Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13f2c934-0ce1-327d-9d92-808f5a22bd3e.roa
File:                     13f2c934-0ce1-327d-9d92-808f5a22bd3e.roa (raw, json)
Hash identifier:          ZN7lOVqeQShl7elF2vRJIWwd6UMLWpFpIB4HKRM6Rvw=
Subject key identifier:   34:C4:3F:B3:C2:5F:25:F0:09:6C:42:79:B3:2D:85:83:28:37:28:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88F7615AFFB770D7CE2D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13f2c934-0ce1-327d-9d92-808f5a22bd3e.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        69.136.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:f7:61:5a:ff:b7:70:d7:ce:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=0ad4876b-019f-42eb-8bb8-446a425223d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:c5:81:06:a0:8f:ae:0a:fe:f0:6c:67:4f:
                    84:00:a6:07:3e:46:09:18:54:fc:4e:2f:40:59:11:
                    26:ee:a9:7a:d8:c3:60:32:ed:f2:65:4e:e3:f4:94:
                    30:92:f9:b0:f9:f7:75:19:32:88:79:6a:94:6b:30:
                    b6:0b:d4:78:98:2c:a9:d9:ad:26:5e:bb:ff:e6:26:
                    d9:b4:7e:39:5f:f4:5e:57:bb:ef:11:14:08:b3:41:
                    32:c0:88:bd:6a:b3:37:40:85:c7:57:d2:aa:df:5f:
                    8a:7e:b1:ef:67:dd:13:08:07:59:80:3d:01:d1:87:
                    67:60:32:17:0e:f2:46:79:8e:e8:d4:84:ed:0b:2a:
                    00:2f:bd:38:1d:a0:fb:f2:cf:66:ec:4d:53:b4:58:
                    66:d5:e7:f6:a4:4e:e2:fc:bb:cc:b5:9a:e2:97:84:
                    9b:01:8e:4e:7e:dd:5d:b6:48:b3:5e:d9:cf:8a:5f:
                    c2:f3:3f:25:9d:1d:4a:e4:c5:2d:f3:f1:be:14:f2:
                    25:03:dc:36:c8:99:65:34:1c:56:ab:b0:81:9b:15:
                    5c:9b:ca:8a:5f:b4:37:04:65:98:e6:a9:e5:ee:6a:
                    e7:9e:ce:dc:20:62:ac:71:5a:3d:b5:f7:67:3e:16:
                    06:14:6c:30:8f:ee:72:bf:8c:8a:4d:9a:ec:f2:10:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:3F:B3:C2:5F:25:F0:09:6C:42:79:B3:2D:85:83:28:37:28:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13f2c934-0ce1-327d-9d92-808f5a22bd3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.136.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c5:3d:c8:53:82:3f:6a:84:7d:10:3d:7e:16:a8:52:1e:24:
         36:28:38:cd:80:d9:e7:89:04:d5:75:8a:11:64:81:e1:e6:16:
         e2:2c:e0:0c:d6:cc:ef:af:93:20:b6:71:31:70:34:22:38:e0:
         63:00:d9:df:73:69:5a:c7:9a:42:a3:1b:ac:1d:d4:66:af:3d:
         4a:0b:86:42:4b:36:3d:ba:71:ac:fd:34:f1:a4:e3:6e:87:d3:
         15:9d:a6:6d:1f:03:10:9c:fe:46:57:a9:3c:5f:39:c0:8b:99:
         f5:2e:98:32:ca:ee:54:6f:64:a1:7e:7d:05:15:cd:f3:c1:b3:
         d2:56:a4:0c:ca:6e:84:96:8a:fa:17:67:e4:86:b3:96:bb:aa:
         64:ad:cd:eb:15:83:b2:7c:1e:65:a9:ec:1b:ac:74:01:7a:c4:
         7f:d8:ba:64:ee:d6:ce:ae:48:61:a2:c2:af:f9:f5:ab:b2:21:
         6d:fc:50:18:8a:d9:11:b5:fa:38:77:d5:a6:e9:c7:18:ab:bf:
         1b:e0:ed:46:ad:4d:d2:99:71:1f:be:d4:bc:f8:6c:e7:73:c4:
         44:40:85:dc:51:a7:51:bf:e6:77:a2:d8:53:68:0f:f8:20:45:
         ce:be:e4:5d:dd:c6:c8:c6:67:59:44:72:ac:ad:5d:7a:20:69:
         7f:b3:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:47:37 2024 by rpki-client on console-ams.rpki-client.org