Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4976e6-02c9-3a23-b2de-8a6632bd912b.roa
File:                     5f4976e6-02c9-3a23-b2de-8a6632bd912b.roa (raw, json)
Hash identifier:          bUcBS/uLGyadnOp4ditA4+aq4N71TUCG4v48egI4rK4=
Subject key identifier:   B6:63:BB:07:3C:FF:B1:DC:AC:3C:92:6D:67:5C:E7:D5:DF:9B:5B:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFB0CACCFECEBA37F560B8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4976e6-02c9-3a23-b2de-8a6632bd912b.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        76.113.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:b0:ca:cc:fe:ce:ba:37:f5:60:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=413580ed-7ddd-451f-b5db-5f939a410963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:7a:57:6a:bd:f4:87:60:0d:5a:ee:06:0c:
                    eb:15:e7:e7:fb:03:c9:c2:2c:d4:eb:6a:13:ce:39:
                    ad:57:33:15:85:e1:5e:1a:63:f6:2b:76:ab:46:9f:
                    4c:03:0c:cf:b0:63:43:1a:3a:8b:85:92:4d:01:ad:
                    ca:be:5b:2a:ef:d9:a3:72:32:c3:97:52:34:ca:0e:
                    d8:28:b4:6c:14:34:18:3c:fb:ea:5a:90:93:93:ed:
                    91:eb:77:da:5e:16:0a:7d:66:c9:e7:3b:45:a4:af:
                    17:f2:ac:2a:ed:08:66:0f:21:df:bd:50:74:2e:10:
                    b6:e4:2b:1d:a4:66:1d:1b:17:e7:14:dd:e4:87:29:
                    c3:0b:66:1b:a1:ef:fe:36:a7:77:d6:36:6f:aa:95:
                    bc:8d:70:24:13:f8:99:c6:12:b6:69:6c:b3:0b:41:
                    75:05:79:11:2b:ca:73:90:ae:6f:c4:b7:2e:7e:ad:
                    d6:4b:72:5a:e2:1a:31:0f:89:7d:c5:81:89:97:20:
                    a9:c5:c6:8a:bc:0f:92:84:c3:db:c5:c4:db:cc:76:
                    ca:f7:78:94:8c:23:46:18:ab:08:f9:d3:b0:98:29:
                    e6:7c:65:82:01:b4:2b:7b:1e:ff:d3:4a:ea:c6:ca:
                    cd:d9:dd:0a:62:b8:63:72:4f:a6:74:27:bc:3f:a1:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:63:BB:07:3C:FF:B1:DC:AC:3C:92:6D:67:5C:E7:D5:DF:9B:5B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4976e6-02c9-3a23-b2de-8a6632bd912b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.113.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9a:39:63:f7:7a:97:08:3b:9a:36:bb:0a:ac:93:47:66:74:
         39:70:5c:64:7a:61:40:19:6b:7f:b8:ba:2e:59:e4:79:38:3b:
         65:6f:e4:96:83:71:35:50:05:94:ad:34:b0:af:72:c6:0b:80:
         30:ef:2c:80:1a:43:a6:c4:82:88:9a:49:49:da:4d:53:97:02:
         4d:c0:b8:9c:af:44:47:6c:69:1a:b2:c8:f3:fb:82:1c:1f:01:
         94:33:ed:4e:1a:eb:00:c8:20:32:ab:53:de:c8:75:da:db:11:
         2c:7f:50:13:01:42:36:e2:29:a4:5a:41:4d:f2:32:75:41:3f:
         3f:b0:ef:c3:db:0f:55:c2:73:8a:4b:94:f8:40:c4:23:b7:b3:
         a1:1e:ef:3d:9e:cb:37:9d:9c:1b:c3:70:94:19:88:89:a3:ac:
         26:ec:d2:f7:48:de:b6:2c:7b:03:ce:f7:af:f4:b0:f7:2d:69:
         43:60:2a:88:ae:fc:df:ae:26:e3:a8:51:c0:20:76:7d:d8:d7:
         1d:ca:14:c9:15:7f:b9:74:ae:ae:6c:2b:df:45:2e:e3:0b:df:
         c2:95:cd:53:cf:59:ee:81:3e:09:3b:e9:c4:5a:76:34:71:b4:
         b6:99:b9:7b:62:06:ce:fa:8b:72:fa:9a:92:69:95:cd:e8:14:
         19:c0:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:36 2024 by rpki-client on console-fra.rpki-client.org