Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d3fb7c-577b-3031-9ef3-9149775146db.roa
File:                     94d3fb7c-577b-3031-9ef3-9149775146db.roa (raw, json)
Hash identifier:          hKcRmGrLDin1pcPKG2SETZhw2zDAGBuOsYVofOdWjCw=
Subject key identifier:   A3:61:74:8A:44:61:9D:A2:E9:91:03:95:86:23:4D:AF:BA:77:FD:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89E17B22D048B1DE441520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d3fb7c-577b-3031-9ef3-9149775146db.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        69.253.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:e1:7b:22:d0:48:b1:de:44:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=e8475c22-b9e6-4b5f-b8f5-d464f9b481ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:e5:0a:97:d4:fe:e9:b3:7b:ab:a5:a7:79:
                    5f:2d:49:c4:49:90:5b:1b:81:a8:bc:db:b6:19:d9:
                    88:6f:03:e4:b7:58:85:7c:e8:c5:15:a9:52:08:1c:
                    f0:24:6f:20:ef:33:4d:75:3f:46:ca:3e:a4:b2:dc:
                    78:75:de:11:0c:b8:22:2a:a0:4e:68:55:36:02:4c:
                    2d:cd:6f:4d:2d:b2:57:4e:57:4b:6f:af:94:3c:47:
                    83:b7:46:b3:5d:54:e6:0e:60:9e:17:b0:f9:5e:04:
                    89:39:75:83:a2:d4:55:9e:60:86:6e:1d:ba:f0:00:
                    2c:ee:02:44:f5:9e:d4:93:cf:55:54:31:66:8c:2f:
                    9a:f9:df:8a:2b:70:e2:b9:f3:0e:05:2f:44:e4:68:
                    df:82:65:87:18:81:66:96:09:b4:46:c8:29:8c:68:
                    8b:d2:67:5b:98:8a:de:5b:68:02:5f:5c:8a:3a:6f:
                    9f:07:08:e8:09:21:04:b2:1b:66:63:cb:7a:0d:80:
                    2b:98:0b:57:58:bb:af:49:34:d2:e2:d0:0c:96:a6:
                    a0:e1:f5:32:19:c1:52:f9:9e:db:04:cf:c0:f8:70:
                    80:d5:c0:1d:f3:30:ab:57:e3:99:27:52:a5:81:67:
                    9d:92:ba:f0:90:a5:94:95:9a:64:ef:2e:13:7c:61:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:61:74:8A:44:61:9D:A2:E9:91:03:95:86:23:4D:AF:BA:77:FD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d3fb7c-577b-3031-9ef3-9149775146db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:c4:5b:22:04:f4:92:c2:c5:d3:b9:51:b7:ab:af:20:6c:
         42:6b:d0:6e:db:0b:71:36:39:69:a6:7c:95:af:c6:28:c8:1e:
         e2:79:db:1a:8a:35:13:f3:43:92:07:de:ad:8c:8d:f6:b9:74:
         5f:f8:0c:d6:79:98:ec:33:27:18:22:80:d9:58:99:13:8e:86:
         83:a0:28:cb:5a:11:da:82:cb:ed:b2:cb:16:20:c9:c2:98:96:
         ec:92:9b:de:44:db:d6:f3:b5:ed:5a:d4:11:7f:1f:73:93:9f:
         3a:b6:ab:6b:cb:13:fe:d5:c8:86:d8:42:f6:48:3b:5d:fa:1f:
         27:2c:aa:98:03:d3:7f:89:ae:e5:49:50:ae:f1:9b:20:51:67:
         9a:1d:46:b2:d9:42:9f:a0:53:b4:28:1d:19:e7:c3:c1:3d:82:
         09:6e:a2:61:8b:07:97:41:1d:99:6c:3d:43:d1:5b:be:5a:61:
         1b:86:36:bd:f9:d6:c5:17:75:23:3e:a1:b9:d0:5b:0e:f5:cf:
         6c:38:fa:7f:43:5a:04:0e:f0:22:2f:85:f2:6a:30:7d:5f:ec:
         42:1b:66:1f:5a:3e:3b:64:a7:f1:a9:06:bd:c5:65:52:22:4a:
         6c:c0:8a:44:14:56:68:b1:96:b7:58:fe:01:5b:fb:02:ef:71:
         23:0e:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:54:44 2024 by rpki-client on console-ams.rpki-client.org