Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0abfbd1-814e-3d12-a5c2-c0e023ab78df.roa
File:                     e0abfbd1-814e-3d12-a5c2-c0e023ab78df.roa (raw, json)
Hash identifier:          vCOlO9nvyWP0HmPmMpGyTfPFqYAEucNW2xEfqB5o7Sw=
Subject key identifier:   CB:EB:38:8E:43:50:65:5E:F8:37:3A:A7:EE:7A:CE:F1:3D:D3:1B:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89D0A5FA820F7323244520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0abfbd1-814e-3d12-a5c2-c0e023ab78df.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        68.80.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:d0:a5:fa:82:0f:73:23:24:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=b8bb230d-544a-4bf5-a254-a539015fdb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:1c:54:99:f6:df:65:eb:ab:5a:35:c6:ec:
                    b5:24:f3:9f:7e:a3:1c:55:23:36:7e:fb:d7:9a:a4:
                    83:ea:ab:cd:e8:87:e2:f7:14:c5:84:e2:dc:9f:7b:
                    2c:bf:d1:cc:8c:e1:cb:f9:a9:16:f7:e7:bc:64:b3:
                    cc:f8:99:41:6e:5b:07:af:f9:5f:f5:ee:41:25:c5:
                    ca:33:df:8a:0d:72:7b:9e:bb:11:3b:0e:bb:76:6f:
                    3f:8d:be:4f:5f:19:2c:e1:f7:c5:76:70:ae:54:19:
                    cf:42:10:5a:78:fc:fb:70:8d:7f:5b:5e:fe:bd:7c:
                    39:16:b8:8e:34:af:27:16:85:75:ca:ce:96:68:d2:
                    da:cd:20:ec:8b:2f:bd:10:bb:d5:d6:63:ed:40:b2:
                    2c:43:6b:6c:94:5a:ae:4c:f1:ef:7d:ec:1d:6c:27:
                    6e:31:2e:b2:e1:5f:d4:fd:b4:bc:24:c5:cd:3d:84:
                    0d:c5:79:ef:97:31:4e:7f:18:32:10:99:d8:dd:eb:
                    c9:17:6a:97:56:0e:b3:30:f3:bb:f6:15:bb:e8:34:
                    97:e4:77:de:f9:df:23:19:52:1a:17:74:2e:14:71:
                    4a:ac:3e:ad:97:92:1d:42:21:bb:01:32:08:7b:a3:
                    d3:fb:69:ea:a4:ee:09:a2:05:09:51:45:dd:b0:48:
                    0c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EB:38:8E:43:50:65:5E:F8:37:3A:A7:EE:7A:CE:F1:3D:D3:1B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0abfbd1-814e-3d12-a5c2-c0e023ab78df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.80.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:ba:72:5d:64:4f:9d:5c:2f:46:58:25:a6:fe:c4:80:d3:
         fa:d9:e3:b4:89:88:00:92:29:81:67:c5:a2:3b:ed:1a:f7:36:
         77:b2:6d:46:f6:d4:ee:28:eb:11:f0:5b:2f:4d:1d:9e:ea:d4:
         fa:f0:c7:5f:1f:88:da:b8:6c:ab:70:a2:41:34:44:dd:2c:e9:
         b5:8e:2f:46:51:1d:11:a0:ae:30:c0:54:10:e4:32:66:9f:b2:
         06:34:09:4f:a9:9d:2e:6c:3b:f1:2d:82:e1:a6:37:f0:52:40:
         34:14:49:4c:34:fa:15:09:ac:e0:c4:8b:f8:a7:81:a3:3e:d0:
         d0:85:c6:1a:1f:a8:31:4c:e6:95:d0:8b:06:da:f0:ea:d8:f1:
         55:21:be:7a:80:ca:f4:ba:c5:72:fa:89:ef:49:56:ff:de:7a:
         46:27:ad:4d:16:e3:3f:e2:a2:3b:3e:f2:f2:63:fb:69:34:e6:
         24:4e:7c:d7:e5:3a:fb:cd:c0:06:76:10:8d:99:e5:fc:70:a3:
         37:5a:0c:70:c7:4c:ca:f0:2c:f2:29:2a:c3:fe:3d:64:76:3a:
         1c:b4:0b:d3:bc:e9:d1:be:c8:5e:3d:63:ca:92:bd:28:01:24:
         79:31:ab:50:9f:02:ae:ef:2e:75:d6:1b:c4:14:b9:1e:8b:53:
         a8:e3:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:48:02 2024 by rpki-client on console-fra.rpki-client.org