Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c92674-f2a2-368d-8a5a-ecf0bf4f24c8.roa
File:                     e0c92674-f2a2-368d-8a5a-ecf0bf4f24c8.roa (raw, json)
Hash identifier:          qbHzVzcQ7Lc1Q+vah/vaUm+hhRrP5OjJQplyI+5jsbc=
Subject key identifier:   BD:90:BC:EB:E3:F4:58:96:E4:91:80:A5:2E:B1:38:76:CF:F5:05:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC893B22F555E129AB342500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c92674-f2a2-368d-8a5a-ecf0bf4f24c8.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        68.81.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:3b:22:f5:55:e1:29:ab:34:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=f4383938-09d4-497c-8bb4-ddb086ec8afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:f4:1e:2d:89:02:f2:a2:d6:e5:a3:24:0d:
                    bd:03:c4:1a:f3:c0:64:a1:6a:92:47:18:1e:70:8a:
                    9f:d7:dc:91:a8:95:52:c2:cf:0b:e1:8a:f3:7f:e4:
                    0e:a5:26:14:78:73:25:55:32:ef:a9:1c:0f:83:81:
                    b1:07:39:6a:c9:ae:9b:36:e6:51:a5:d6:30:d5:27:
                    a6:80:f3:15:82:fa:6e:11:33:61:11:22:cb:81:49:
                    95:03:18:4c:8d:46:ec:02:04:79:51:3d:cb:f4:05:
                    b1:26:03:fc:2b:a2:3a:59:b9:48:de:b5:ef:b9:92:
                    52:87:94:ee:dc:f1:10:17:4f:d1:1c:26:1c:5d:a4:
                    d2:db:de:3c:b6:67:f9:88:4b:b7:d8:bc:2d:44:70:
                    04:99:c7:27:bc:9f:29:25:1d:0d:13:fe:85:2d:fa:
                    04:3d:1e:c7:3a:fd:c5:56:b9:95:38:bc:9c:f7:ec:
                    5e:d8:80:83:ae:54:c6:7f:36:53:8e:c7:28:f9:c5:
                    bb:6f:6b:8b:a1:8d:78:50:48:0b:cc:4d:a0:27:ab:
                    59:c1:b6:9d:ed:1b:c4:30:38:2c:1c:65:98:c6:82:
                    b5:ff:3d:45:8a:86:2a:36:4d:37:0a:3f:99:eb:4b:
                    a2:3c:0f:21:48:5f:ad:75:4f:37:8a:ed:64:70:2a:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:90:BC:EB:E3:F4:58:96:E4:91:80:A5:2E:B1:38:76:CF:F5:05:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c92674-f2a2-368d-8a5a-ecf0bf4f24c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.81.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:ba:35:c0:aa:68:c6:0d:6d:1d:b9:fe:a1:13:92:ef:ba:
         ce:be:a3:d9:6d:7b:8d:88:c4:7b:c2:8e:ad:6f:8b:00:d4:fe:
         26:6c:81:d0:62:1c:47:31:2e:58:88:18:60:38:19:20:f7:9c:
         6e:7b:61:9a:52:32:58:82:a2:34:a9:c0:8a:72:82:c3:a2:4f:
         ac:1a:1c:ec:d7:8d:6f:0c:d4:a1:46:ea:b8:e6:9a:16:29:2f:
         20:44:47:fe:41:d2:55:fb:6a:e9:b9:05:3b:73:88:c8:65:a0:
         f6:a3:5f:8d:c4:83:5b:13:76:17:a6:d1:58:3a:9e:2b:67:a6:
         12:16:d3:3a:0d:57:86:c9:a4:69:87:71:f9:c9:fc:93:b5:27:
         22:9a:cf:03:c0:c1:4e:8a:1c:72:89:ce:98:ac:dd:2f:c4:41:
         b7:e4:32:56:68:cb:b3:76:19:04:35:09:fc:35:e3:ba:8d:2d:
         4c:e1:95:ed:51:00:f8:2f:57:be:6d:38:4d:92:de:c0:b8:d3:
         d8:a3:da:68:ba:a2:34:68:bd:66:c5:0f:bf:8c:87:48:5c:34:
         51:9e:38:91:07:71:37:57:c9:64:13:94:6d:fa:d4:27:88:1e:
         63:62:89:c4:6a:2d:ee:aa:9d:33:5f:80:17:6b:28:f0:43:2c:
         36:3d:c1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:23:08 2024 by rpki-client on console-ams.rpki-client.org