Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/355285cb-b2fa-3de8-b9db-a06064221247.roa
File:                     355285cb-b2fa-3de8-b9db-a06064221247.roa (raw, json)
Hash identifier:          rf274UC8P6qfBQn1R1Jk71id19dnYXJCB3/gu3IhMVA=
Subject key identifier:   7F:94:D1:3C:13:0C:B8:04:10:2B:4B:29:12:77:A3:92:6B:2F:89:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845A428CC26C01EF4C1A3CAF600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/355285cb-b2fa-3de8-b9db-a06064221247.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     33662
IP address blocks:        174.170.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:cc:26:c0:1e:f4:c1:a3:ca:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=92139893-453e-481b-ac89-719dee833fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:0f:48:3b:20:3c:4f:89:10:09:a8:10:62:
                    5d:9a:e6:86:37:8c:cd:b4:02:3d:7d:13:a7:e3:2c:
                    d2:9d:a9:80:ed:5d:e7:51:f0:a5:b5:38:4e:54:71:
                    8b:94:eb:d9:66:a9:3f:13:5e:30:d4:96:56:82:be:
                    7e:63:bf:e9:27:83:78:29:0f:af:7c:1e:a3:7b:bf:
                    92:0d:69:42:d8:2a:dd:07:b1:00:ed:13:61:a9:d6:
                    4f:22:6b:df:aa:6d:a2:c3:f7:6f:ee:16:19:70:f0:
                    b6:66:0c:5d:dc:24:47:9f:35:25:c5:ad:31:dc:04:
                    02:59:c1:b8:f2:d2:c4:65:ea:c9:dc:66:4a:ca:36:
                    55:91:34:b8:dc:a8:dd:26:98:ed:26:14:8d:a2:c9:
                    de:6d:f4:51:f5:c5:24:4a:b2:c2:ba:bb:30:f9:fa:
                    16:05:46:3f:d1:e5:0b:a6:6d:f7:b5:c1:9f:56:0b:
                    1c:49:ec:41:25:42:ff:43:e1:25:8b:7b:5b:8a:a1:
                    87:7e:0c:bf:1a:11:62:1c:7c:c5:2d:06:61:aa:a1:
                    ef:d1:47:eb:e3:58:1d:cd:9e:fe:85:da:61:5a:f9:
                    67:5f:26:20:fc:5a:aa:28:4e:d6:0d:1f:79:97:59:
                    87:25:1e:ed:31:aa:c1:36:b3:8e:b1:26:00:39:b9:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:94:D1:3C:13:0C:B8:04:10:2B:4B:29:12:77:A3:92:6B:2F:89:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/355285cb-b2fa-3de8-b9db-a06064221247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ab:00:90:aa:35:ad:7f:0b:e1:60:86:8e:26:30:9e:bc:d6:
         97:39:bb:74:aa:77:42:ed:2a:8e:45:69:c3:31:ac:f8:34:bf:
         65:8a:6d:f0:41:45:fb:8d:37:7e:90:12:98:96:7d:e3:23:87:
         79:f7:c4:38:0e:33:a2:b2:fe:18:f0:92:6f:73:46:af:cf:b6:
         c2:e5:e7:7a:5c:d2:62:d6:9a:0d:31:81:59:f0:9c:58:64:b8:
         55:c4:50:80:ad:85:ae:38:72:f0:a7:11:be:da:32:cc:82:a0:
         5b:85:a5:c9:1b:c2:26:45:62:78:11:3b:74:89:ca:db:17:52:
         a8:d7:ad:7c:ad:78:d9:bd:ca:85:20:25:a4:27:0d:c4:8d:79:
         f6:e3:2d:54:87:38:ee:30:4c:5f:9b:2c:48:76:9e:d7:df:89:
         02:f5:b8:af:15:14:0f:7f:53:26:e3:db:f1:b5:1e:9d:bd:8a:
         c9:4a:02:61:d0:74:88:79:82:e5:c4:7b:33:db:da:78:59:31:
         05:61:73:73:a4:ed:ab:19:94:64:85:34:55:1d:ef:81:25:18:
         00:aa:10:40:5c:b8:80:c2:0c:38:30:e0:11:e3:61:46:86:ed:
         7b:6b:37:e0:42:c4:05:92:2b:18:bd:26:ef:3c:69:6c:3e:42:
         e6:1d:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:15:34 2024 by rpki-client on console-ams.rpki-client.org