Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/288f2ce6-fb41-3c90-b77a-61b6d7342195.roa
File:                     288f2ce6-fb41-3c90-b77a-61b6d7342195.roa (raw, json)
Hash identifier:          OHg0r+tj+iJTop8DNzvsIJN1kXPFOZcZCIwoBWWY68c=
Subject key identifier:   BB:32:8D:F1:2D:6E:A6:AF:EE:5C:5D:31:0E:96:24:2B:61:FC:C7:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8938FDD1318449C3EA4200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/288f2ce6-fb41-3c90-b77a-61b6d7342195.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        68.80.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:38:fd:d1:31:84:49:c3:ea:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=e6cff128-3517-4f78-82a9-5476582666a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:03:bd:e1:98:5b:3b:b4:95:95:46:30:63:
                    70:51:d7:a5:7e:aa:eb:7a:41:b2:3b:35:b1:19:39:
                    f4:06:92:f4:fb:2e:af:e6:8a:a0:42:75:98:5f:9e:
                    46:96:9c:8e:bc:25:2d:79:96:fb:cd:c5:c6:95:e9:
                    77:d7:f2:cc:25:78:99:3a:67:ce:71:7f:66:7e:8b:
                    d0:ed:6e:84:7b:dc:35:ef:64:61:93:95:1e:32:18:
                    78:45:e9:8d:df:5f:46:ab:86:2c:83:1f:4e:e9:0a:
                    2e:9d:bb:0d:ca:22:23:c0:3a:ca:aa:63:13:22:f2:
                    91:54:09:50:72:cf:cc:5d:19:8c:ae:94:2c:fd:c3:
                    d3:dc:ec:f0:96:67:8c:b0:1f:83:ca:7d:af:a0:94:
                    e8:3e:49:83:6a:a5:89:77:73:2c:50:7a:5e:30:10:
                    5c:87:c9:65:32:a0:87:1a:e6:c9:67:69:99:0a:ca:
                    d1:be:fd:91:1a:89:81:8f:cc:e4:cf:4c:9f:2f:f2:
                    a7:f7:21:18:fc:76:60:21:7c:b1:f1:33:55:86:fd:
                    37:24:f4:75:57:d0:44:2f:ad:d0:c0:3e:17:a3:c6:
                    08:1d:71:6b:15:35:44:27:63:4d:93:0d:90:fd:af:
                    73:0c:3a:6d:db:97:2f:9a:65:cd:3d:39:97:95:b1:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:32:8D:F1:2D:6E:A6:AF:EE:5C:5D:31:0E:96:24:2B:61:FC:C7:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/288f2ce6-fb41-3c90-b77a-61b6d7342195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.80.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c2:aa:b6:12:cf:be:d7:88:19:f6:6b:13:69:e2:11:dd:b1:
         29:95:2e:fe:be:79:70:1e:1d:e3:c9:95:d4:c8:f4:55:17:fb:
         df:76:b3:67:27:5f:de:d8:69:cc:36:34:b2:31:76:7c:74:49:
         4b:82:20:f7:a6:85:a9:88:d5:8f:34:c4:75:c1:f2:f9:56:69:
         86:d6:1e:41:40:81:f4:7d:86:a7:80:4e:67:f9:97:8e:d3:a1:
         d6:80:fc:71:2b:7b:e4:f6:ba:38:05:1b:97:0c:d9:f2:de:e6:
         45:2d:b4:0d:b2:19:1c:e5:e1:6a:5f:5e:73:71:5e:af:71:4b:
         5b:1a:0d:75:a2:a4:5c:4f:34:b9:10:33:5a:86:87:f4:da:17:
         15:6e:ad:46:af:73:07:e9:ca:ca:5d:72:06:2d:b9:d0:cc:d9:
         5f:09:28:bb:3e:fd:cb:34:79:6b:8a:11:e6:29:cc:6c:4a:82:
         57:36:a1:d1:65:ee:6f:96:73:ff:06:3e:44:c5:b8:55:92:c7:
         e5:ea:33:1b:32:85:8e:6f:91:0f:80:5d:f7:b7:0a:a2:59:91:
         21:26:d7:7b:6c:6d:36:18:9a:9b:26:5d:75:7a:22:c0:be:6e:
         1d:38:9a:c6:10:f8:0c:77:43:da:09:6b:b7:45:4e:d8:6f:fa:
         24:cf:c8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:36:22 2024 by rpki-client on console-fra.rpki-client.org