Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2aa2bdb-a6ee-3e13-8a27-14088b4fe334.roa
File:                     c2aa2bdb-a6ee-3e13-8a27-14088b4fe334.roa (raw, json)
Hash identifier:          qalevRHIgRJIijJjpxpAeBVn6djEwRP7EqPHz+Ufd74=
Subject key identifier:   FD:22:59:FC:C6:24:5A:CB:6C:87:09:8D:8F:8B:72:C9:E5:97:65:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BAE5620AC350F39477B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2aa2bdb-a6ee-3e13-8a27-14088b4fe334.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33660
IP address blocks:        71.199.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:ae:56:20:ac:35:0f:39:47:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=021eb64e-cda3-4ad3-a95f-495406e6fa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:f6:18:42:10:0f:76:f9:9b:52:ce:06:ca:
                    7c:a3:77:25:42:c6:2d:93:b9:62:de:28:35:02:3b:
                    d3:27:26:30:3b:51:09:9b:07:f2:0a:19:0b:65:28:
                    a1:c5:98:49:a1:d2:2b:a9:ca:be:f5:05:50:db:2b:
                    2c:61:09:01:44:4c:8d:ec:e1:6f:d9:6f:94:5c:2a:
                    23:a8:79:7d:f2:4c:0a:48:bb:93:ce:2d:72:af:94:
                    44:e7:b5:bb:14:88:04:ce:64:a7:a3:7a:aa:60:08:
                    bd:ab:73:7f:6e:91:98:90:0f:79:f1:75:a6:ef:00:
                    a5:25:00:c5:3e:61:0f:58:eb:d0:35:21:53:a1:d9:
                    59:63:e6:c1:fe:f6:52:1a:de:81:e2:fc:4f:43:14:
                    88:81:6c:cc:23:52:78:2b:49:f9:78:bd:3f:e7:8f:
                    2f:68:d3:ad:e4:9d:d0:b1:02:a5:9f:de:90:bc:c7:
                    3c:3c:1f:bb:d2:ce:f2:35:64:46:50:68:50:cb:71:
                    2a:f7:c9:f9:40:71:07:5f:a7:bb:38:c9:db:fb:58:
                    b7:e2:59:91:71:12:9b:c0:ea:f2:f2:b6:1d:41:63:
                    85:a2:99:cd:ff:07:68:51:83:cc:17:12:77:74:17:
                    e1:4e:e2:4d:82:ee:0e:a1:db:0b:6d:4e:cc:65:ae:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:59:FC:C6:24:5A:CB:6C:87:09:8D:8F:8B:72:C9:E5:97:65:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2aa2bdb-a6ee-3e13-8a27-14088b4fe334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.199.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:29:20:5f:2e:6e:79:42:72:d5:27:88:b1:60:10:d1:f7:
         a1:70:f4:b5:d1:f1:f3:ae:d9:a1:a5:00:2c:11:92:87:26:21:
         f7:a3:46:e0:4d:d8:75:8e:a8:d8:2e:fd:a2:c3:d9:d3:8b:5b:
         43:c7:9e:82:6d:8c:81:62:09:5b:a5:c9:5a:76:9e:02:f7:a1:
         b2:96:00:d2:ca:6c:21:ce:87:ca:05:e7:fa:83:94:a8:70:9c:
         26:61:fa:72:d5:da:a6:9d:e9:7f:2e:83:53:c2:c5:e2:2e:5e:
         07:f4:de:3e:a5:0f:8c:1c:3b:35:11:06:61:b0:df:da:78:cb:
         c2:a4:12:84:6c:60:f9:6c:a5:81:02:e8:6c:e6:60:ae:03:a4:
         8f:d4:cf:4a:7a:52:7d:0b:94:ef:e7:fe:16:0d:3a:c3:09:86:
         ee:bf:8d:0b:bf:d7:d9:46:9f:c7:c2:9b:1a:c6:6c:e5:65:3e:
         44:ec:b4:16:8c:23:c4:87:ce:90:1d:19:d2:c4:f6:aa:45:c8:
         c7:ea:9d:4f:a1:35:bd:12:b9:31:2c:da:7c:94:ec:06:bf:43:
         17:95:43:7b:8b:30:54:12:4d:f8:52:cf:7f:e8:0c:00:05:81:
         fd:ae:d0:82:ec:72:cd:03:8d:38:63:74:47:0d:7a:5d:49:00:
         f9:e7:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:32:25 2024 by rpki-client on console-fra.rpki-client.org