Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb86dfd-36eb-39c6-92f3-5dd890c6ab0e.roa
File:                     aeb86dfd-36eb-39c6-92f3-5dd890c6ab0e.roa (raw, json)
Hash identifier:          1mMip7BV09Z50LJQnnT9oHdZj8qRk9ZEszz2uj8BJtk=
Subject key identifier:   9C:E2:AD:A8:0A:37:A9:52:9D:C7:E0:2C:6C:61:EC:FA:4F:98:C5:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF74A6101D57FA47A7CF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb86dfd-36eb-39c6-92f3-5dd890c6ab0e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        66.41.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:74:a6:10:1d:57:fa:47:a7:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=2d1bf717-3219-4cbd-83bf-292bc0324300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d4:56:ff:50:8b:d8:fc:1b:e0:61:d4:00:4f:
                    bf:bf:ef:7c:ec:77:ec:95:20:cb:43:19:3f:7d:ca:
                    44:b0:cf:80:79:fa:15:b8:79:ef:1b:d7:e6:5b:e2:
                    bb:cf:d7:7a:34:35:f6:11:91:8e:0a:ec:d5:71:de:
                    8f:90:ef:e6:6d:4f:58:25:03:be:84:38:6a:24:f6:
                    c9:5d:b0:c1:94:88:80:71:8d:42:18:4b:34:e8:02:
                    5a:1b:7e:b3:78:ef:7d:95:94:df:e2:db:d7:26:1c:
                    d6:15:96:74:5a:32:4f:17:73:15:f7:34:a3:37:4a:
                    ab:b0:7a:d0:07:1d:fd:0e:ad:c0:28:cf:c4:45:c2:
                    40:75:30:b1:19:c4:e3:a5:46:98:b6:45:52:94:6c:
                    9f:5a:bf:41:1a:06:57:e1:57:df:04:b6:79:23:72:
                    f0:e3:6f:34:16:da:ac:e9:61:8d:34:fd:6b:90:0f:
                    55:4c:d0:90:ac:5e:53:22:26:59:a4:96:81:f6:17:
                    e6:1d:54:22:9b:bc:ce:44:d4:ad:96:19:0d:e7:3e:
                    83:8a:91:1a:3b:fd:b8:6a:91:ba:62:7a:49:6b:0c:
                    c9:2d:47:41:69:d4:85:2c:33:49:4f:0f:29:83:f2:
                    93:5a:42:5e:c5:8f:ea:e1:0a:8a:ba:75:8c:da:4e:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E2:AD:A8:0A:37:A9:52:9D:C7:E0:2C:6C:61:EC:FA:4F:98:C5:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb86dfd-36eb-39c6-92f3-5dd890c6ab0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:0d:fb:a7:0b:d2:05:e8:0c:ac:a6:2f:fe:c3:bd:0b:53:
         48:53:fd:d9:f6:69:93:b6:1c:9d:f9:4b:7b:5e:79:57:f7:f2:
         34:db:b2:a0:65:8b:87:52:e7:db:f0:66:0d:57:2c:53:aa:5e:
         6d:d5:32:ed:b8:ce:47:bb:27:50:79:2c:60:ba:b7:8b:9f:7b:
         14:ba:5c:0f:ec:17:d8:d4:d5:33:97:00:80:e7:06:9a:d3:d4:
         c2:83:37:7b:3c:6b:10:83:3e:19:b1:3f:4f:4e:5b:db:f4:f6:
         e9:d5:ff:5f:57:40:2b:5e:d8:5a:14:33:66:ce:03:69:6f:cc:
         c7:04:53:d0:a0:5c:d5:90:08:02:37:e4:c5:89:82:d1:11:7a:
         3a:0b:7e:72:d5:4b:f3:96:6a:9b:32:57:b1:0f:e3:56:fd:b5:
         f8:af:7f:bf:c2:80:eb:d1:a0:44:ae:b9:28:50:50:ef:e8:d9:
         18:9c:a4:65:7b:e0:cb:0a:6c:9d:a2:47:20:7d:0d:26:06:14:
         54:d7:35:38:a9:58:6e:46:9c:58:31:6e:73:f8:67:8a:d8:7e:
         4c:1e:71:22:ea:51:28:0a:94:2a:7c:06:9d:5a:3e:59:b2:fc:
         1e:76:4b:93:ec:ff:19:7a:68:d7:0a:a7:bd:96:c0:ef:f9:9a:
         d6:5b:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:44:49 2024 by rpki-client on console-fra.rpki-client.org