Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e41a9ac9-663d-3c86-ba39-e97b5dc4ca10.roa
File:                     e41a9ac9-663d-3c86-ba39-e97b5dc4ca10.roa (raw, json)
Hash identifier:          Gf6tnzRv33OoNWZaS8xphg4KH0xYnc53vgZhdEDhGUE=
Subject key identifier:   CE:78:59:F7:B6:A7:F4:01:59:44:C2:F0:25:14:95:64:1A:32:A4:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FACC1443CE6A8E95DD729C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e41a9ac9-663d-3c86-ba39-e97b5dc4ca10.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        76.18.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:c1:44:3c:e6:a8:e9:5d:d7:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=8620a60a-bef2-49a5-9c5b-c496e24811f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:66:bb:1a:78:e3:45:03:48:af:f2:2e:09:
                    76:fd:f9:a6:9f:68:60:65:a5:94:9e:61:be:27:54:
                    86:f4:47:91:5e:29:b2:71:8c:bc:11:53:a9:83:09:
                    7b:51:05:df:c0:39:b1:1b:fe:d1:0a:d2:71:79:f5:
                    2f:a8:97:a2:49:37:65:0e:b6:d2:5b:0e:5f:fd:7e:
                    05:f9:26:5a:f9:90:c7:a7:09:91:fa:8b:19:1e:ef:
                    5f:46:da:15:7c:91:a9:46:cb:6b:7b:ff:32:f2:17:
                    3b:e9:5a:8f:7b:bd:d7:64:30:b0:f8:8c:9a:58:33:
                    c6:7f:61:89:2b:04:22:1b:4a:b3:4c:bf:62:20:00:
                    1e:ed:91:fb:b0:fb:98:b2:17:cd:1b:97:69:72:b1:
                    64:f8:66:f6:e1:00:bf:99:1f:e3:f1:a6:68:8a:0d:
                    29:15:1e:d9:43:8d:28:5c:ef:54:9c:38:e2:e1:8e:
                    29:8d:32:2c:10:34:5b:63:09:55:8c:c1:fa:9b:6b:
                    e6:ff:3d:53:66:ab:34:ed:c4:46:ed:15:d2:d0:0c:
                    30:60:33:12:f6:49:d1:31:f9:1c:56:2c:c9:2a:2b:
                    3d:d3:e7:e9:2b:be:9f:52:ae:55:0b:27:68:70:26:
                    46:2b:cf:74:c0:5e:33:4a:31:ed:a0:30:bc:e0:14:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:78:59:F7:B6:A7:F4:01:59:44:C2:F0:25:14:95:64:1A:32:A4:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e41a9ac9-663d-3c86-ba39-e97b5dc4ca10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.18.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ae:60:2e:d7:e2:7b:e5:1b:8b:f1:19:cd:34:cf:78:6d:ba:
         24:db:8d:29:1a:2f:20:ec:61:95:96:d3:2c:69:14:cd:d5:f5:
         6d:a8:2a:15:53:7a:d9:ee:8b:83:f0:a5:78:02:55:4d:61:ed:
         c6:ea:17:36:3d:0c:d4:ae:bf:66:a2:82:72:09:06:87:b7:bf:
         19:44:e7:86:16:06:5d:4a:f0:69:fc:5a:07:c3:b9:12:25:dc:
         90:cb:5c:3a:4a:02:b1:22:ab:50:91:45:c1:fb:b2:46:02:68:
         9c:b3:f2:7d:0c:57:b9:7e:cb:54:14:64:1b:cb:5e:d5:ea:14:
         c0:7c:f7:7f:65:1a:89:7c:65:9e:f4:5c:86:8e:8b:7c:a9:fb:
         1e:78:35:27:57:51:07:02:18:29:96:43:15:93:05:d4:d9:a0:
         17:af:db:c0:fe:1f:02:4d:73:c1:08:4b:a2:4a:45:e0:81:f6:
         3b:2b:1e:90:b3:1b:46:95:30:88:90:7f:83:d0:62:aa:de:86:
         3f:60:a6:b9:8d:e6:d6:52:3b:36:aa:c9:c9:78:49:5d:6e:3e:
         9e:31:4b:87:28:c0:a3:80:fc:d5:2f:3d:9e:69:30:8a:a4:fe:
         02:3c:2c:98:11:d3:3d:70:26:85:5a:6b:af:93:4c:8d:58:f0:
         8b:be:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:50 2024 by rpki-client on console-fra.rpki-client.org