:cb:31:
         34:d9:46:ad:b5:17:a8:e4:26:71:c0:fb:a9:15:11:3a:ed:76:
         9a:55:5c:5b:a4:8a:a6:4b:d0:58:eb:38:82:f6:3b:66:ad:90:
         ae:96:d9:d5:18:48:79:90:00:96:3b:ee:b0:e7:ea:21:8b:73:
         5d:2a:55:b4:db:9b:81:ea:88:81:b8:a6:fc:1a:ae:04:63:2c:
         94:ac:eb:e4:6e:47:58:c4:d7:2d:2d:0e:b0:77:89:ff:e9:26:
         23:a9:8c:f4:84:e0:57:6b:ad:68:69:77:23:8c:51:e4:40:c4:
         44:ef:1c:27:d1:08:29:fc:f7:d6:c1:37:55:ea:27:dc:87:da:
         5b:a3:b5:a9:18:e1:94:89:0d:45:9b:3b:bc:6e:35:c3:2f:53:
         a6:75:6c:ed:6f:18:e7:aa:f1:03:19:97:ee:c7:c8:01:74:fc:
         d3:40:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:50:38 2024 by rpki-client on console-fra.rpki-client.org