Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59a155af-96c4-3b18-bb4e-ba1d2769bc59.roa
File:                     59a155af-96c4-3b18-bb4e-ba1d2769bc59.roa (raw, json)
Hash identifier:          lI25Psv4osXOBkCm52Csy5f6EWI6hG0NLq+Uotjef7M=
Subject key identifier:   DB:B6:1D:B7:0C:E5:67:8A:04:4E:C2:EF:B4:96:64:F3:3E:7C:C5:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845A428BBA9F6E5FB9F6ECBD900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59a155af-96c4-3b18-bb4e-ba1d2769bc59.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     33656
IP address blocks:        68.87.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:bb:a9:f6:e5:fb:9f:6e:cb:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=bbd13736-05a9-4e3f-a4a8-674d1b124d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:94:a5:5b:ef:e3:44:1b:f9:69:ec:6a:6c:b9:
                    6d:f7:2a:a6:78:30:19:be:aa:bb:b9:9a:85:aa:2e:
                    bb:01:47:58:e2:6e:b9:06:d4:58:4e:1f:cb:b0:9c:
                    f3:87:c1:3b:97:a3:19:9b:8a:3d:3c:71:c1:e8:c7:
                    29:24:06:19:e8:0f:e7:6b:94:2e:bb:9b:6a:a8:02:
                    4a:02:08:28:fe:db:bd:42:76:c9:2b:b0:3e:e5:82:
                    4b:4a:fe:2d:c3:05:1e:9f:eb:73:ee:26:f4:86:07:
                    68:5e:d5:4b:6f:74:e9:de:a5:0f:3b:5c:b4:cb:9a:
                    db:78:2a:92:d2:37:28:b0:57:65:31:18:8f:f3:c2:
                    dd:fd:bf:cc:c6:82:0e:e0:51:4b:65:63:69:4d:05:
                    ff:06:f9:41:44:59:84:94:56:93:3c:67:3c:43:91:
                    e5:97:85:9e:f8:1f:30:fc:d4:7f:fe:79:ee:c2:01:
                    ca:0e:e7:5f:f6:e7:5a:9d:1f:9e:b9:3c:6f:a8:a5:
                    09:8b:29:2c:f0:34:bc:f7:08:ce:04:d9:7b:8a:09:
                    62:f2:ee:7b:0c:f7:89:ad:23:c1:f2:b6:00:2e:5f:
                    2c:50:c8:e5:8f:20:99:f6:93:ce:86:7b:42:98:55:
                    14:b0:c3:4f:9e:c6:4f:69:43:8f:8d:3c:ca:7a:63:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B6:1D:B7:0C:E5:67:8A:04:4E:C2:EF:B4:96:64:F3:3E:7C:C5:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59a155af-96c4-3b18-bb4e-ba1d2769bc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:d5:0a:ec:67:8c:bc:54:da:0f:9f:7c:01:c8:d3:2b:5b:
         2e:ad:c5:24:79:78:4d:6e:ea:e2:0a:fb:27:93:f3:0f:eb:e5:
         45:84:81:c6:2b:bc:af:1c:ba:44:df:c2:d7:9c:5a:f1:94:15:
         09:31:e5:2a:be:79:e4:6c:a7:19:69:93:0e:f0:2e:25:aa:01:
         1d:f1:9e:f2:76:4f:f3:cd:e7:b6:3d:6a:0d:24:14:75:14:11:
         a5:61:18:20:d8:fd:ed:f5:88:12:8c:f2:21:98:4d:bb:fa:b9:
         de:8e:f6:5c:14:32:d0:7b:8a:5e:6b:d7:31:26:3c:6b:65:68:
         75:fe:c9:da:27:67:87:00:10:8a:a5:bf:1e:37:25:14:20:f3:
         91:82:08:c7:63:dc:32:30:b9:92:02:15:5c:3d:f3:2b:a2:ee:
         f6:13:1f:03:98:a6:7e:38:67:ea:5f:a4:2d:54:b1:6e:04:f9:
         0d:3c:5f:d4:8c:36:98:57:76:c2:df:14:9f:1d:f2:54:88:11:
         7a:a8:4f:01:63:18:08:0e:81:2f:96:13:88:9e:0d:da:bf:79:
         45:43:41:fc:7b:65:cf:7a:f7:99:f8:d3:64:13:d2:c9:eb:f0:
         9c:76:fc:96:00:ce:d9:3b:3b:cc:3b:24:78:83:ad:75:75:13:
         4d:35:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:17 2024 by rpki-client on console-fra.rpki-client.org