Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce3653e-e9af-3908-bcfc-7b3590db0de4.roa
File:                     dce3653e-e9af-3908-bcfc-7b3590db0de4.roa (raw, json)
Hash identifier:          kZavP45Oc3DUc3LCEZI/SkoCngbAPNwVPTkeA5IWQ8o=
Subject key identifier:   09:DF:8F:19:08:6B:C0:87:4A:0C:12:F0:16:06:5A:81:EE:B3:1B:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB6A7DC7A354B97C022900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce3653e-e9af-3908-bcfc-7b3590db0de4.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     21508
IP address blocks:        76.120.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:6a:7d:c7:a3:54:b9:7c:02:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=a2a8b1bd-b84f-4f3f-8079-78a2493d0929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:64:c4:07:e5:1a:ec:3f:24:a1:fd:61:ad:
                    da:bb:e3:72:9d:7a:35:e1:36:41:fe:23:77:cb:5d:
                    f1:1a:e3:1b:36:bf:0e:f6:cf:dd:6e:bc:bc:8e:35:
                    6f:89:3a:2e:83:69:e1:bf:68:71:35:7a:a0:81:ac:
                    74:83:87:a9:9d:0e:48:84:d2:64:da:29:3a:f0:54:
                    d7:1c:69:ce:22:9e:58:ce:38:71:ec:01:f8:8c:71:
                    77:53:3a:e2:03:1c:9f:42:6d:e9:72:5d:51:1f:3f:
                    12:b6:ef:72:3b:cc:df:82:2a:1f:f3:2b:14:1f:bc:
                    7e:b1:30:68:b2:b1:9d:e5:f9:e4:a8:b5:01:70:95:
                    06:d8:92:74:56:cb:60:49:3f:7d:60:51:22:11:33:
                    a6:ff:17:bb:e8:25:7c:36:39:10:43:d5:2d:0b:fd:
                    e3:52:81:5c:91:23:16:52:51:55:80:9d:66:97:b8:
                    a5:00:3c:fa:42:ed:a9:05:1f:7c:7a:cb:28:b1:94:
                    db:fd:b1:ab:50:9d:75:eb:59:a9:42:be:3d:23:80:
                    59:a1:76:2a:46:c1:7b:e2:da:85:3a:00:a8:15:93:
                    cd:a7:8f:dc:f0:a7:7d:96:a7:af:91:f3:f7:b0:cb:
                    53:09:14:7b:48:7a:37:ac:a6:49:11:1f:4a:30:de:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:8F:19:08:6B:C0:87:4A:0C:12:F0:16:06:5A:81:EE:B3:1B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce3653e-e9af-3908-bcfc-7b3590db0de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.120.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:65:cb:f3:54:74:1a:82:ae:3c:c2:3b:5a:73:e2:c6:af:
         6c:69:6c:a9:7a:7a:75:a2:ed:12:33:8e:1d:85:1f:a4:25:bc:
         58:53:09:24:cc:99:43:7e:6f:38:f2:e6:cf:87:cf:17:bf:89:
         32:ae:04:85:6c:9a:6b:e8:b7:d1:65:8a:9e:ac:f0:5d:c2:3a:
         92:e2:40:49:64:1c:15:e7:48:bf:79:61:26:12:46:2f:1a:ce:
         ec:5a:35:e1:a0:d0:2a:b0:b4:fa:22:9c:3b:30:89:08:16:c0:
         50:86:ec:b1:02:7b:45:97:c7:35:11:9d:c9:fb:67:88:9f:ad:
         21:04:12:61:cd:c8:18:23:d1:d9:b8:3c:3b:b6:8b:49:16:33:
         a4:57:85:2e:5d:6a:f4:91:ca:ca:e2:0e:9f:87:ed:01:c8:7c:
         62:5f:03:f0:b9:bd:1c:79:23:8a:6e:20:f7:9d:f4:59:1b:7e:
         2c:ee:c3:63:2f:ec:4e:84:9e:4c:d8:c5:35:7b:0a:0b:ca:ea:
         b8:82:e4:f2:16:ea:63:cf:39:21:c7:1f:38:dc:16:e8:cc:13:
         6b:b1:ac:72:25:7d:82:15:5d:10:ad:05:2b:1e:de:bf:0e:48:
         14:c1:9b:dd:f6:36:a1:e5:67:62:49:ea:1d:b9:4b:10:33:6f:
         9c:ab:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:24 2024 by rpki-client on console-fra.rpki-client.org