Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d387ff36-ca86-338d-9e01-4aebb866026c.roa
File:                     d387ff36-ca86-338d-9e01-4aebb866026c.roa (raw, json)
Hash identifier:          EzWmZwdd+vPbirz4w01A6XADVsF/KVFtH+l/AvHN5nA=
Subject key identifier:   D6:CE:BD:BD:7E:17:C6:39:A4:C0:F4:F8:53:A6:61:D2:47:7E:58:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88FA65D7110D08635A1800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d387ff36-ca86-338d-9e01-4aebb866026c.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        69.248.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:fa:65:d7:11:0d:08:63:5a:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=666e4430-d2d3-4957-ad8f-7684aab14bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:57:15:58:d6:f6:3d:59:2b:66:48:01:78:
                    4c:4a:fc:97:a6:2c:69:5e:81:90:ea:53:66:33:49:
                    c0:5a:f8:e4:dd:c3:68:b6:6b:12:4e:8e:10:6e:5c:
                    a7:cb:06:5e:31:e4:3c:65:4f:56:0e:8c:f1:22:4a:
                    14:53:fb:84:bf:77:53:11:23:85:7b:d3:e7:e3:e9:
                    70:53:09:c9:49:62:c2:43:56:a4:fb:5c:52:8b:ce:
                    10:49:fe:7d:92:fb:ff:e9:49:b8:81:93:5a:ab:62:
                    12:6e:46:d4:32:1a:4c:d1:03:8b:4b:d9:16:3c:3e:
                    f0:37:e0:b1:57:7c:a6:94:31:98:d5:fb:4b:a2:a7:
                    22:27:33:a7:fb:eb:9b:b8:4f:31:d6:3b:b6:83:6a:
                    f2:90:a1:a5:f4:cd:a6:1c:c4:cd:09:80:86:14:fa:
                    1d:21:9a:8a:b1:49:48:b8:49:e6:fc:18:23:25:d3:
                    38:cb:15:7b:df:14:99:9e:d3:d6:20:61:7b:3b:ee:
                    d8:96:84:a6:47:59:e4:a6:da:c0:8e:e4:ed:41:4d:
                    e4:85:a0:d7:07:08:26:66:21:b7:55:0f:6c:d2:90:
                    31:79:5b:e4:55:b5:9b:62:d0:9e:df:91:8e:5c:b5:
                    e8:49:ab:9a:66:07:09:9b:aa:96:cf:7e:8a:bf:eb:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CE:BD:BD:7E:17:C6:39:A4:C0:F4:F8:53:A6:61:D2:47:7E:58:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d387ff36-ca86-338d-9e01-4aebb866026c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.248.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b6:e4:4b:ae:60:de:f2:9d:a1:cf:71:e0:02:0a:b0:2f:f2:
         ab:c4:10:97:6b:69:b4:c4:e2:4c:4e:71:bd:e7:d4:c3:96:26:
         3f:7a:45:49:bc:aa:f6:0b:c2:b5:d8:73:bb:25:13:92:64:51:
         6a:39:b4:92:8d:1f:94:f4:b8:e9:ef:3e:86:fc:76:0c:82:77:
         6c:d5:ad:f3:89:89:83:05:d0:35:b4:59:ad:59:d8:48:95:f3:
         2c:d7:a1:dc:2f:7a:17:78:0a:8f:33:f5:2b:1c:73:e5:cd:1e:
         4e:42:96:2f:04:e6:01:47:d4:77:4a:70:e6:ae:f8:73:31:e9:
         cd:fc:00:dd:67:5d:1b:a6:4b:69:58:b4:83:d8:5e:99:e0:8d:
         09:37:5d:38:f8:07:0d:f6:e6:c6:dc:f5:82:97:89:fb:89:13:
         ce:09:c4:c6:e2:1c:38:06:3c:1c:06:c6:50:6e:04:02:36:1f:
         39:a6:f1:f8:65:37:67:bb:16:85:a9:4e:96:08:d0:9d:01:61:
         8f:33:f1:04:5f:6a:6b:6d:2a:9f:e9:d7:0c:1c:e9:b5:4e:fe:
         95:30:57:69:62:98:9f:bb:8a:62:e3:85:6d:1f:8d:8c:49:de:
         ce:2b:c5:3d:41:65:73:e2:b4:ea:9b:1a:2a:ee:87:d6:0e:f8:
         79:2e:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:56:48 2024 by rpki-client on console-fra.rpki-client.org