Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94551ef4-054f-3e2c-9aa9-f6344478d093.roa
File:                     94551ef4-054f-3e2c-9aa9-f6344478d093.roa (raw, json)
Hash identifier:          IZARU0AEm36i4FY3Kcy+GNhNnDWvW6UA4+GX9Q8nzO8=
Subject key identifier:   99:1C:90:F5:8B:6D:B7:0D:45:40:8A:3A:C4:E4:B3:AB:80:05:B2:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FACBF54BE3A69D51B2747C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94551ef4-054f-3e2c-9aa9-f6344478d093.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        75.149.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:bf:54:be:3a:69:d5:1b:27:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=bdbbe754-4c64-44ec-b9e7-869c3a582627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:0d:bc:1c:dc:49:b3:de:95:cc:fc:c1:5b:
                    83:45:72:cf:d1:05:30:cc:c0:d6:fc:86:fc:89:95:
                    41:c2:87:01:11:cf:9b:7a:b3:70:3d:a5:69:ad:3a:
                    79:d4:56:d0:a1:6a:73:55:bd:ff:0b:b9:c9:f9:4f:
                    77:c1:67:d3:4a:94:24:cc:99:89:be:09:69:ab:a5:
                    07:3e:53:44:5b:34:fc:a2:ba:80:98:03:f6:32:ea:
                    70:c7:2a:7d:4a:7b:70:9e:72:eb:d5:55:92:c1:c6:
                    ff:69:39:c6:ad:bf:9b:8b:f8:b0:39:47:7e:dc:b5:
                    00:4a:eb:7e:e9:4e:e7:3b:d7:b8:e3:67:c6:3f:f3:
                    3e:b6:1e:b9:22:98:2e:36:88:aa:27:40:71:f5:85:
                    c8:43:c4:96:df:ee:9a:b8:46:a2:c3:2e:0a:85:1a:
                    bb:fb:8e:56:c9:60:b1:a6:52:ea:41:60:11:b4:34:
                    2a:a5:ed:e7:20:a1:30:de:4c:93:a5:e9:ec:f9:6c:
                    39:8c:53:b8:23:2a:75:fb:91:17:6e:f7:25:ad:e8:
                    6f:94:3c:c2:45:48:c3:86:c8:a5:ab:4c:8f:b1:e4:
                    c9:d5:3d:28:d5:7a:63:17:20:89:8a:30:bc:f3:26:
                    e6:c5:3d:21:5f:dc:20:19:b7:aa:c7:a4:1d:47:ac:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1C:90:F5:8B:6D:B7:0D:45:40:8A:3A:C4:E4:B3:AB:80:05:B2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94551ef4-054f-3e2c-9aa9-f6344478d093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.149.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:99:66:63:b5:d4:54:8c:b9:7b:c5:fe:bb:df:e9:b6:04:
         44:07:18:0e:9c:50:e3:d1:2b:9e:4e:aa:b4:ac:b2:e6:61:34:
         cf:de:c6:e2:0c:a2:dc:c4:70:15:87:06:dd:8e:93:cd:16:1d:
         4b:b8:1e:3f:0e:41:ad:0d:b7:3e:44:1d:16:71:aa:d8:04:80:
         45:d1:e9:9f:a6:12:1b:d1:79:20:1d:a5:43:9e:a1:d7:61:af:
         f2:74:52:c3:70:a5:cf:1f:a4:f6:54:f9:13:e9:e0:19:8a:e2:
         4c:0f:27:44:9b:f2:98:a3:4e:ad:ea:42:d0:26:83:04:df:45:
         b6:5b:4f:db:b5:a7:9a:7d:55:ce:7d:5e:3e:32:0f:21:b9:c7:
         ba:df:7b:81:c4:7f:de:88:a9:5f:13:f1:dc:47:cd:c7:c7:16:
         f7:13:31:36:7a:3a:a0:47:a8:63:23:58:58:5e:ae:d3:50:05:
         8e:3d:94:2a:4a:70:76:d3:7a:53:58:f3:aa:94:d3:31:8d:f4:
         dc:8d:63:c8:89:f5:61:75:8b:b6:8c:b4:89:33:42:3f:71:2b:
         74:70:f3:13:45:31:80:d1:42:f2:a1:2d:48:f2:03:ce:58:66:
         1e:06:62:6e:de:ed:96:4c:36:49:57:e2:e9:c0:6f:82:30:f0:
         07:fd:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:43:03 2024 by rpki-client on console-fra.rpki-client.org