Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6671b63-5cd2-3013-b524-8798550b43dd.roa
File:                     d6671b63-5cd2-3013-b524-8798550b43dd.roa (raw, json)
Hash identifier:          hySIO3aV/sOCtzK8L52fdgkp896sg97ilNE2Oj2itAo=
Subject key identifier:   A6:01:6C:79:D6:86:F7:D3:ED:45:14:A6:F5:E8:1D:4E:95:A2:16:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AEA2C94CAB4D2C5B39480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6671b63-5cd2-3013-b524-8798550b43dd.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        68.34.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:ea:2c:94:ca:b4:d2:c5:b3:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=2134eb42-b478-4c50-b2f8-d3023e6c4382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:4c:0e:d6:e6:76:a2:d4:84:b3:66:b7:3e:
                    4b:4d:ea:93:34:e8:62:df:85:1b:68:e3:5f:b6:b9:
                    fc:97:a6:35:63:46:c9:d3:a6:74:17:93:a1:68:da:
                    4a:c1:21:9e:3a:8b:18:2c:2b:32:88:e6:6b:9e:fc:
                    ab:0a:ec:9e:d4:c5:83:da:f2:f6:f5:b4:9d:e1:b8:
                    1e:09:57:13:86:73:3a:c2:98:6c:ab:da:9d:37:e1:
                    88:4f:61:32:98:b5:64:b1:65:02:3e:f3:06:64:88:
                    18:fe:38:b0:63:f9:d2:ef:43:73:cb:01:f3:85:7e:
                    7f:98:8b:dd:ee:05:6d:7b:b8:88:e8:d3:da:1a:38:
                    e3:a0:cb:8a:56:a6:2a:f3:f6:ae:38:27:cc:28:a0:
                    99:77:e5:a1:51:84:8d:29:71:5a:1a:11:87:99:c6:
                    03:67:6e:f9:7f:95:51:96:b9:eb:38:a7:68:92:de:
                    eb:3f:f6:ab:ee:a6:9e:85:19:53:5b:84:6b:c2:0d:
                    9e:af:64:a8:ff:62:09:0d:54:fe:a3:38:ea:86:f3:
                    33:77:f3:66:4e:31:84:fd:41:57:a3:62:3b:9d:94:
                    09:06:6a:93:ac:15:69:a1:a5:f2:38:c4:f1:ab:28:
                    93:43:d0:8f:74:45:79:c9:ce:4b:59:bf:4e:8a:30:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:01:6C:79:D6:86:F7:D3:ED:45:14:A6:F5:E8:1D:4E:95:A2:16:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6671b63-5cd2-3013-b524-8798550b43dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:4b:03:a0:b3:b4:a4:7e:e7:fc:e9:b6:c7:14:c3:92:55:
         be:98:67:ac:f5:69:54:7f:6e:a7:39:2c:ca:e2:7a:d4:d7:30:
         c1:25:58:28:02:d6:a5:54:f5:bd:99:1e:cc:44:60:87:df:91:
         cb:46:ce:07:be:58:a1:09:24:51:fe:26:04:7a:3f:d3:1c:e0:
         bc:ac:d3:85:72:72:b4:49:fb:b2:bf:f6:26:7f:d2:f9:b0:83:
         bd:66:39:20:9e:5f:d2:11:8e:ec:e9:8a:af:49:c8:eb:59:e0:
         6e:a5:d4:e0:15:1c:32:ca:ef:08:93:d9:71:5b:45:5a:68:64:
         e0:dc:e5:f5:60:d9:a4:8d:a6:a4:a9:16:2a:98:51:96:cd:ea:
         59:ae:a2:9e:5b:d6:d8:04:4e:f2:6e:ee:19:36:e5:ee:33:3a:
         ba:0c:9b:8d:8b:49:86:24:82:f2:29:4c:69:4f:3e:89:46:1e:
         57:a3:3f:a4:ab:29:de:2c:30:34:98:40:21:30:69:d8:95:9d:
         ee:d6:97:1f:d1:d4:d0:93:9c:39:46:19:dd:45:5c:95:71:73:
         42:fc:43:84:a1:68:46:1a:cd:72:3f:e3:22:7f:c2:2b:ac:2e:
         1e:d7:80:44:ff:18:a2:dc:19:4b:15:ee:25:a2:7c:11:46:03:
         cb:84:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:32:57 2024 by rpki-client on console-fra.rpki-client.org