Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfbdf139-a5dd-3773-9eed-d966d59de93e.roa
File:                     cfbdf139-a5dd-3773-9eed-d966d59de93e.roa (raw, json)
Hash identifier:          d1T2Y9T7KvUdnoJ9e47/2msJfz3G4sebO1vrvHEFGkM=
Subject key identifier:   DE:BE:E4:DD:D4:3E:65:24:9E:60:FD:46:A9:B6:DB:46:2D:CA:B6:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A49520318279FA7E0F2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfbdf139-a5dd-3773-9eed-d966d59de93e.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        66.41.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:49:52:03:18:27:9f:a7:e0:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f779da2b-d726-46ef-8f6b-7e22e3d7bd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:24:c0:18:5f:8d:78:69:ce:85:3a:df:5d:
                    e1:b4:f2:11:30:32:a2:a2:d5:10:a2:2c:52:36:68:
                    ee:42:84:6b:7a:72:50:cc:66:0f:e2:98:69:7c:a3:
                    f8:34:f8:a1:e9:ca:d3:06:7f:15:60:3b:82:0a:d0:
                    3d:10:df:44:9e:4e:b9:2c:f6:c8:0a:0a:28:d4:ca:
                    fc:95:5c:64:33:8c:86:53:45:82:02:08:a5:e4:92:
                    fa:1a:f7:47:ba:bb:af:c4:86:c2:d6:e1:ad:3c:45:
                    8b:9b:7b:fc:72:8f:96:23:31:97:91:57:01:dc:06:
                    99:a3:5f:68:eb:96:81:40:79:d8:70:2e:10:d6:5e:
                    fb:95:43:c5:fd:c4:e9:f7:79:7d:e7:c4:a9:ed:62:
                    c8:db:f8:d8:4c:16:36:cf:3e:ee:98:bf:4f:40:70:
                    cb:db:4a:e6:56:78:90:3a:fb:6e:da:37:cd:46:17:
                    07:df:32:2b:72:48:cf:5f:3e:ea:5f:04:93:53:91:
                    bd:84:77:8f:b4:be:30:b1:f0:b3:65:d4:ef:e7:8d:
                    dc:2f:19:03:72:8d:f3:41:7e:59:7a:72:64:4f:42:
                    16:39:a3:2d:54:f3:c8:7b:5b:b6:bb:cf:3a:ff:c7:
                    43:a1:61:17:9f:f4:39:4b:53:e3:59:73:fd:b3:88:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:E4:DD:D4:3E:65:24:9E:60:FD:46:A9:B6:DB:46:2D:CA:B6:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfbdf139-a5dd-3773-9eed-d966d59de93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:5f:ce:0e:d1:92:bd:f9:41:cf:0f:72:5d:40:3a:09:ba:
         30:28:3f:4d:64:de:62:48:60:50:87:0e:88:b0:43:7b:84:86:
         5d:b6:e6:f9:4c:7b:35:18:3d:f9:ed:69:4d:a5:e5:a7:dd:e2:
         34:eb:3c:c2:ee:b0:a5:4c:1b:eb:d0:5a:96:e1:ec:4f:a7:7d:
         c1:c0:eb:5c:97:49:70:81:ac:7a:5f:fe:62:21:be:29:5a:23:
         e6:b6:5f:91:84:f8:4b:6e:73:19:bd:8b:17:b7:a0:50:3a:a6:
         59:bd:60:96:37:dd:66:36:b8:a3:21:dc:6a:a3:f9:c4:2e:d3:
         eb:61:c8:81:68:6a:b0:5a:81:21:35:da:e8:ac:fb:f5:73:ff:
         d3:1c:79:0e:d9:02:2f:05:8d:e2:e4:2b:21:1a:43:d4:b2:91:
         ee:18:b6:c2:dc:0e:51:9b:4e:08:31:9f:07:aa:51:01:03:1e:
         e5:8e:6a:92:ca:6b:9c:1e:e1:9b:5b:41:b0:86:8f:c1:b1:9b:
         e5:08:92:5f:bf:b6:bc:dd:05:fa:a0:b1:1f:52:06:21:cb:de:
         33:6f:76:ba:8c:96:c0:77:2a:f4:52:ee:51:ca:95:28:4c:70:
         16:ca:31:4d:bd:29:ad:8c:8b:09:3e:ba:54:c8:f6:4c:82:80:
         da:36:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:32:46 2024 by rpki-client on console-fra.rpki-client.org