Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a23adc51-b54b-3c54-a6e6-2d62b6ba9e69.roa
File:                     a23adc51-b54b-3c54-a6e6-2d62b6ba9e69.roa (raw, json)
Hash identifier:          OEqRFV8CDPHGf6PPtn2ODtMXDazpJClGHur7sPrj8qs=
Subject key identifier:   F4:BF:31:41:2E:F5:D5:81:A0:30:84:8C:0E:4A:2C:57:C5:A8:C0:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFC56B6EBB3216B8068700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a23adc51-b54b-3c54-a6e6-2d62b6ba9e69.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        107.4.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:c5:6b:6e:bb:32:16:b8:06:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=8ff6dad6-3762-4224-b884-8e36a94708f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:2f:4b:f8:15:02:4e:a6:d8:09:35:d5:45:
                    7f:f7:88:1f:31:d4:79:55:4a:26:15:66:c8:82:b4:
                    30:55:0c:71:cf:d4:15:7c:af:00:a4:28:66:1b:a1:
                    36:3e:6e:4d:03:f7:d0:02:8b:19:68:04:ec:68:c0:
                    02:28:dd:6f:66:aa:a5:6d:31:43:c0:5a:59:54:d4:
                    b9:23:72:42:c3:fe:1a:b8:2d:ba:d1:db:63:53:a4:
                    e0:fb:81:3f:81:26:08:b6:a4:8a:81:30:b0:a5:6d:
                    ca:08:00:50:46:62:9d:89:44:7c:d1:bf:69:46:bc:
                    ec:55:38:ad:c7:a5:75:97:a7:97:f8:0d:d9:c3:1b:
                    ef:7c:9d:15:4f:fb:5e:16:14:33:a9:73:3a:55:5a:
                    64:8a:36:d8:03:47:20:9d:66:6a:99:92:4a:a7:88:
                    9c:a7:74:44:52:70:07:39:85:7f:8a:7b:77:9c:fb:
                    2c:59:25:0a:31:58:a4:8e:d4:1b:91:cf:c6:62:33:
                    db:76:67:71:af:69:f2:98:af:b5:2d:b8:7a:72:b8:
                    ee:57:b0:2d:49:b6:88:f1:fb:fa:04:64:21:b9:3a:
                    24:87:3f:84:55:13:70:81:57:25:07:9a:77:b1:a2:
                    31:7f:b6:5a:c6:9a:a9:0b:13:aa:15:83:cc:a2:a4:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BF:31:41:2E:F5:D5:81:A0:30:84:8C:0E:4A:2C:57:C5:A8:C0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a23adc51-b54b-3c54-a6e6-2d62b6ba9e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:94:8f:a6:fd:0b:f8:60:8d:2e:48:05:55:a5:04:40:31:
         98:0d:0f:07:cd:d5:7c:de:1a:e3:f9:99:ba:a3:4c:66:c2:6a:
         2b:49:7a:8d:04:ed:08:65:53:6c:50:31:ec:5d:51:22:2c:e7:
         23:41:c0:58:94:98:7e:46:de:03:86:de:36:8d:32:2c:33:28:
         95:63:8c:45:ee:de:9f:59:f4:4e:90:c6:2d:46:d8:ab:fd:a9:
         96:0a:3e:d9:d0:0b:c9:6f:ee:4c:49:0a:40:e1:ca:48:ed:7e:
         93:81:2f:b4:86:8d:e7:d6:4b:6b:0a:03:17:21:8b:8e:37:8c:
         71:fe:a4:d4:13:68:76:4e:6b:ee:c2:9d:54:7a:a1:61:90:df:
         65:b3:06:c4:39:2a:19:4a:55:2c:ec:73:bd:bb:f0:f0:3f:86:
         96:0f:b3:8e:0e:23:82:2b:12:91:08:4d:3d:75:e1:75:68:e2:
         e2:7f:9f:81:62:8a:5c:98:db:20:09:98:80:03:e6:d9:aa:cb:
         d2:5f:45:56:13:d9:6d:43:60:22:23:f0:3c:93:6b:b9:12:78:
         0c:9c:e6:ae:90:d9:d5:9a:7d:6e:ac:30:af:25:68:27:93:c9:
         78:f2:76:7e:6e:22:40:9f:31:7a:7a:5d:3b:13:78:27:26:63:
         19:17:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:20:16 2024 by rpki-client on console-ams.rpki-client.org