Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9216cdd1-96eb-3920-8951-f5c2632ab88f.roa
File:                     9216cdd1-96eb-3920-8951-f5c2632ab88f.roa (raw, json)
Hash identifier:          EF/tDj/E70XzbmZmjI44WCNudNnTRjy24VdbYGLpUgU=
Subject key identifier:   D7:15:1E:08:60:AB:2F:B1:1C:62:7E:AD:C8:4D:2B:4E:C7:5A:77:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB00B32325BD5E882F924C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9216cdd1-96eb-3920-8951-f5c2632ab88f.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        68.46.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:0b:32:32:5b:d5:e8:82:f9:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=9c84363d-53ff-426a-977b-8da6a936f199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:21:2e:8c:fc:c1:a2:9b:6d:5f:cc:4a:b1:02:
                    a8:cf:c3:d5:49:df:01:1b:b8:7a:02:54:d6:65:9c:
                    80:0e:38:5c:56:74:9d:01:c1:41:0f:20:70:33:4f:
                    aa:06:69:ac:8d:ab:b7:9e:30:23:fb:ef:5d:12:f5:
                    c3:87:eb:e0:f5:c1:9a:0d:b4:4c:2a:fa:f0:52:77:
                    3b:e8:99:c1:48:ae:f4:a2:77:26:6b:6c:90:e9:f2:
                    b6:34:bf:c2:cf:8b:13:be:1f:47:ee:a2:dc:c8:d9:
                    9e:53:89:bb:68:70:92:f7:5e:93:d3:a8:0f:1e:db:
                    07:a4:89:bb:4d:b3:94:f1:c2:6a:aa:c7:64:ef:2c:
                    13:32:f2:41:05:4d:6e:bc:62:d8:c6:c3:bd:89:85:
                    b5:49:e5:8d:12:c6:f4:a4:4c:dc:ef:b3:a2:fa:d9:
                    1b:6c:ea:3c:4b:e3:10:de:7b:f7:97:20:48:ea:2d:
                    54:20:0b:9a:6a:7b:02:94:3a:b2:3b:a4:c4:ac:ee:
                    9e:17:37:97:89:a9:40:3b:43:e3:97:0c:52:0b:2d:
                    07:61:e3:11:13:7f:5f:2b:8e:76:e7:e3:ee:ea:48:
                    c4:ef:d3:60:a7:25:44:21:77:e2:88:15:e9:a4:fb:
                    46:9b:a5:60:8e:b7:ef:cc:90:c2:2b:69:e2:42:dd:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:15:1E:08:60:AB:2F:B1:1C:62:7E:AD:C8:4D:2B:4E:C7:5A:77:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9216cdd1-96eb-3920-8951-f5c2632ab88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:44:d7:de:aa:22:46:05:62:ab:a6:35:fa:08:6a:87:c6:bb:
         f2:72:49:f2:13:c7:bb:d9:fd:61:9b:93:66:30:54:21:56:cc:
         30:f9:de:ae:72:0d:b7:28:b4:90:38:57:63:0d:7d:12:77:14:
         79:55:69:80:82:17:38:0f:45:39:58:a5:12:b7:22:8b:a3:51:
         8e:7b:21:5c:1e:f4:1f:ca:e4:e0:a0:9b:2c:95:72:52:01:b2:
         1c:f7:54:37:0e:1d:e1:6a:44:55:61:60:dd:de:8c:19:af:fb:
         e0:05:67:a9:51:4a:d3:d8:7c:26:ce:62:08:b9:5b:44:dd:0d:
         93:b5:0f:66:9b:20:87:fe:7a:e1:2c:88:d5:61:9b:20:07:8c:
         be:ed:54:af:f4:0d:17:a3:51:52:41:7d:25:83:8f:8d:ed:30:
         78:43:55:d1:8d:dc:24:53:e8:fa:11:74:1d:e3:dd:fe:ca:a0:
         0c:d8:c7:8c:f0:29:32:2d:e4:84:2c:0a:f1:70:56:29:d0:16:
         e9:35:21:63:0e:d2:b2:4d:c8:cd:a4:cd:72:fd:cc:c8:0d:2a:
         00:f8:0c:f3:f5:a8:47:9f:c7:c3:fb:ed:ba:50:12:c7:f8:bc:
         9b:1e:3e:5f:4d:68:ab:b3:3e:82:9d:7e:22:68:b0:8e:ae:f1:
         df:23:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:54:36 2024 by rpki-client on console-ams.rpki-client.org