Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a97fd7a3-85d7-3657-9a15-0f838530daca.roa
File:                     a97fd7a3-85d7-3657-9a15-0f838530daca.roa (raw, json)
Hash identifier:          QVGVcEU8qf19df17kL0zxD156tex4NwZX4v+cMfxpzk=
Subject key identifier:   92:26:87:5C:F1:AE:6A:23:33:2F:4D:EA:B2:D7:7F:A8:95:87:7B:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB012DB821DB3DD3CB30400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a97fd7a3-85d7-3657-9a15-0f838530daca.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        75.149.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:12:db:82:1d:b3:dd:3c:b3:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1d7d030e-7c82-48c2-97de-9d6a7ed8c77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ff:9f:fd:63:1e:88:e8:58:07:2e:37:e8:b1:
                    d5:f3:2e:94:90:47:c2:21:3e:37:b0:be:cf:4c:69:
                    53:31:6e:31:2c:2b:a0:a5:3d:95:2d:8a:d4:06:aa:
                    de:a4:88:06:7d:6e:a3:b1:a2:79:e9:72:5c:67:d9:
                    9a:62:af:01:13:86:aa:3f:31:be:71:26:a9:d8:33:
                    a9:49:0b:64:17:e6:3d:f1:f2:fa:9c:81:35:fe:85:
                    7e:b6:37:aa:14:7f:61:59:e0:05:ed:35:9a:55:87:
                    c2:80:59:04:77:56:e5:75:6c:6d:34:29:2e:6a:51:
                    78:48:52:5d:e8:8b:3b:e7:f0:cb:58:aa:90:9a:7c:
                    2c:26:da:02:9b:62:dd:62:2b:7d:7a:22:2e:00:c2:
                    c0:3e:97:55:57:be:1e:89:66:77:19:0e:c4:b7:11:
                    a6:17:c8:bb:00:fb:5d:f2:76:dd:ba:be:60:bc:50:
                    a4:8c:1e:d8:bb:89:75:23:04:99:8c:20:fe:81:6e:
                    e3:04:18:a7:dd:99:d0:8f:15:dc:49:df:ad:60:d9:
                    e6:31:b4:e1:c9:18:a6:4b:89:6a:b2:b0:f5:4d:86:
                    10:3a:c9:11:bb:4a:9a:69:e4:a8:9b:0d:9f:e8:e3:
                    7c:5d:e8:d9:40:c8:df:2f:2e:67:2f:25:73:dc:0d:
                    a4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:26:87:5C:F1:AE:6A:23:33:2F:4D:EA:B2:D7:7F:A8:95:87:7B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a97fd7a3-85d7-3657-9a15-0f838530daca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.149.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:6c:39:0c:d9:94:f6:0d:29:c3:5a:04:3c:d8:2e:3a:65:
         aa:57:4a:12:e3:15:fb:71:54:27:b5:e1:e2:d5:92:ed:0a:43:
         57:e6:7f:57:bd:30:99:08:53:3b:b5:33:37:2b:27:d0:00:ec:
         5e:a9:e7:02:d9:3f:94:c0:a0:8e:fb:6f:81:26:39:b0:88:c0:
         ee:75:f8:d5:b7:6b:8a:ee:6d:6f:e8:43:0b:9a:a7:12:7c:5d:
         41:dc:a3:91:76:0c:fb:b1:72:eb:ce:a3:08:48:78:d5:86:4e:
         df:9a:e9:90:38:77:e2:1a:9d:64:ec:fb:07:02:d0:69:e6:a2:
         51:b9:a3:0b:6b:9a:51:63:e0:e9:4a:89:8e:8e:7e:50:1a:9e:
         61:3a:a4:c1:bd:d7:c3:e0:20:f7:0e:83:12:0f:50:19:35:fc:
         73:30:8e:ad:23:a9:78:d6:9f:aa:e9:f1:c9:b9:20:4b:71:ac:
         5a:dc:0c:5d:3a:3e:22:7a:8e:68:e5:19:04:74:47:69:9d:69:
         f2:d6:93:28:47:60:fe:52:51:fc:e4:d3:0d:5c:80:f0:ab:65:
         35:4e:77:3a:86:f7:2b:02:9b:9b:54:0e:77:37:27:1d:78:c3:
         c0:d4:40:7a:c2:4b:dd:9d:fa:30:c6:9f:ca:0e:7b:fc:64:47:
         65:9f:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:44:28 2024 by rpki-client on console-fra.rpki-client.org