Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a49b8f-dbab-3af5-a6e0-bfb356c06dfd.roa
File:                     22a49b8f-dbab-3af5-a6e0-bfb356c06dfd.roa (raw, json)
Hash identifier:          dJ13Th36s/A1M1bJ64+R0ZtVcZBawqMSW/l1KO5zpU8=
Subject key identifier:   ED:0A:F3:0C:C5:EB:62:4E:A9:83:E7:EF:85:50:73:B3:C4:71:7B:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8A0EB9B2C7CC0A25DD6D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a49b8f-dbab-3af5-a6e0-bfb356c06dfd.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        174.173.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:0e:b9:b2:c7:cc:0a:25:dd:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=a94584f8-82de-44b8-ad47-9b696c4bbe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:93:29:d5:6a:8f:95:a7:02:df:15:7f:4e:
                    8c:1a:4d:3a:b4:05:4d:6b:fa:ef:28:b5:60:98:c5:
                    8b:b0:03:4a:5e:3f:7d:05:bc:22:81:f0:43:9c:f1:
                    ad:a0:a1:65:df:ac:fd:1c:fa:2b:2a:7f:95:d0:42:
                    f0:5e:ab:2a:71:ce:20:50:d6:7e:6f:78:22:b5:ae:
                    0b:bb:89:17:29:c9:60:a2:e2:1f:bf:cd:01:5a:7d:
                    c3:a4:e2:3e:9a:26:4b:c2:17:13:e4:3e:ae:67:96:
                    ef:45:ae:8a:f9:98:cf:f1:30:ec:d3:c6:e0:5d:d9:
                    9e:3d:31:30:ac:62:ab:9f:ab:6e:24:bf:9f:c2:e9:
                    12:c9:f8:1d:5d:86:84:bd:ba:0d:73:b0:61:24:a1:
                    ac:35:ea:d0:8f:c9:69:01:9f:44:41:0d:e9:73:1e:
                    37:af:46:74:47:13:0e:21:46:ed:6a:04:3d:b3:51:
                    a6:a4:5a:86:40:c3:00:f9:c4:eb:44:58:21:d5:54:
                    74:39:20:0b:d3:da:fd:7e:89:15:a8:87:77:17:f8:
                    0d:96:96:b6:55:a9:de:75:a6:7b:92:af:a2:bd:98:
                    22:06:9e:87:35:21:ed:48:f4:a3:3f:32:b3:ce:a2:
                    39:21:21:8a:31:01:00:e2:ee:b7:74:c5:92:c2:83:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:F3:0C:C5:EB:62:4E:A9:83:E7:EF:85:50:73:B3:C4:71:7B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a49b8f-dbab-3af5-a6e0-bfb356c06dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.173.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:fd:6f:7c:d9:a4:f4:cc:55:22:62:5a:6a:e1:33:4c:d5:aa:
         dc:07:e4:c1:d3:1d:9d:9f:43:84:d6:c0:c2:91:e7:f3:7c:21:
         48:32:7f:57:80:38:e7:0f:4a:70:34:4b:37:37:6d:db:a1:f4:
         fe:41:bc:67:61:af:89:31:f2:59:37:56:eb:b9:19:21:3a:e7:
         58:cc:54:83:56:0b:e0:22:eb:c3:aa:b3:29:82:44:23:56:10:
         03:46:14:57:cc:7f:f7:0b:8a:bd:5a:f0:db:e5:33:1c:0c:8b:
         52:ae:57:c1:46:0d:cd:1a:6f:22:24:57:06:e0:66:8f:7f:29:
         23:10:66:b9:f0:63:fe:77:70:60:c6:81:10:e5:b9:fe:02:2d:
         8c:04:51:98:61:45:2f:79:3e:0e:65:6e:d4:9f:08:df:b6:f2:
         60:20:79:dd:03:87:0d:5d:32:1b:6c:18:d2:1b:87:d2:3d:d9:
         fa:3d:30:c7:4d:d2:73:2b:26:fa:90:a7:9e:01:fb:ba:7c:00:
         30:60:16:bb:bc:fa:e7:ce:76:ba:54:4c:8f:ea:34:c3:4d:08:
         74:e6:77:e5:dc:a6:c9:71:bc:30:a1:8f:f1:a9:d5:c6:a8:19:
         90:1c:c8:e0:40:48:d3:4a:b8:02:66:0a:16:67:0e:64:ea:09:
         67:cf:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:14:46 2024 by rpki-client on console-ams.rpki-client.org