Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/380f7655-19c8-3b48-a42d-e55d4477c550.roa
File:                     380f7655-19c8-3b48-a42d-e55d4477c550.roa (raw, json)
Hash identifier:          GeN5gx4Tv7J/vGop8PN1PIoPDWARbiM8Ajpf0nHQ0jo=
Subject key identifier:   DE:84:25:6A:D9:38:85:91:86:B6:1C:F7:4E:D8:E1:A1:4B:2B:60:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB039AE69B5F51A70A6A080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/380f7655-19c8-3b48-a42d-e55d4477c550.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33657
IP address blocks:        68.87.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:39:ae:69:b5:f5:1a:70:a6:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=946c1ac2-dd37-4a3e-aa4f-8b567de4adea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ef:36:ee:99:aa:00:c4:f5:dc:19:c2:b1:06:
                    df:49:26:b7:bc:c2:f0:0f:66:dd:13:38:7e:92:3a:
                    b1:bf:b3:ae:94:4e:2b:09:78:30:4c:aa:00:f4:73:
                    45:34:63:a1:b7:6f:92:48:fe:a0:fa:ff:4e:34:fa:
                    62:a6:bc:4a:2c:33:e5:79:f2:91:54:18:29:f3:f0:
                    21:ae:a9:21:09:c0:c1:9d:a8:a5:8d:1f:b4:9e:24:
                    8c:b6:07:ff:91:ed:0d:c7:30:d0:80:c4:ce:a6:18:
                    ae:c7:bf:bc:b6:53:1e:8c:25:a9:07:ab:41:a9:c1:
                    19:83:c4:94:5e:05:ea:e8:37:d3:e7:9b:2e:49:c1:
                    4d:d2:a9:da:3e:a8:78:3a:83:28:db:41:2c:cd:48:
                    15:11:0c:d2:8d:84:90:05:1d:7c:42:cd:4b:97:c9:
                    a5:52:12:13:06:a2:52:d7:00:14:2f:e9:63:c0:4a:
                    9e:66:44:55:74:28:60:2a:a2:45:ae:b7:66:9d:e8:
                    81:0f:0e:b9:ea:ae:a5:7c:80:d2:a0:73:12:d2:1e:
                    4e:dc:24:2b:a4:8f:ac:9f:55:fd:7b:c4:3f:7e:5c:
                    df:72:82:6d:a6:84:aa:91:ff:2e:a0:1f:8d:73:a9:
                    57:18:78:9d:e3:d3:13:79:0a:7a:c1:84:49:11:e0:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:84:25:6A:D9:38:85:91:86:B6:1C:F7:4E:D8:E1:A1:4B:2B:60:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/380f7655-19c8-3b48-a42d-e55d4477c550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:6a:d0:fe:69:50:5f:e0:67:db:c0:12:8e:4a:93:0f:b9:30:
         b8:ba:f7:07:ee:fb:f3:ce:17:d7:d3:70:97:be:94:a7:12:f9:
         d7:ab:e4:37:3e:fd:a3:9a:41:b3:94:be:54:98:1c:bb:37:f3:
         eb:87:90:46:38:53:72:c7:d4:3f:8d:ef:a6:a9:80:28:c5:b7:
         fc:cb:40:82:d2:40:93:36:95:e3:b9:38:79:99:c5:9d:41:e3:
         75:be:a9:a2:d3:93:9e:ef:ed:98:68:f8:cd:e5:b9:f8:81:f3:
         8d:36:61:58:11:72:d0:eb:52:90:67:e5:b8:fe:e0:99:6b:11:
         6f:3e:76:06:89:e2:e7:b4:af:ca:ab:2e:fc:92:9e:1b:5d:85:
         5e:e8:56:14:b6:b8:90:21:0c:2a:23:05:a1:a4:40:26:e7:e4:
         3b:02:b2:a5:26:07:3f:f1:f7:e0:d9:72:9d:8e:01:82:ef:fe:
         00:92:73:8b:f2:7c:7b:b5:9a:96:5c:33:0a:1c:11:4e:9f:a3:
         21:21:02:13:8a:32:4a:62:97:b3:b4:ca:c6:e4:aa:c3:d6:15:
         5b:87:9b:0c:58:d3:91:00:48:9f:33:04:15:1d:07:c9:c8:45:
         79:63:42:da:c8:06:77:1d:0b:56:04:9a:51:18:49:da:e2:42:
         da:f4:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:47:13 2024 by rpki-client on console-fra.rpki-client.org