Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26a0ebb-467c-3c11-8d37-35074db55da8.roa
File:                     e26a0ebb-467c-3c11-8d37-35074db55da8.roa (raw, json)
Hash identifier:          c+HdztFb2SmpDSBPPME4qVNHLEgl6qiQScBMEcZgNsA=
Subject key identifier:   A4:21:D8:51:88:84:F0:20:DA:B3:FF:4C:3A:E9:57:35:12:4D:EB:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FEF3DC2AD2F7A5A0A60C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26a0ebb-467c-3c11-8d37-35074db55da8.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        76.138.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:ef:3d:c2:ad:2f:7a:5a:0a:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=c1a7f5cb-da67-4147-805a-5ad0adb408c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:9a:db:45:48:4f:f7:5c:d3:69:e0:33:5a:
                    18:ef:c2:2c:12:a5:a4:65:6b:69:e8:ba:ca:cc:bf:
                    69:7e:2f:2c:ae:5c:b0:77:b9:31:50:72:d8:3b:51:
                    5d:93:cf:be:9a:e7:0d:9f:2f:3b:62:c9:b4:28:7f:
                    bf:16:65:f5:65:49:ff:14:c4:4c:e7:18:f6:e2:41:
                    9f:71:da:c9:d3:f1:d0:63:39:52:ba:58:d7:31:32:
                    cf:12:09:8c:a9:3e:30:d0:61:bd:11:6a:41:f4:3d:
                    cc:cf:e2:7a:3c:3e:a3:bc:a2:b4:30:1b:6e:1b:9f:
                    51:57:fd:1d:f5:0c:69:29:d6:3a:15:54:87:5b:cd:
                    0a:8a:34:9e:ed:d5:56:84:ff:a8:2e:3b:ac:fd:49:
                    34:30:26:d4:50:da:01:a6:6d:86:ff:4a:24:4d:3c:
                    c6:8c:26:ab:b7:d6:72:82:94:46:5d:b5:39:72:fc:
                    12:ed:b0:b9:d0:2b:6f:db:cb:d4:cb:da:1c:ed:8b:
                    54:0e:6c:7c:96:8a:2d:97:b8:5a:a9:be:6b:70:6c:
                    3f:43:53:95:f9:11:38:cb:d6:50:29:9e:52:83:6e:
                    99:b8:21:93:96:24:a4:8f:a6:83:85:98:bf:86:81:
                    ac:45:48:19:41:22:22:d4:83:61:2a:4f:0f:31:d1:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:21:D8:51:88:84:F0:20:DA:B3:FF:4C:3A:E9:57:35:12:4D:EB:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e26a0ebb-467c-3c11-8d37-35074db55da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:20:2e:7e:04:a4:b2:61:65:73:25:11:f5:e5:0c:d5:4f:
         43:bd:c0:56:4a:81:6c:10:77:25:af:26:93:08:2a:37:d3:62:
         9e:c5:f2:53:6e:5b:9f:56:6c:52:eb:ca:b5:90:dd:0e:3f:2c:
         9f:42:cd:dd:72:dd:2b:5b:36:9d:40:dc:4b:f2:e6:43:d5:08:
         45:80:cf:42:7a:2e:41:2b:26:a9:7d:9e:85:1e:8b:fc:b9:65:
         8f:10:45:d4:32:62:80:3a:0a:44:3a:bc:37:67:3e:06:0d:2c:
         2f:de:10:0e:dd:0b:d4:41:4e:8a:93:df:02:4e:b7:ae:75:11:
         bb:00:36:c5:93:a4:74:2c:72:94:e3:72:0d:77:ad:2b:9c:25:
         d6:0a:e8:4f:73:10:de:0f:76:4c:fd:ec:e1:38:d6:9a:3c:40:
         63:76:e1:35:48:f8:af:8e:ae:55:30:57:a1:6b:30:1f:b8:6a:
         f6:7d:67:c9:18:b2:f9:08:ad:01:3b:d6:0d:04:58:20:2b:4d:
         0e:ec:1e:b9:b2:36:a4:93:bc:0d:40:1f:8f:8c:d0:90:7b:59:
         8a:8a:2f:a1:2b:01:2c:ed:5f:3b:59:a5:17:ee:a6:0d:d4:0c:
         b7:04:cd:73:9e:4c:3c:97:10:6f:d9:a9:94:85:0a:68:dc:ab:
         c3:4b:0f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:35:55 2024 by rpki-client on console-fra.rpki-client.org