Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4936889e-5af2-3ecd-9912-b335aee338fb.roa
File:                     4936889e-5af2-3ecd-9912-b335aee338fb.roa (raw, json)
Hash identifier:          60XRpGQmYlWNw7/qRn6XxhM2KiGWLjFy5UT1IaVO+tk=
Subject key identifier:   CD:7C:54:43:B3:45:E4:EB:F7:8E:35:51:BD:1E:9F:E3:A7:3F:09:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE5CBD82F0798EE9E0A040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4936889e-5af2-3ecd-9912-b335aee338fb.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33650
IP address blocks:        76.121.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:5c:bd:82:f0:79:8e:e9:e0:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4dc858e6-53f4-4e3b-85ee-607fd5be014a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:04:7e:fc:6c:5f:1f:e9:d1:2d:e3:96:7e:5a:
                    ad:65:78:f4:e0:bd:76:d6:ab:ec:04:f2:ee:10:5d:
                    5e:df:49:b0:ca:d6:f2:fe:b7:c3:2a:c1:12:79:e3:
                    d4:6c:7e:3d:2c:c9:94:fc:44:fb:bc:6f:6d:e1:2f:
                    ef:d7:cc:f7:03:7e:ec:33:89:1b:c0:9b:ed:0d:cc:
                    2d:9f:c6:ed:07:4d:29:dc:88:96:63:9b:5a:79:1f:
                    8d:2e:af:e0:8b:05:00:d1:42:e4:15:ba:ce:bd:d2:
                    b0:53:54:5e:20:55:65:67:57:3a:48:42:77:45:08:
                    88:71:d9:3a:ea:13:20:74:4d:bf:95:ea:8f:85:b3:
                    bd:79:ae:eb:55:21:4a:4f:5d:47:bf:86:e3:2d:55:
                    68:99:a8:1d:6d:89:02:61:54:7e:49:26:7b:11:44:
                    0f:23:f8:a4:28:ea:da:99:ab:49:35:a1:00:11:9f:
                    2f:72:5b:34:b5:fb:c1:b7:58:e2:36:c9:f0:0f:be:
                    56:f3:f0:d7:9f:8d:6d:c1:fa:7b:d5:de:67:0c:d1:
                    d4:33:68:e8:46:b2:42:da:9f:32:51:be:2b:00:83:
                    b4:81:f2:16:21:11:f9:d9:ca:51:08:2f:0f:37:80:
                    f9:74:25:84:28:0a:dc:4f:1f:c6:9b:90:8c:23:9b:
                    8d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:54:43:B3:45:E4:EB:F7:8E:35:51:BD:1E:9F:E3:A7:3F:09:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4936889e-5af2-3ecd-9912-b335aee338fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f6:ea:d9:08:25:89:92:7a:80:2d:f2:c9:55:19:78:6f:e5:
         45:23:ab:72:0b:53:9c:f1:c8:7d:1a:9b:e9:c4:9f:91:83:bb:
         57:d8:fe:5e:ff:c2:78:71:d4:4d:71:d8:7a:1c:6d:86:3e:d3:
         52:90:50:71:d1:23:1f:0e:6b:32:2a:42:ff:5f:e7:69:43:98:
         df:30:5b:b8:2a:00:f5:8f:af:16:ba:60:3b:f6:62:4d:cd:7c:
         d1:c4:58:79:cb:3c:fb:99:a5:a2:95:99:0a:91:74:b6:72:eb:
         ea:46:9d:22:25:d0:67:53:10:f6:5e:5b:11:1a:39:37:b4:79:
         6f:94:9c:cd:0b:8c:8a:32:d6:db:4f:0c:bf:72:fe:8b:20:15:
         95:f6:b5:b4:29:7f:69:40:30:c7:a2:ee:38:78:8e:6f:51:df:
         a8:95:e2:91:e0:a6:15:69:ec:98:05:af:61:df:66:3d:ac:d7:
         f4:a6:76:5a:76:ca:7d:30:ed:09:21:14:21:21:a6:da:8c:75:
         9e:e8:01:e6:da:ce:33:2b:a3:de:a6:4c:9c:d6:52:c1:ee:ee:
         1a:ee:dc:79:f3:50:67:5f:cd:80:33:d9:fa:d4:dd:01:d9:d4:
         8f:85:a1:b2:7b:99:a5:61:dc:dd:59:06:f8:6d:7d:04:b0:34:
         93:8d:65:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:48:15 2024 by rpki-client on console-fra.rpki-client.org