Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6687ca39-577b-3c5a-a698-a81bf589e1cb.roa
File:                     6687ca39-577b-3c5a-a698-a81bf589e1cb.roa (raw, json)
Hash identifier:          fuxmtOZmp9H7SfA6zDQlUeASXDOZMmp4xd+nv5R/VSw=
Subject key identifier:   02:7A:ED:2D:A4:CC:04:F9:E6:78:AA:E6:65:24:BC:EE:DE:B8:B6:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89C8223A892D3D75042100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6687ca39-577b-3c5a-a698-a81bf589e1cb.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        174.166.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:c8:22:3a:89:2d:3d:75:04:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=5ddde462-5c2b-4471-8cad-f3cf1e7b1228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:97:b5:26:98:a7:ba:08:14:b9:d2:a3:cc:
                    2d:d0:a1:d1:b8:8c:61:37:00:f7:90:ca:c6:71:62:
                    d1:b5:c1:98:53:5c:f1:9c:ac:39:01:38:c8:d1:9b:
                    70:35:99:8e:73:9e:dd:aa:05:7c:d4:b6:66:3a:f0:
                    9b:4f:b1:79:4e:4f:05:16:d8:dc:22:b3:88:92:74:
                    1f:1c:dd:be:d8:8d:74:5a:d6:39:5d:45:7a:6f:04:
                    5f:9d:2b:7f:b4:07:b3:6d:03:bc:5d:08:76:53:23:
                    59:5a:1e:4a:da:29:8d:fb:93:7e:f3:58:0b:58:b1:
                    4a:69:2f:8b:43:41:4c:98:b4:31:01:3b:b6:eb:e8:
                    f8:95:09:44:5d:21:ae:78:21:f5:ab:69:c3:67:ca:
                    bd:7c:88:0e:4b:60:a9:11:f1:47:2a:37:89:5a:e8:
                    9d:a7:f2:ce:4c:d0:87:c7:91:09:21:96:61:71:20:
                    89:83:92:da:28:78:63:e1:d2:f9:c8:f4:17:e8:8f:
                    90:42:e5:be:09:36:27:b1:1c:0d:c2:5a:bc:ba:8b:
                    82:0e:da:85:72:d0:82:12:30:a6:91:61:09:ce:25:
                    b0:84:a2:01:d0:71:81:a3:fc:d5:f5:01:ba:e2:32:
                    65:b2:f9:30:dc:24:7d:d1:01:95:14:c8:1b:2a:e4:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:ED:2D:A4:CC:04:F9:E6:78:AA:E6:65:24:BC:EE:DE:B8:B6:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6687ca39-577b-3c5a-a698-a81bf589e1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.166.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:61:a8:aa:85:9b:08:82:56:ca:71:11:b3:40:a2:d9:76:96:
         1d:d3:95:78:6d:10:ad:08:40:d3:be:20:c6:ec:84:52:d0:f4:
         42:f3:ea:b1:fc:d5:1a:10:bd:64:47:78:57:b5:c6:9e:3c:cc:
         ab:67:57:4e:6d:f0:01:55:cf:9d:4f:6e:fb:4c:15:5b:32:31:
         e2:1e:b9:54:8d:bc:90:50:d8:1e:7b:3d:28:ec:62:09:b3:77:
         d0:76:20:bc:b5:30:e1:8c:2f:2a:35:63:35:c2:b6:3d:2a:05:
         05:35:be:5c:3c:17:99:59:bf:33:33:f4:bb:37:ef:26:c0:67:
         ad:d1:b6:02:8a:ed:dc:a9:ce:db:9f:01:73:8f:43:da:6d:ef:
         11:1d:a9:d7:88:5a:08:6b:37:5f:a1:05:b1:89:92:eb:a0:a9:
         da:90:6e:ec:3d:a4:d8:9e:87:6f:d5:24:37:f7:e0:2d:64:6e:
         87:fd:83:2d:b7:c0:c2:58:a6:1d:5e:63:e6:a3:e5:09:9b:3d:
         a0:77:75:1d:81:10:3f:c3:35:0f:54:e6:36:fa:9f:0b:74:de:
         94:3f:33:c8:2f:ee:1e:17:1b:ae:f9:ec:5e:33:09:29:0a:0a:
         cb:04:5d:46:9a:3d:1a:09:a7:81:b0:ac:f5:c1:7d:e8:c8:15:
         2e:fe:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:29:07 2024 by rpki-client on console-fra.rpki-client.org