Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb121673-5ca1-3b1f-a372-9f428e693cf5.roa
File:                     eb121673-5ca1-3b1f-a372-9f428e693cf5.roa (raw, json)
Hash identifier:          hlEeRqA1+CHXnkst0yxUYE5wfx21hs+A89CVg+PHeIc=
Subject key identifier:   19:8F:CC:98:06:46:E4:72:3B:2D:4E:BB:AF:69:04:D4:8A:C9:E2:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABAB5D0F5C3E42E54E17C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb121673-5ca1-3b1f-a372-9f428e693cf5.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33662
IP address blocks:        23.30.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ab:5d:0f:5c:3e:42:e5:4e:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=c1fee497-bb4e-4d55-ba1e-1c8109e92588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:fe:db:4d:57:3e:e5:96:d5:41:38:72:b5:
                    01:25:58:e1:2b:b9:d4:6d:09:7c:57:d5:e5:2e:a8:
                    c6:54:b0:bd:ce:05:7e:7b:7f:c0:a0:9a:68:26:fd:
                    cf:91:f2:e3:87:0f:94:75:c5:73:3d:82:22:31:2b:
                    11:94:91:b0:d3:11:d3:ff:30:90:82:7b:8f:fc:66:
                    78:bc:69:b6:c8:d9:c3:56:c1:6f:38:46:f8:20:25:
                    c4:2c:19:bc:d9:ac:eb:69:53:6e:37:48:d8:4d:6d:
                    3a:9e:3a:cb:2a:e7:8a:a4:b2:6d:36:73:75:6e:42:
                    b8:02:da:fa:3a:28:29:38:6e:d7:57:53:52:48:5f:
                    1c:c3:b4:74:bf:ad:dd:02:72:1e:4f:93:ca:1e:75:
                    0e:68:0f:fb:8c:ab:07:7f:0f:07:88:1d:0a:da:3f:
                    16:f8:41:d7:b2:04:a5:4a:8d:12:67:1f:4b:aa:67:
                    70:2f:05:d6:c8:fb:26:91:52:9d:15:13:78:4c:7f:
                    90:4b:df:8b:f5:f0:11:f0:d7:68:f7:ef:63:ab:5e:
                    71:f8:df:d6:06:1e:58:e2:d0:45:c6:14:c9:8d:7e:
                    25:f7:3e:c4:1c:76:b6:c4:fc:ac:91:e9:8f:13:c0:
                    80:5e:b8:f6:55:79:d2:43:ed:40:ad:58:1f:76:0e:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:CC:98:06:46:E4:72:3B:2D:4E:BB:AF:69:04:D4:8A:C9:E2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb121673-5ca1-3b1f-a372-9f428e693cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.30.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:bd:fc:6c:c0:ba:e4:16:7a:2d:52:ed:b0:6f:28:07:b5:
         3a:c7:c0:c6:4b:18:aa:15:41:36:ba:d9:a0:e6:2c:50:ef:79:
         99:d8:c7:ca:d0:ba:7b:a8:68:e0:3b:46:f6:ba:97:f9:88:0b:
         3d:4e:38:25:72:b1:ef:cc:4c:af:45:bd:45:63:30:96:01:bf:
         92:c7:3b:5b:bd:23:ba:d6:78:eb:46:92:dd:2b:3d:6b:bd:59:
         17:30:61:69:bb:10:9a:26:56:5c:dd:c7:98:e5:8b:8d:40:3f:
         d3:5b:00:52:de:25:87:36:8d:ff:32:b7:9e:36:4e:bb:e1:21:
         6a:e4:ce:d1:f4:af:24:a8:fb:a5:fa:2f:42:fd:9c:a4:25:b8:
         76:ce:7f:8a:f8:88:75:69:20:35:59:12:a8:e8:30:c4:ae:88:
         26:83:1a:81:48:21:4a:49:4a:98:4b:bd:be:19:99:9c:a5:7a:
         b6:28:62:10:81:ae:28:55:3f:c0:56:7f:66:d6:1a:34:54:9f:
         c0:d1:49:b8:7b:70:bd:e2:a1:c3:62:d6:7c:a4:df:3b:23:b6:
         22:1f:5e:2d:b9:60:00:44:be:c4:c1:39:1d:b4:55:0e:1c:cd:
         cb:ce:af:f8:b0:ee:ad:5d:fe:f7:bc:29:9d:35:8a:26:92:63:
         bf:d2:5c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:58:15 2024 by rpki-client on console-fra.rpki-client.org