Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fc5ea65-f783-3839-bd47-06a1345e3bda.roa
File:                     5fc5ea65-f783-3839-bd47-06a1345e3bda.roa (raw, json)
Hash identifier:          EYV/xNwDiH7UlnHpQbzLYiTzSTBQmWozJWsPKvElVfU=
Subject key identifier:   75:D8:03:C4:B1:2F:FC:5B:07:B5:66:FE:79:78:99:8C:3C:69:D1:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAAF16D52D97F546ABE9880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fc5ea65-f783-3839-bd47-06a1345e3bda.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        67.172.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:f1:6d:52:d9:7f:54:6a:be:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=908ef098-831b-47ec-8d3a-a7b94806fdfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:14:ad:66:bc:f5:33:14:51:2e:e1:7a:e5:
                    c3:00:e4:63:96:33:00:1c:3a:c6:82:14:9f:29:61:
                    f7:2d:33:6d:8d:14:5d:df:ad:75:d6:48:a6:4f:7e:
                    37:d4:39:40:e0:0f:ad:d3:e1:a9:21:af:54:96:41:
                    82:91:de:85:8f:81:69:6b:d1:c6:99:54:e9:1e:69:
                    cb:ee:41:8f:5e:a3:d6:85:a8:fd:1d:29:9e:07:d9:
                    0d:32:ee:ad:90:2c:69:78:8c:61:7f:a0:8e:8e:c1:
                    86:0d:56:72:ce:38:94:a1:dd:c9:42:52:89:45:17:
                    a9:02:e2:30:0a:ce:7f:b5:f5:01:d5:45:13:4b:52:
                    13:0f:4c:13:35:03:93:5c:aa:d5:50:c8:91:36:da:
                    8c:dd:8e:31:3b:50:d1:ad:ab:32:ed:ff:3d:50:09:
                    ac:e0:4b:0e:6e:99:d0:0c:12:ea:c3:c6:70:55:0e:
                    e6:07:fd:75:87:53:3c:df:2c:e9:39:12:71:5a:17:
                    82:57:ce:17:46:06:46:93:f8:86:cc:cc:fb:85:62:
                    a2:ab:ec:22:ec:61:8b:9e:d2:47:91:3a:d1:e8:ac:
                    93:61:35:91:88:59:90:e7:d8:89:0d:ea:b4:91:da:
                    e7:c3:b3:56:93:7e:20:be:63:1e:16:b2:50:a0:7d:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D8:03:C4:B1:2F:FC:5B:07:B5:66:FE:79:78:99:8C:3C:69:D1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fc5ea65-f783-3839-bd47-06a1345e3bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.172.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:15:3f:15:dd:e9:c9:16:00:d4:c7:dc:a6:72:22:4c:bd:
         69:bd:78:08:9c:71:f2:15:8e:a4:c3:44:9d:0e:f3:fc:c0:e5:
         c7:92:12:ca:da:ec:bc:37:a7:fd:81:1d:00:c2:ec:78:d1:78:
         a0:d9:23:d1:bf:4f:26:00:f8:34:90:4d:34:59:fd:f0:54:e1:
         24:73:94:d3:7a:c9:3f:63:82:06:b5:9c:e2:57:eb:0c:76:5b:
         b0:9f:43:0b:95:40:c5:94:b3:39:25:b4:9f:7c:21:19:7b:10:
         a5:bd:3d:69:f4:40:21:5e:3e:b7:69:53:99:1d:2e:27:bc:d3:
         b3:3c:bc:da:d8:3a:b1:dc:23:ee:07:09:d4:64:cd:ac:f2:a0:
         c9:4a:41:0b:45:5c:96:c9:69:fa:eb:af:84:da:70:87:62:45:
         3b:50:f5:cb:96:77:8f:1a:43:59:2e:67:23:d2:16:32:89:92:
         9a:9e:59:e6:7c:e5:73:b7:c7:e5:67:6e:a9:17:fc:ff:70:6f:
         b7:be:71:fe:84:69:a6:7e:bb:19:2d:68:6a:77:dc:9a:68:f9:
         38:a5:85:37:53:6e:56:6c:ee:44:e9:1d:da:32:0a:bd:d8:6b:
         65:ec:bc:69:c4:a3:33:04:8c:77:cc:da:b9:20:a9:9e:e0:cb:
         00:e3:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:51:53 2024 by rpki-client on console-ams.rpki-client.org