Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa99b6ae-8723-35e6-8062-34dac44bd91b.roa
File:                     aa99b6ae-8723-35e6-8062-34dac44bd91b.roa (raw, json)
Hash identifier:          k/RXZB6KgUacFzXphXLURYlKYnSbNsKG1BU6YEx2ZK4=
Subject key identifier:   67:3E:15:E9:60:2E:82:B8:C1:23:31:A6:89:37:0E:1A:86:AC:CA:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A6BD1EE14CD2263F5BB60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa99b6ae-8723-35e6-8062-34dac44bd91b.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        107.2.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:6b:d1:ee:14:cd:22:63:f5:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=9876f7e5-ffd6-4080-8d4f-9d148d959c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:7d:b4:c3:39:ef:92:b3:21:9d:99:e1:a5:
                    8f:70:5f:00:23:b9:0e:20:44:64:94:ac:e3:44:f3:
                    0b:41:99:ad:21:ea:6c:99:59:fd:a0:84:f7:d5:27:
                    9c:0a:af:02:b9:33:ed:58:e3:71:46:82:8e:fc:ce:
                    d5:fd:4d:c1:6a:65:0f:5a:17:c3:83:31:67:14:14:
                    f6:86:c5:16:4e:e9:5a:fd:ad:37:b8:43:04:e7:3e:
                    8b:e6:03:e1:a9:e3:42:12:31:be:b5:9f:86:61:8e:
                    24:19:2e:91:8b:6a:ec:2e:22:07:92:b9:cd:b2:a8:
                    28:6e:ee:23:51:b9:55:30:ee:a6:7f:4e:8c:e0:d9:
                    7e:22:bd:f4:ca:c7:0c:83:95:6e:6b:f9:47:80:30:
                    6a:59:ee:dd:fa:cc:ca:84:73:39:68:4f:1a:79:f9:
                    16:6c:08:e8:14:ec:d5:7c:c8:f3:3c:d5:bd:b6:ef:
                    ff:37:66:53:48:70:d9:bc:a7:1e:f9:14:46:c3:01:
                    e0:d2:f7:5a:d0:4b:f7:d5:03:d8:f6:00:1a:41:7e:
                    41:c9:21:48:48:94:95:6c:26:00:17:67:0a:22:15:
                    4c:ef:60:40:ab:81:74:7d:fb:ba:9a:d2:5c:cd:bb:
                    61:0b:d1:49:ae:c8:0e:39:65:ab:d9:16:4d:35:0f:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3E:15:E9:60:2E:82:B8:C1:23:31:A6:89:37:0E:1A:86:AC:CA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa99b6ae-8723-35e6-8062-34dac44bd91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.2.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:71:59:0c:0d:1f:23:ff:d3:d6:e9:bb:28:6c:96:db:1a:6d:
         6f:f5:80:11:6f:1d:ea:3d:63:a8:6b:00:d7:cf:4f:a2:ca:ae:
         a5:3c:49:e9:b8:51:d4:c7:b9:b8:5f:94:41:23:25:b5:79:e0:
         a6:f1:20:da:f4:44:aa:11:f2:09:b4:23:c9:92:68:9c:0f:1d:
         3c:59:2a:fe:48:df:2f:a3:78:5c:83:18:71:9e:1e:28:85:7b:
         90:d5:40:20:26:54:57:86:bb:40:0a:20:53:1d:a8:0c:d1:b3:
         d6:1f:7b:01:42:61:d9:c9:31:41:96:c7:c0:80:e3:bc:f9:e7:
         5f:5b:10:ea:4d:3c:6d:f9:17:ae:90:19:fd:cd:11:ff:ca:88:
         1e:51:bb:20:3b:b6:65:dc:f0:b6:00:83:d6:bf:57:4b:99:b4:
         c9:94:38:88:f9:86:bd:8b:2d:d9:ea:12:b1:c6:7e:7a:23:03:
         3f:17:c8:5c:c0:85:e5:9a:80:bb:90:5b:7e:e0:3b:0b:f0:d1:
         40:dd:d9:ad:01:4a:d3:11:4f:89:04:32:93:91:40:ee:b5:8a:
         99:41:aa:29:ca:8a:f1:fd:bf:90:79:21:78:e8:cf:0d:8e:1e:
         99:12:0a:b2:82:58:34:e6:bd:7e:46:5d:eb:a1:f2:b7:e3:76:
         c5:b5:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:44:23 2024 by rpki-client on console-ams.rpki-client.org