Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b12544-0235-33e7-b7bd-7f2dfe53acee.roa
File:                     59b12544-0235-33e7-b7bd-7f2dfe53acee.roa (raw, json)
Hash identifier:          FJMel0VBcYSYb85EO+0JImFV+VxgD7KmrvRr7PacHoc=
Subject key identifier:   89:B9:78:2D:09:3B:3B:8F:77:52:42:1D:11:A1:F0:7F:63:CB:0E:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC896013E83E5F137CFFD100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b12544-0235-33e7-b7bd-7f2dfe53acee.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        76.98.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:60:13:e8:3e:5f:13:7c:ff:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=d2d613c1-827b-46a4-9745-5a823813c591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:ba:3a:a8:2e:d7:68:d2:7f:3c:ef:6c:09:
                    23:c1:f0:5c:a5:6e:46:4a:a8:79:19:44:29:fa:76:
                    01:e2:9e:37:6b:b1:91:ee:3a:f2:9f:99:fb:1c:60:
                    c3:b4:33:d4:32:9d:fd:c1:4e:44:e5:3a:18:88:74:
                    25:22:3a:5b:17:e5:04:e5:8f:b2:74:b3:53:75:64:
                    f8:56:c7:49:20:a9:58:58:79:0c:4d:3f:5e:c3:29:
                    d7:78:bc:ff:25:11:b9:7c:76:67:1d:11:bd:d2:2c:
                    7a:bf:25:36:18:ff:03:c8:7f:2c:c6:7a:e0:2e:be:
                    d4:c5:2b:30:91:0b:82:d5:19:ea:d5:5b:97:15:ca:
                    c3:2a:78:16:2a:02:43:e7:2e:69:25:85:dc:68:b9:
                    de:98:65:d3:68:54:8c:cc:c7:2b:15:e0:4b:95:f2:
                    2d:ac:fd:de:2f:6a:85:3a:2f:f9:cd:a3:07:35:a9:
                    3e:f1:0e:21:3b:84:ba:d0:aa:ba:8e:c5:13:ed:07:
                    87:73:a6:4a:a2:94:91:8b:e2:0f:97:86:1d:16:78:
                    ab:c1:88:67:59:93:fa:97:6f:ff:98:02:1b:ff:1a:
                    0f:2d:2b:35:3a:09:93:57:b6:1a:6e:63:f6:c9:72:
                    55:db:20:4c:0a:42:29:e0:b3:a4:51:86:87:77:7c:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B9:78:2D:09:3B:3B:8F:77:52:42:1D:11:A1:F0:7F:63:CB:0E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b12544-0235-33e7-b7bd-7f2dfe53acee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.98.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:3a:ca:5b:f1:75:2f:fe:70:bd:59:ad:7f:15:ea:88:92:d7:
         1f:d5:97:a7:c3:ad:83:58:17:a8:86:67:31:0c:85:65:29:af:
         da:d1:d2:12:06:60:da:9e:19:b8:27:4c:42:1a:d7:db:49:57:
         b2:72:bb:8c:b4:25:f4:59:6e:13:c5:f9:bb:88:e6:c3:40:60:
         ef:08:1b:a4:05:1b:cc:39:3f:82:4e:49:64:77:1e:c0:ab:f7:
         2c:d3:64:07:4a:5c:f6:4a:78:d5:fd:21:07:b3:3f:15:91:c6:
         c6:34:85:09:ce:20:c1:8f:8c:12:8f:11:82:2e:b4:24:7f:49:
         40:85:59:10:70:97:1e:b6:a7:92:18:0f:a9:94:17:65:4c:01:
         21:e0:0a:da:7f:3f:c4:5d:2f:35:66:5d:cd:a5:85:27:4a:40:
         b7:ce:34:21:8c:a6:94:35:43:a5:ce:58:6e:70:6c:c9:78:a4:
         5b:a9:ce:a4:fe:3f:4b:09:9c:45:d7:f9:b3:60:9b:cf:4d:44:
         8a:5b:fc:91:00:a6:9d:5b:05:e1:81:d5:d0:03:ff:6b:28:4a:
         54:b4:c6:25:53:a5:95:b3:08:69:f4:9d:7f:b9:10:57:10:2e:
         4a:49:ab:21:83:4b:81:3e:6a:31:cc:e2:de:70:5e:d7:10:ca:
         46:06:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:14 2024 by rpki-client on console-fra.rpki-client.org