Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc799810-1642-3d4f-b2f0-98f89862a713.roa
File:                     cc799810-1642-3d4f-b2f0-98f89862a713.roa (raw, json)
Hash identifier:          OGborln31diU1Rqp9+VkAUwbmzJzPuBNQ5IEuDTcW10=
Subject key identifier:   2C:3B:18:53:95:8E:F9:12:D9:0A:69:E4:91:26:17:A5:31:4E:8B:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89E1CF2DF2AD611FEDAFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc799810-1642-3d4f-b2f0-98f89862a713.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        69.253.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:e1:cf:2d:f2:ad:61:1f:ed:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=b642f4df-39be-4e78-8c9c-f9f4d0890963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:0f:db:f9:60:bd:29:c2:7a:f0:4c:8a:87:
                    b3:d2:69:7e:25:81:6b:b2:a2:7e:52:55:1e:5e:c0:
                    c5:33:60:ec:75:3f:0e:08:22:49:2b:b9:62:13:4a:
                    a9:bb:9b:68:f0:c0:1d:91:58:8a:44:1e:58:ef:4d:
                    7b:7b:c4:64:73:24:3b:f1:08:9a:30:28:8c:d1:ea:
                    a7:2a:0f:e3:87:79:5a:7e:30:c6:43:f7:47:94:0c:
                    0b:a2:fe:57:57:65:dd:39:8b:91:6f:98:2c:4b:04:
                    a2:41:a0:62:f0:e3:8a:70:89:02:49:88:2b:6e:7e:
                    ae:ea:b4:71:92:ad:f7:4a:44:d0:39:e5:96:b4:c6:
                    c4:29:19:ea:f3:49:b7:81:57:d0:50:dc:8f:c0:c7:
                    7d:a2:69:cf:76:fa:b2:a1:5e:9a:66:1d:49:21:c3:
                    34:00:9a:b7:61:0f:74:61:1d:8e:52:62:40:0e:d7:
                    5c:98:7e:cb:ee:07:84:43:78:2b:e1:54:64:38:0d:
                    9e:92:14:eb:c7:fb:21:d5:5d:0a:5b:06:c0:25:f0:
                    ae:28:4a:92:f4:8e:95:17:40:20:5f:5a:be:67:93:
                    97:7d:a5:7c:14:97:e8:86:38:0d:3c:49:68:b8:02:
                    17:c9:92:61:f1:76:d3:7c:e2:13:36:b3:ba:30:38:
                    ee:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:18:53:95:8E:F9:12:D9:0A:69:E4:91:26:17:A5:31:4E:8B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc799810-1642-3d4f-b2f0-98f89862a713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:2d:f4:ae:81:a5:54:a8:f0:a1:21:fc:5d:60:db:b2:6e:
         3c:3f:d6:52:cc:e7:b1:0b:72:d4:a7:c3:f7:c3:d1:0f:00:19:
         d4:3f:b0:d8:bf:e8:aa:e7:db:c2:f9:46:97:3e:45:17:80:19:
         88:a9:89:b3:1c:d4:7e:1a:e6:7d:cc:a9:94:77:7a:bb:f1:54:
         0a:bc:4d:92:33:a3:c1:71:20:78:83:27:2c:bb:bd:12:96:01:
         2d:d9:73:27:4d:8f:f2:61:96:cd:0d:e4:d2:9d:34:ad:2a:2c:
         8a:15:5d:80:37:cc:9a:fe:48:fa:81:1e:6f:f4:90:31:cf:29:
         dc:6b:4d:e7:39:18:77:62:c7:e8:ca:2d:a7:9d:45:b4:14:a3:
         af:a2:4e:fc:ca:5b:d8:9c:34:1c:0a:86:92:42:f2:cd:f0:93:
         96:a5:9f:2f:05:74:0e:a1:32:e2:57:bd:10:d1:4d:f4:a0:13:
         05:c1:b5:d7:1f:e4:1f:19:97:94:27:81:bd:89:ce:6c:61:02:
         5a:27:20:00:2f:81:b9:c4:56:81:c4:a7:34:70:af:2b:e6:64:
         33:9f:97:23:ef:cb:50:29:6b:8f:0c:a6:4c:e0:6c:95:65:ea:
         24:23:c2:19:f0:ec:eb:57:43:56:dc:86:90:1c:37:b2:dd:93:
         62:ca:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:44:45 2024 by rpki-client on console-fra.rpki-client.org