Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8989da-0d07-3012-b858-f2e1b99e47cd.roa
File:                     ae8989da-0d07-3012-b858-f2e1b99e47cd.roa (raw, json)
Hash identifier:          5+AtucLPgnb6nqVu/AyawLz80UtSqEW2PYVz+Q9L2NI=
Subject key identifier:   4E:0F:8F:5F:AE:42:07:3D:E3:8E:6F:AD:C7:61:2B:EB:00:F9:9E:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C0028575B3FA032222500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8989da-0d07-3012-b858-f2e1b99e47cd.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        68.59.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:00:28:57:5b:3f:a0:32:22:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=30ceda17-e5ee-4eee-be8e-c0594bc57cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:2c:e9:b6:12:1b:de:2e:1d:f5:1a:ad:0c:
                    23:c7:b2:5e:7a:8c:b6:b7:de:0b:03:e9:8d:78:65:
                    f0:17:70:f0:1e:3d:05:c7:60:19:a6:7e:25:6f:2d:
                    fa:96:2b:70:5f:dd:3a:dd:16:ac:0b:e9:15:df:48:
                    8c:2e:c1:a2:b2:ee:5f:15:b6:1f:15:43:4f:28:2c:
                    e4:42:ca:c8:a6:4d:c1:ff:fc:b8:e3:3c:66:c3:ab:
                    ed:b6:57:ef:c4:4c:81:ea:0f:0f:9a:ae:fe:70:4b:
                    f3:36:85:6b:32:2b:35:d9:83:b0:d6:42:38:d0:18:
                    15:98:1a:36:c4:69:5d:c0:3e:1b:c4:29:e6:75:73:
                    11:0f:b8:43:f2:6d:e3:73:d6:12:9f:be:72:7e:fc:
                    69:e0:e5:3b:bf:22:d4:c0:da:4c:a4:b5:41:46:3a:
                    8e:12:1b:fc:b5:f5:2d:bd:4d:79:23:bb:e9:ea:f1:
                    2d:43:9d:c2:42:50:74:0f:d0:4b:6c:5f:a3:f3:5f:
                    e4:4e:1d:ba:79:e7:90:d4:f6:f7:93:82:7d:96:7d:
                    ff:f0:67:3a:39:97:7e:73:45:87:86:e0:71:54:af:
                    f2:99:7b:f7:88:fe:50:f8:51:9f:a1:bf:42:aa:1d:
                    4a:e7:34:bb:26:8c:ee:4c:42:53:94:eb:44:80:ba:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:8F:5F:AE:42:07:3D:E3:8E:6F:AD:C7:61:2B:EB:00:F9:9E:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae8989da-0d07-3012-b858-f2e1b99e47cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:83:0d:f6:99:96:95:a1:b9:2e:65:18:30:04:2b:65:ef:eb:
         ae:2d:4b:fa:de:1f:ef:ab:06:fc:70:f7:02:ff:25:a6:41:65:
         32:00:a9:d7:91:ec:f1:72:f2:ad:4f:0f:73:19:ee:f9:e3:55:
         9c:d5:a7:bc:87:28:e0:94:50:19:01:68:41:aa:05:34:2d:5a:
         3c:b5:23:e6:12:31:d3:87:b8:0c:7c:8c:33:84:f7:fa:05:ee:
         5f:5f:a0:b0:6f:c3:55:90:8d:7c:06:4c:e0:e4:f6:09:70:a4:
         fb:33:94:9f:ed:ab:25:da:11:a9:86:78:7f:e4:38:a8:6e:72:
         3a:87:0d:ca:b0:77:96:52:95:31:98:b5:ec:ba:e6:77:84:f0:
         34:d7:43:8f:d0:57:d7:30:1a:d4:6e:59:d2:f4:12:b9:d7:ba:
         81:fc:63:6a:51:39:b3:b6:5a:db:ac:cb:89:8c:f0:a7:6c:d2:
         c8:77:a2:13:dc:2d:66:ff:04:e1:48:f6:f1:bc:f1:ac:e6:fe:
         12:60:21:48:9a:76:ba:a8:dd:07:e8:04:ad:e0:bc:fb:99:85:
         7f:48:06:c1:bc:21:a3:ae:56:61:ec:1f:25:ff:1f:bb:2e:0b:
         76:21:50:fe:57:45:ea:00:33:5e:2c:ce:de:e6:2e:30:e4:d2:
         21:74:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:03:02 2024 by rpki-client on console-ams.rpki-client.org