Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3274104-7cab-3f05-86bf-861195b96f8d.roa
File:                     b3274104-7cab-3f05-86bf-861195b96f8d.roa (raw, json)
Hash identifier:          nsKqoFZksnc9jzNk0Ouo8ItpPS9oNpMLscG266Vq5ck=
Subject key identifier:   43:E4:C4:28:5C:FC:B1:23:6C:54:40:A0:9A:E3:FE:F2:0D:CC:1D:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B1A37C15C04C58403FF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3274104-7cab-3f05-86bf-861195b96f8d.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        76.129.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:1a:37:c1:5c:04:c5:84:03:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=ca81fa43-bdf8-41bf-9609-946cb88ac2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:e4:18:1a:ce:f6:5f:f9:fb:8c:8b:1a:a9:
                    61:8d:1f:9e:ca:c2:5f:65:f7:7d:7e:88:82:81:f6:
                    ad:44:77:82:4f:bd:da:96:80:65:95:c7:c3:00:89:
                    c0:59:83:a6:7a:c9:9a:8f:3b:73:9f:38:1e:fa:42:
                    1e:b1:bf:8c:e8:8e:19:76:69:f3:a8:4c:ac:46:7f:
                    53:b2:75:27:be:24:60:b6:f1:e5:d0:83:c1:9e:8d:
                    bc:0d:84:9d:56:cf:a4:49:05:2e:77:dd:e4:f0:08:
                    6a:32:81:f8:93:e5:21:39:e9:4c:de:bc:07:4d:4b:
                    fc:97:17:ac:a9:44:b1:48:7a:e3:3d:3f:78:51:8b:
                    e1:90:1e:2f:68:07:35:48:7e:f9:6a:cd:bd:4f:96:
                    58:aa:7e:00:cd:03:72:ca:61:fb:25:9f:55:79:b3:
                    e7:2d:e5:7d:96:47:f9:c8:72:c3:87:65:d3:0b:25:
                    c5:d0:f2:f0:46:1f:9e:b5:d0:62:58:32:db:42:92:
                    d9:ba:8d:3c:1f:bf:53:b6:e6:56:9a:44:ff:47:84:
                    e3:6f:80:03:4c:bc:ae:3e:78:c4:29:e7:e1:c6:f2:
                    67:de:f3:0e:cc:57:8b:55:d8:9e:af:ee:fb:4d:ef:
                    c5:49:55:d1:b1:6c:ff:95:01:49:1e:96:10:d5:7a:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E4:C4:28:5C:FC:B1:23:6C:54:40:A0:9A:E3:FE:F2:0D:CC:1D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3274104-7cab-3f05-86bf-861195b96f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1b:a7:25:8d:0f:a3:ca:d7:e3:17:1f:c1:b2:4e:5b:d4:ac:
         57:cc:54:ab:62:74:0c:aa:10:fa:d6:d1:0d:69:b8:9f:45:f9:
         68:ed:73:01:d6:f0:ac:ab:22:f9:51:d8:e9:94:a4:a4:ac:23:
         42:2b:eb:7f:b2:11:ed:64:d4:f2:ef:d2:e5:eb:27:1c:90:d2:
         26:18:7a:a1:dd:9a:ea:c9:c1:ed:f3:80:41:1a:d8:a6:8c:a1:
         df:d2:b9:1e:28:77:24:6b:e8:7e:68:b1:e8:bc:9f:6e:4e:73:
         fc:ac:3d:04:8f:6b:94:c9:d0:94:b2:ec:81:41:b8:11:f7:f6:
         ae:07:a4:07:dc:bb:9d:77:a9:37:1a:2d:c7:15:d3:2d:6d:45:
         07:86:65:9e:cd:a6:0a:bc:1c:a1:8b:18:ce:6f:37:34:ee:35:
         58:c2:19:f4:a6:3b:6c:45:1e:0c:f7:c7:20:12:74:aa:1e:dc:
         a3:af:54:cf:99:c5:43:8a:7b:35:5f:d8:ed:21:f2:06:e5:47:
         62:b1:90:29:bb:c9:8a:2a:23:4d:40:d7:3f:ed:0b:e1:2a:eb:
         db:17:d2:74:5f:a1:08:90:58:b3:a7:60:bf:22:ac:5e:eb:d4:
         98:a2:ad:be:11:ac:dd:55:11:8c:83:36:1d:b0:ed:fe:a7:8d:
         59:6e:88:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:11:52 2024 by rpki-client on console-ams.rpki-client.org