Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00e5bcd5-9a1f-30eb-8469-1fd8fdfd6de8.roa
File:                     00e5bcd5-9a1f-30eb-8469-1fd8fdfd6de8.roa (raw, json)
Hash identifier:          mgPOiyAxCxmZxn1r0pSzUDi/4xbTVoXQl0b46/9YlR4=
Subject key identifier:   D0:B2:AC:E0:92:98:73:DF:C8:74:F6:96:3E:AB:A5:1E:EA:BC:72:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB38B9E01F59BCFB9F60C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00e5bcd5-9a1f-30eb-8469-1fd8fdfd6de8.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33666
IP address blocks:        74.92.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:38:b9:e0:1f:59:bc:fb:9f:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0335493e-9db1-47d0-93d4-14ae131c1695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:e8:c5:f4:9a:79:46:fc:76:8b:c2:38:68:
                    92:29:5f:72:23:51:51:5e:74:a5:37:1f:25:30:d1:
                    f7:f1:aa:35:f8:27:fe:b4:f4:47:fe:cc:95:64:f4:
                    13:08:29:05:a9:d7:a6:05:39:d7:3f:e8:3e:c7:35:
                    e3:b5:37:c5:9a:91:68:3a:e2:4c:38:ee:e2:72:c6:
                    e7:eb:c4:75:b3:5a:18:9e:b4:69:5b:e1:e1:03:6d:
                    29:ca:d5:fe:46:3b:83:e8:8c:16:fc:f8:9b:6e:e2:
                    22:9c:06:73:f4:19:0d:cf:18:82:80:07:86:d3:03:
                    74:2e:16:3a:53:ed:f5:23:e6:9b:97:5b:39:32:06:
                    fa:9d:dc:13:a8:97:46:6b:11:fb:51:bc:ff:2a:89:
                    a0:3a:ee:7b:3a:f5:e1:1d:8f:9e:26:ca:7b:b7:6e:
                    b8:aa:91:15:c0:62:d5:48:55:57:ac:27:c0:44:1c:
                    a8:dc:a5:33:77:37:6e:0f:1b:12:7f:1f:57:30:b4:
                    31:da:e0:dd:42:30:ee:14:85:95:b5:67:01:19:b0:
                    38:cb:4c:4b:55:59:55:0e:dc:5f:6b:4c:16:c1:7e:
                    5c:3a:04:09:d7:6a:e2:fe:19:06:5a:bd:56:64:d5:
                    de:90:70:bc:21:50:4c:b0:2b:01:83:c8:ac:83:1d:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B2:AC:E0:92:98:73:DF:C8:74:F6:96:3E:AB:A5:1E:EA:BC:72:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00e5bcd5-9a1f-30eb-8469-1fd8fdfd6de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.92.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:ed:37:d8:20:89:97:4a:85:36:27:e3:c4:fd:9f:13:3c:
         1f:56:9d:78:31:9b:ea:73:41:ba:7e:fc:ac:9d:70:39:ae:b0:
         e5:f9:26:48:cb:42:7c:75:c0:97:1a:ad:c8:07:fa:17:f8:88:
         20:1b:04:0a:98:ad:88:34:be:d0:6b:96:35:19:c3:3e:80:fb:
         63:d1:8b:07:1a:0b:b2:14:9a:73:6b:a0:88:01:de:e6:50:7f:
         56:85:fd:cf:0b:de:bc:ec:8f:5c:cb:ea:29:62:89:8c:6f:15:
         a1:45:0a:47:40:4b:7d:b8:b6:c6:ed:51:b3:27:9e:a6:0c:3d:
         94:7f:f9:e6:2b:99:31:ef:10:c2:59:bd:8e:d0:de:42:6d:bf:
         27:4d:6d:c7:97:05:63:c0:28:8e:42:72:da:a3:ef:1b:06:bd:
         e7:da:ab:e2:c5:dd:05:f0:bc:31:a6:39:22:9a:d0:9b:8c:1b:
         64:e7:23:1b:1e:d8:20:36:3f:d6:96:49:75:20:31:13:4a:0a:
         56:3f:5a:c4:21:f6:32:00:db:d6:6d:14:2d:46:72:81:c2:ba:
         a1:ce:35:7a:b0:cb:44:34:56:bc:bd:ea:dd:b4:43:63:28:87:
         68:82:2c:c0:16:7c:92:79:09:a3:6f:f9:ec:41:fa:80:d5:60:
         03:3d:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:43:49 2024 by rpki-client on console-fra.rpki-client.org