Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b264e826-f455-3a7a-aefc-93a9d2fdac0c.roa
File:                     b264e826-f455-3a7a-aefc-93a9d2fdac0c.roa (raw, json)
Hash identifier:          VZ5v55+QEDIJZH4xXeLj+Vbmh947RTLSJT+7BcwyBiY=
Subject key identifier:   7D:8F:33:27:CF:C6:D5:F6:84:1A:29:FB:0E:FA:C8:66:EC:4E:FB:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88EB69EBAD85EC2CE74740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b264e826-f455-3a7a-aefc-93a9d2fdac0c.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        76.149.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:eb:69:eb:ad:85:ec:2c:e7:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=164b2ee1-d97f-4f91-a977-d49f028a98eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:f5:90:9e:13:ea:54:01:14:53:2d:2e:50:
                    20:1a:b0:d2:0f:b1:05:b8:1d:3c:70:a4:10:d2:c6:
                    fa:94:12:67:0d:90:6f:01:b7:42:6f:03:bd:d2:aa:
                    00:2f:7d:72:34:b5:ed:07:e3:86:77:25:83:d4:70:
                    66:a6:04:0c:0c:73:21:9a:c8:11:b6:a6:1d:51:60:
                    c6:07:e9:0e:d9:b0:df:89:34:50:e2:9c:10:1b:fb:
                    0c:19:56:09:68:6b:5a:60:de:58:69:17:16:c3:2e:
                    f4:a5:41:c5:da:87:09:7d:4b:97:f2:5e:ee:73:2a:
                    12:10:52:3b:92:8a:d2:b5:c8:ee:87:a9:2f:d9:29:
                    54:ce:ff:66:de:56:d9:f7:ed:07:22:7b:a2:8d:6a:
                    fb:ec:4e:28:f9:e1:61:5d:50:c1:14:ab:7f:b0:e5:
                    d2:da:60:03:b5:3c:b1:8e:80:11:6c:e7:a7:19:dc:
                    c9:48:79:63:b2:49:7e:e4:78:1a:67:7a:f3:6b:cb:
                    24:12:c8:98:3a:d8:c4:3d:04:94:8b:a1:76:06:be:
                    9d:2d:54:9f:6a:47:cf:67:ee:9c:b6:16:7b:48:4a:
                    44:57:a5:6c:24:98:ab:de:fb:f8:18:82:73:0c:43:
                    11:a4:1b:ac:45:9b:ba:b6:a6:bc:cd:b2:17:a4:9f:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8F:33:27:CF:C6:D5:F6:84:1A:29:FB:0E:FA:C8:66:EC:4E:FB:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b264e826-f455-3a7a-aefc-93a9d2fdac0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:23:bf:f8:b5:27:19:e4:83:6e:a9:b1:8a:d5:93:26:1c:
         51:da:25:a3:ad:2e:e2:4e:76:50:ba:ba:0d:3c:be:dd:9c:8e:
         b9:09:f5:e0:32:05:1a:ea:d0:68:13:0a:fa:aa:4d:30:53:51:
         ee:a9:c1:4c:12:d7:f8:18:5e:83:be:70:02:d7:38:c9:6a:14:
         a3:fa:e4:fe:fa:56:a9:5d:69:00:0f:d5:8b:55:1b:3f:7c:aa:
         ea:07:3f:49:c8:dc:68:50:31:5a:f3:d4:67:ac:b6:11:19:90:
         f9:8f:8e:35:92:65:99:20:72:b4:54:18:d6:8a:37:7c:d0:de:
         e5:67:33:39:98:e4:cf:99:08:1e:1b:d3:d9:1b:3b:f7:ff:24:
         2e:ec:3e:16:f3:ea:43:59:90:af:ed:f3:34:94:df:f6:b9:ec:
         5d:6f:82:ea:22:7d:91:3d:df:8c:b1:93:9e:3b:07:3c:5f:c5:
         55:ca:b4:52:4b:b4:16:b2:f1:49:47:da:ed:9d:08:9a:14:3b:
         f1:c0:85:1d:61:50:8b:f3:ec:34:3e:1f:2c:1a:a8:4c:0f:72:
         70:73:74:bc:29:48:2e:2b:9b:46:bf:0b:9a:d5:da:5d:0e:fb:
         c2:8e:20:3f:27:56:d7:32:8b:1c:10:3c:69:7e:23:31:e3:c3:
         10:ab:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:54:44 2024 by rpki-client on console-fra.rpki-client.org