Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee0f63b2-10e4-3025-ab0c-dfa0217e65e5.roa
File:                     ee0f63b2-10e4-3025-ab0c-dfa0217e65e5.roa (raw, json)
Hash identifier:          INAZ6VGCkZZp5b+YpYsQLDOGeBCToOmS8gKzo4DpomE=
Subject key identifier:   90:55:BD:3C:6F:0F:57:DA:12:D4:5F:85:B8:5C:E5:26:E5:A0:3B:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC11A25D834F30A3885040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee0f63b2-10e4-3025-ab0c-dfa0217e65e5.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        74.94.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:11:a2:5d:83:4f:30:a3:88:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=2f6d1269-8f93-43e4-8e5d-98c4b7cb0a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:1f:d1:f9:59:be:f7:9a:e1:2b:42:50:53:
                    89:f6:7c:94:5d:14:d1:61:24:56:40:d8:cf:35:cd:
                    f9:78:6d:b6:84:f1:6f:fb:db:74:4c:74:8d:c2:c0:
                    72:0f:4c:d3:49:f6:35:74:ab:5a:b4:84:4d:e6:2d:
                    a3:03:90:2a:3c:18:75:20:43:2d:33:1e:9b:47:af:
                    25:34:06:3c:a7:26:2b:f9:1d:19:9f:10:49:e2:b9:
                    5b:40:fc:19:df:23:d5:be:c3:61:8e:5e:91:f0:36:
                    57:7e:80:be:93:2c:2a:00:e7:7b:78:36:0a:e0:04:
                    7e:c8:8f:17:1d:bf:1d:05:ca:a2:91:d0:f9:d0:28:
                    d3:35:f9:cd:a2:65:22:c4:40:98:c1:a2:8f:38:8b:
                    d9:95:9c:ee:ca:cb:0e:b1:e9:59:ee:f4:1c:d1:46:
                    1d:9f:29:c4:7c:d1:fb:27:ad:61:32:f9:d0:f7:55:
                    8a:4f:67:03:96:23:01:08:19:22:6c:fa:ef:41:8c:
                    0c:38:51:f6:82:0a:8f:cb:87:44:b0:f7:34:5a:1a:
                    c2:bc:bd:ba:25:50:a5:6a:17:ff:d0:ab:a7:5d:2a:
                    98:2e:eb:b5:1b:f8:85:e2:e0:5b:15:a9:cd:c7:53:
                    e3:dd:15:8b:bd:fb:9a:74:c6:5e:22:a5:38:cc:41:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:55:BD:3C:6F:0F:57:DA:12:D4:5F:85:B8:5C:E5:26:E5:A0:3B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee0f63b2-10e4-3025-ab0c-dfa0217e65e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.94.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:4c:7a:bd:e5:e8:65:1e:04:d4:5d:3d:ee:0c:56:47:2c:
         09:eb:56:de:a0:29:f2:ea:64:51:0b:03:ef:61:23:f9:e4:4e:
         dc:fc:5d:69:6d:a7:6e:a4:49:e4:a6:41:c3:66:2d:55:d8:49:
         3d:3d:6b:5f:88:7d:9f:05:ba:de:ac:e7:5d:04:c2:58:5f:88:
         d2:75:86:4a:5d:cc:0b:6b:83:06:7e:54:84:8c:35:b0:4b:67:
         b4:4b:5b:5e:b2:23:c5:5e:d5:ee:00:25:21:f5:d0:8b:48:7b:
         6e:41:c8:fe:26:5d:be:9a:c4:f0:45:f3:7c:59:b6:9e:b0:7a:
         cb:24:7b:27:34:61:86:8b:05:f0:04:01:4e:a1:3f:4e:04:98:
         40:a9:fc:6d:49:07:4b:2b:c2:45:ae:a0:07:40:9b:c7:18:a8:
         23:28:94:cd:54:ea:b7:49:73:94:b5:2e:f1:9a:0b:f6:20:d9:
         41:a9:67:cc:0e:d7:e1:04:38:3e:ce:6d:29:a0:80:92:ab:f0:
         02:4e:f9:a8:6d:af:2e:eb:e9:b3:49:80:ce:7a:3c:58:ae:e1:
         b2:ac:d3:2d:a2:22:e4:18:a9:4c:60:f4:72:3b:59:af:13:b2:
         b8:c1:92:f7:4b:c0:d9:35:ba:21:9e:ca:9f:b4:b2:5f:ae:bb:
         77:48:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:48:52 2024 by rpki-client on console-fra.rpki-client.org