Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de7edc78-8afd-3d88-b58e-3fe7af7c7151.roa
File:                     de7edc78-8afd-3d88-b58e-3fe7af7c7151.roa (raw, json)
Hash identifier:          rAfDu0Yi2DLAWR+KJh0Tbk9dgQGlWwvF0bOTbMoep8k=
Subject key identifier:   94:00:29:9A:83:3B:3F:3C:F4:F1:96:8E:C9:46:A8:CE:A5:7B:B8:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88FA8CD7CB0FDF8381FE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de7edc78-8afd-3d88-b58e-3fe7af7c7151.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        69.248.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:fa:8c:d7:cb:0f:df:83:81:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=524e861f-627a-4dc4-8439-5ae1166fd5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:92:5e:5d:86:30:27:91:cd:8b:a1:f9:69:
                    6c:7b:7e:52:20:ae:1a:b2:da:88:b0:5e:1a:b2:4a:
                    77:33:ee:89:1d:85:5b:2b:58:87:c6:f1:0a:ce:0c:
                    8f:e4:97:5a:b8:c9:05:40:c0:df:19:3a:e2:af:3a:
                    5c:63:d5:e1:4f:32:50:80:a4:b7:57:2e:52:3e:e0:
                    3d:68:78:da:b3:2c:8d:04:e4:d2:9d:93:16:c4:42:
                    92:78:20:ca:ba:de:5c:91:09:fb:1a:1b:84:c3:a5:
                    40:7e:64:f2:c9:b0:2f:48:ed:c6:8d:ac:91:bb:b9:
                    ab:57:8f:dc:7c:2e:56:0c:1e:42:7f:dc:b4:f2:b0:
                    3f:96:ba:e2:e7:2a:d9:2c:8f:f7:42:3b:dc:d2:cb:
                    9c:59:1f:de:45:f1:8c:be:26:40:b1:28:be:a3:00:
                    43:f8:86:9b:95:6b:f3:97:13:44:3e:1e:8c:5c:8c:
                    80:2d:c7:8c:f1:53:95:82:c5:5a:6e:cd:68:21:15:
                    78:ab:9e:cb:f4:db:62:3e:1a:9b:cf:ce:b5:73:da:
                    f3:b9:8f:7b:a2:94:22:5f:6e:da:01:ce:0d:ea:1a:
                    1e:35:c2:ce:88:3f:54:5e:64:4c:e8:c5:1d:24:61:
                    e1:50:37:50:29:3e:5c:ee:b8:f6:1b:1b:79:07:a6:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:00:29:9A:83:3B:3F:3C:F4:F1:96:8E:C9:46:A8:CE:A5:7B:B8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de7edc78-8afd-3d88-b58e-3fe7af7c7151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.248.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:60:68:ac:7a:c6:4a:4d:df:90:23:07:1d:76:06:23:24:6d:
         1d:54:40:bc:1b:1d:79:e4:f4:07:3a:76:17:7b:ab:bc:e1:0c:
         6c:6a:3c:7a:d6:af:12:21:44:06:1a:c2:df:cc:3b:bc:57:c1:
         00:6c:e4:e8:d1:9a:c4:7d:48:f1:bb:d2:1f:1e:26:5b:ff:e9:
         c6:76:8a:cf:54:d6:2f:f8:95:69:b3:07:c8:c8:92:9a:d0:32:
         87:38:1c:22:99:04:bd:c3:07:1c:4c:b1:30:de:c1:b0:71:e1:
         03:9b:09:d8:c0:07:a5:88:d9:33:0d:9c:6b:17:e0:a0:36:18:
         35:a1:64:85:a9:23:7d:1c:39:32:c4:99:ee:f7:06:f6:89:02:
         20:23:9a:ee:cf:ed:cb:fd:c6:44:e6:ad:8e:ea:50:77:75:64:
         c8:da:65:c5:fa:83:cf:58:c4:52:4e:22:f8:74:80:8a:06:34:
         14:0f:19:e4:a2:a2:49:73:7e:ca:63:22:17:10:41:4d:f3:cd:
         04:b8:41:a4:df:a5:f5:43:30:bd:27:bb:91:8c:18:b2:5e:64:
         8f:68:65:07:33:77:31:c8:2b:7b:51:35:f1:7c:c5:b5:9a:da:
         e7:53:bf:5e:b1:73:7b:9a:b3:77:88:ab:4e:aa:13:6d:8e:3d:
         38:11:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:29 2024 by rpki-client on console-fra.rpki-client.org