Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/055f8225-0002-38b4-8786-2e565ce6f2a1.roa
File:                     055f8225-0002-38b4-8786-2e565ce6f2a1.roa (raw, json)
Hash identifier:          XuErQKWOv50H/BD6mrmwYakdZnet0aij1DSs2ueAWoU=
Subject key identifier:   37:18:69:5D:21:97:67:A1:73:73:4A:E1:11:CB:0D:36:FC:E6:C3:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC896B0D0DE74E4B62CF8DA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/055f8225-0002-38b4-8786-2e565ce6f2a1.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        174.173.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:6b:0d:0d:e7:4e:4b:62:cf:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=7336d466-da22-4d55-b013-0dd3796d9ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:ac:ff:22:27:78:c8:1f:7c:5d:56:51:c5:
                    76:28:6c:e9:00:58:79:ca:ea:84:d3:2a:11:12:68:
                    ec:87:0e:fc:00:cc:ce:c8:7d:26:d7:c7:72:8e:50:
                    e9:9d:da:bd:9e:c1:ea:e4:9e:8a:b0:00:f8:4a:fd:
                    ec:98:8c:6c:3e:36:88:10:cb:ba:0d:d0:47:6a:63:
                    f2:e1:e0:c5:71:44:b0:75:3f:5a:ad:44:50:42:c1:
                    f4:94:c0:fe:e3:48:83:ca:12:58:c3:e6:ca:29:1b:
                    83:ee:e3:80:4e:6f:21:cf:a8:b6:d4:62:81:5a:bb:
                    3b:fe:06:59:61:f6:8b:f8:b9:b6:ff:f9:d8:fb:b2:
                    a2:51:e8:a9:2d:19:26:27:45:2a:03:16:67:e9:2f:
                    b4:69:53:ab:48:3c:2b:51:f1:00:dc:59:d2:e7:ac:
                    d2:24:b7:0b:c1:84:a0:44:a0:77:87:14:01:ec:39:
                    1b:1d:cf:d8:96:4f:b4:a6:11:b7:3b:98:d2:48:55:
                    6b:b2:e3:d5:bc:78:e3:95:b1:1b:22:69:86:eb:d1:
                    ae:dc:56:fa:70:e1:19:a5:cb:49:45:38:c6:9b:cb:
                    99:33:69:45:a5:2f:94:0f:da:8c:17:a8:bc:07:ea:
                    5f:9f:f5:15:12:1e:6f:b3:dc:95:12:10:b3:50:93:
                    e6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:18:69:5D:21:97:67:A1:73:73:4A:E1:11:CB:0D:36:FC:E6:C3:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/055f8225-0002-38b4-8786-2e565ce6f2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.173.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:94:47:21:6e:83:91:34:7d:47:05:91:45:33:f8:d3:86:f2:
         40:cd:b9:98:83:09:2e:b6:21:b6:d8:ac:d1:9a:4f:6b:2d:87:
         9b:cf:ad:32:ef:03:09:14:5a:80:6f:82:38:fb:48:3c:59:22:
         52:1b:2a:e8:a3:6a:5d:d1:80:52:3e:ad:84:e2:13:10:0d:06:
         03:3b:7d:5b:28:e5:fa:35:17:f8:42:5b:e7:77:51:df:23:4a:
         c3:d5:b0:64:42:f1:85:a9:c1:63:7f:36:3d:bb:d5:d6:95:4b:
         83:d4:c2:02:02:30:c7:76:d2:37:40:06:17:72:cd:c3:bf:72:
         fd:8d:6c:6a:29:58:b9:cf:ad:d4:ec:b9:f9:13:a6:8c:84:86:
         36:04:16:5b:d3:54:bb:12:80:2d:78:c6:6a:21:0a:58:26:b9:
         87:a1:74:ef:63:df:ec:14:c9:9d:f0:fd:dc:9c:14:56:74:8f:
         ef:12:a0:ed:82:7f:ab:bd:fd:f2:45:e8:c5:d2:ab:89:ba:e5:
         11:90:cf:c5:70:29:7a:57:1f:83:6f:a1:7a:2a:95:1a:a7:54:
         46:e0:96:5b:da:5b:ed:da:52:5f:36:10:a5:15:fc:25:94:d3:
         ea:d4:8f:8e:0f:5f:93:ad:15:90:67:b3:4f:79:85:3c:30:9d:
         89:1e:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:44:03 2024 by rpki-client on console-fra.rpki-client.org