Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d442f878-37fc-37bb-a04c-ee7adde3596c.roa
File:                     d442f878-37fc-37bb-a04c-ee7adde3596c.roa (raw, json)
Hash identifier:          jpC6VbBPMPPavrega5glrUzesYBsayHLfHI5JeC11EY=
Subject key identifier:   B7:EF:0C:1B:C9:97:B4:A0:5B:95:CE:64:BF:B0:D2:7F:3B:CD:CA:A5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B21D64170A8399B8A7A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d442f878-37fc-37bb-a04c-ee7adde3596c.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        107.3.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:21:d6:41:70:a8:39:9b:8a:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=5764f514-d279-4b64-baa5-e34b10227015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:a8:16:cc:32:ff:20:96:9f:9d:f1:9c:8f:
                    21:39:91:af:0d:5f:8e:dc:a5:78:8f:02:46:67:0a:
                    51:4b:2a:b8:6b:4b:a9:05:f1:5f:0d:8e:36:4b:4e:
                    df:bf:b1:53:d8:4b:b6:f7:ac:13:7d:ef:38:b8:8d:
                    19:82:9b:68:b1:5c:28:9f:26:11:5f:d9:17:28:7f:
                    69:5d:cc:b6:b3:a8:7a:4f:d4:b4:18:95:ac:9d:ef:
                    34:2c:43:07:ce:53:51:38:27:69:91:f7:85:87:66:
                    17:2a:d6:f4:87:aa:be:14:84:ae:0e:ae:30:29:fd:
                    29:9f:3f:61:29:03:f8:51:a5:85:95:a0:39:0c:c9:
                    dd:65:03:08:90:fe:38:4f:4d:12:ee:dc:d4:d0:ab:
                    95:b4:84:9f:7f:1a:9c:a6:8a:95:d8:d7:d3:f4:1f:
                    c5:9f:d4:bc:8e:10:d9:13:cc:fd:97:a7:a2:ac:3d:
                    74:fe:db:be:b9:8c:69:b3:af:bb:cc:55:48:0d:d2:
                    c5:88:60:05:26:f3:5e:1a:f9:ea:ed:ae:b9:9d:ab:
                    56:2c:f3:3b:79:4b:b2:b4:91:f9:97:3e:87:ec:cb:
                    ed:80:61:a6:05:9f:4c:c8:8b:95:ff:81:7d:66:ea:
                    41:b8:d2:c6:0b:fe:df:85:b2:24:6e:3a:b7:3c:59:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EF:0C:1B:C9:97:B4:A0:5B:95:CE:64:BF:B0:D2:7F:3B:CD:CA:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d442f878-37fc-37bb-a04c-ee7adde3596c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.3.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:29:b2:64:9c:b2:c3:61:3f:c7:88:dc:81:85:76:e7:48:21:
         c0:9c:b5:55:8d:cc:2c:49:63:3e:dc:8d:23:b9:98:b1:b0:0b:
         f9:27:74:7d:da:66:81:4f:d8:30:b5:79:93:2b:05:f8:47:fb:
         ec:f8:38:75:dc:ce:57:e5:85:b4:b3:6d:5e:c8:69:d8:f1:ed:
         2d:04:b4:05:fc:fc:65:73:e8:42:cb:80:fc:1d:b7:97:d6:bf:
         13:7c:f3:3d:9e:d9:a4:13:3d:0f:be:f5:b4:20:67:96:c7:3e:
         50:3d:06:f1:ab:63:6c:ff:3e:43:54:08:46:d1:15:1c:fb:6a:
         43:fa:92:58:e4:11:d9:8b:43:d9:82:08:94:9e:0c:63:de:b2:
         04:4b:f4:40:89:40:47:74:2a:f4:48:26:79:5c:9f:69:e3:3a:
         c1:c1:80:bb:6b:76:44:87:83:d3:86:45:31:05:79:68:78:00:
         d3:7c:51:f7:e7:3a:54:96:0d:ad:7e:31:35:49:f5:bf:fe:37:
         c5:e0:1c:6e:fe:37:f4:0d:31:7f:cb:54:8a:37:79:3b:b7:fa:
         69:d9:a1:66:19:2f:20:e0:34:b6:ef:60:f6:f4:b3:85:70:dc:
         4c:03:a9:4d:29:e5:df:46:f4:f6:08:51:b8:5b:cc:a6:f3:77:
         26:8a:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:54:26 2024 by rpki-client on console-fra.rpki-client.org