Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d093a424-0d1b-3e1c-ac74-da1175f93286.roa
File:                     d093a424-0d1b-3e1c-ac74-da1175f93286.roa (raw, json)
Hash identifier:          riUEGsYriJzPuxYIaw8BYuAbFG9UXmfqewclJqlUQE8=
Subject key identifier:   D9:27:D2:62:D8:F3:73:07:C4:40:06:2D:0E:AC:B2:89:61:07:9F:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89814E01ACAC65FF7C9D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d093a424-0d1b-3e1c-ac74-da1175f93286.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        76.23.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:81:4e:01:ac:ac:65:ff:7c:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=621fb3f7-209a-4dce-bf38-65347ab4c4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:fe:13:3a:19:60:f5:f6:90:57:29:43:03:
                    c2:4d:55:db:69:3e:23:07:64:68:30:46:ab:ce:69:
                    52:c1:82:7d:bf:86:1f:5b:45:50:90:51:92:7b:7f:
                    92:c8:a9:b4:fd:5a:a5:28:1c:4d:99:4f:3a:21:72:
                    5b:99:04:b1:63:18:85:9e:35:fa:29:18:62:fd:41:
                    de:73:02:a6:d6:36:8d:f5:6c:c0:89:24:b7:94:c0:
                    3a:5b:df:ff:31:86:74:84:57:48:09:26:b4:3f:ad:
                    79:c9:e2:9f:ed:57:38:9f:76:c0:f2:0b:5a:47:20:
                    dc:85:25:7e:df:1d:02:18:98:12:d5:38:cd:e8:e1:
                    7d:61:dc:2e:45:74:0d:49:4d:fa:ad:36:e9:c1:f5:
                    12:d7:e4:19:e5:e1:c4:e2:63:c1:49:9f:cd:d8:b8:
                    c0:80:bd:ef:92:ce:9c:2c:ed:c6:67:90:69:59:8a:
                    2b:0d:0d:57:7a:87:bc:59:ba:1f:dc:19:88:34:9f:
                    86:c2:bc:24:29:cd:4a:32:1d:74:25:1b:d9:95:12:
                    bc:ad:f5:81:31:97:34:42:cc:f7:d6:07:3d:25:9b:
                    13:ad:bd:6a:c5:69:95:16:ea:94:e5:8f:97:55:12:
                    df:dd:e0:79:7d:4c:8e:41:d3:50:f8:48:95:fa:a9:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:27:D2:62:D8:F3:73:07:C4:40:06:2D:0E:AC:B2:89:61:07:9F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d093a424-0d1b-3e1c-ac74-da1175f93286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:e6:ef:4f:0c:48:28:bb:18:81:a4:86:46:e5:d4:f4:91:
         e2:7a:cc:80:41:15:13:03:a9:14:45:e9:a0:74:1b:47:2c:78:
         7b:c8:ec:9b:87:49:fe:b2:18:e4:a5:6c:97:73:f3:1f:7c:95:
         2c:0e:08:cf:7a:36:50:61:f7:fe:79:5b:06:4e:d3:36:e7:80:
         8d:9d:9b:8c:0b:1d:a7:4e:4e:ad:5a:78:e0:8f:31:bb:8e:06:
         b0:48:e2:db:41:aa:84:96:c0:96:98:fd:f8:2d:53:d3:ad:36:
         19:aa:14:0a:cd:ab:64:4f:a2:a1:1d:92:57:03:f3:95:04:ef:
         13:d3:de:a0:bb:e3:27:69:e4:78:34:7c:b0:56:4c:d3:e0:74:
         c6:8e:2a:34:7a:dc:25:ad:35:86:73:2a:04:97:7f:b0:e7:17:
         19:cd:11:50:08:30:06:d7:dd:7b:cb:84:09:ff:cd:5d:93:d8:
         95:c3:4f:7d:da:c8:87:1c:3e:a7:73:36:a5:7b:ac:17:d3:d6:
         c2:1e:ec:1e:be:85:aa:25:82:c7:21:8b:14:14:76:79:6f:1d:
         25:59:68:52:20:68:fc:a0:07:0d:8f:1a:a7:3b:22:0f:a0:dc:
         73:0d:0e:bf:8b:c2:e3:88:05:68:5f:bf:f4:70:6b:d0:a1:ab:
         52:29:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:22:26 2024 by rpki-client on console-ams.rpki-client.org