Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efdd36bc-ac09-3504-9ad0-47df668f79cf.roa
File:                     efdd36bc-ac09-3504-9ad0-47df668f79cf.roa (raw, json)
Hash identifier:          SR/vEPocUW9UCm76JIMu4mGysIVvHTE7rXjEMC0HBHU=
Subject key identifier:   00:00:79:8A:3D:81:AB:8A:0C:B1:C7:E9:00:1F:5E:41:4C:61:C8:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC7C43E365E0CDCB23F380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efdd36bc-ac09-3504-9ad0-47df668f79cf.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        68.52.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:7c:43:e3:65:e0:cd:cb:23:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e0cf92e5-9c1c-4d96-8756-29848e511c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:4f:ce:33:3d:6a:41:32:11:9d:06:93:f5:
                    40:ef:47:00:d5:90:0f:78:99:d1:70:17:36:09:14:
                    3e:89:77:a2:e6:13:90:58:2f:1f:71:79:10:e4:a3:
                    50:f3:ab:58:fd:ca:cd:e7:86:de:69:7e:87:78:5d:
                    80:e7:10:3f:b7:f1:ce:be:61:37:9c:3b:4f:98:fc:
                    82:ce:c4:27:27:70:c6:50:a4:04:26:e7:23:66:96:
                    84:a4:ae:c0:03:9f:7d:00:24:a4:1b:fa:4e:f7:95:
                    33:a8:29:9c:e8:5f:5c:95:90:70:4c:15:d5:6f:dc:
                    1a:f7:39:42:90:c0:a0:aa:e0:5e:97:f4:30:44:7f:
                    3e:e6:aa:1c:28:34:34:34:e5:f4:ca:85:06:df:25:
                    ef:3b:c9:b1:89:8a:71:be:c0:0e:a0:1f:ec:e0:8c:
                    10:55:35:38:3b:f4:52:f5:01:df:68:1d:39:d6:a8:
                    f1:73:0c:57:dc:36:f4:05:80:01:ca:c1:12:ed:c6:
                    13:42:16:5d:86:b4:09:c9:e6:36:f9:bd:33:9b:c5:
                    71:43:ae:ce:fb:b7:23:e9:09:06:01:29:44:f9:05:
                    0a:99:91:f7:80:49:f0:c0:7b:a4:af:2b:63:53:8f:
                    13:cc:64:42:98:e2:ff:c6:76:f8:f2:9e:61:94:e3:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:00:79:8A:3D:81:AB:8A:0C:B1:C7:E9:00:1F:5E:41:4C:61:C8:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efdd36bc-ac09-3504-9ad0-47df668f79cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3b:03:07:f0:23:ed:b5:25:27:35:6c:fb:6d:ae:cc:4a:52:
         19:71:2a:bd:a4:67:a8:b7:2c:56:51:0a:d6:25:b5:a5:bc:a6:
         eb:a1:ae:25:d1:f7:d4:27:c6:9a:e5:3b:c4:93:bc:39:fc:dd:
         24:a5:d6:4e:02:e7:77:08:8d:ff:fc:e5:28:85:ca:51:c3:22:
         9d:d3:04:ec:5b:27:28:a7:ff:35:e7:23:0d:60:ee:20:19:95:
         7a:26:7d:7e:ea:31:7e:37:27:4f:19:f1:c7:10:a5:22:70:06:
         a5:77:25:71:f4:42:3f:0c:15:24:bb:a2:f8:5d:53:75:b1:6d:
         af:ae:1a:8b:fb:e8:16:7c:a3:7d:6c:88:af:65:ab:90:49:15:
         82:11:7c:b8:27:33:b2:87:fa:78:f3:22:0c:a7:c2:07:d7:54:
         24:0e:f4:e8:bb:12:10:51:a1:db:72:6c:79:25:b7:5c:d3:ee:
         98:fb:50:87:fd:7d:a9:e5:c7:12:72:c2:78:e2:90:ec:74:14:
         4a:0f:fe:01:23:95:6f:42:7d:78:d6:ca:6f:8c:c5:1d:b6:98:
         16:c2:fd:21:01:cc:00:d0:bb:d8:a2:10:10:86:3d:c9:c8:cd:
         8f:54:33:63:93:66:a4:1e:66:44:52:da:2b:48:48:4d:67:8e:
         bb:49:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:23:46 2024 by rpki-client on console-ams.rpki-client.org