Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d2a4dd-fb74-3aa1-9e43-b202621da4fc.roa
File:                     f5d2a4dd-fb74-3aa1-9e43-b202621da4fc.roa (raw, json)
Hash identifier:          Hh2IKYf1+fo/gOKLObrF8q1vOoHwyCiSgbzP7PM2+xI=
Subject key identifier:   B7:90:47:86:C3:59:A3:E6:8C:9B:0F:B1:7C:91:A2:D6:A7:3B:0D:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD01B9CFC387454AF51E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d2a4dd-fb74-3aa1-9e43-b202621da4fc.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        162.151.41.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:01:b9:cf:c3:87:45:4a:f5:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=8b5b9fe9-6f9b-4eda-a33e-4807b0a0c77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:62:8f:61:98:68:04:b9:f3:4b:81:e3:f1:
                    79:c6:71:d3:85:43:97:78:3c:a0:b4:44:e8:4f:fc:
                    e1:08:6a:76:44:24:fa:23:ea:b9:48:e9:bd:bd:31:
                    05:c9:ae:88:4d:04:ca:cf:b4:f1:a6:48:4f:03:57:
                    39:fd:21:de:a0:5e:8b:70:ed:89:8a:25:5a:00:4a:
                    99:30:2d:39:7f:79:78:bf:51:99:98:b5:82:b6:f4:
                    fc:e7:e7:91:21:aa:63:aa:4f:c9:43:85:17:25:a1:
                    f4:a9:e1:69:aa:5b:65:d5:74:be:a7:72:10:9a:6a:
                    27:8e:a6:ec:2b:50:ba:1f:82:7d:03:b1:e8:b8:50:
                    a5:12:25:9d:47:07:5a:24:8b:dc:a4:01:00:6f:96:
                    64:60:44:5c:db:81:c9:65:ef:27:13:47:57:37:13:
                    9a:2d:98:1b:c4:c8:79:92:1d:8b:a7:92:04:1f:3d:
                    97:d7:93:43:be:3f:95:11:f1:e3:b4:93:d6:5a:bd:
                    db:77:64:61:1e:08:09:dd:d8:31:a8:a4:ea:40:93:
                    a7:8f:3a:dd:bb:69:96:38:2a:cd:ff:a8:f6:b8:e5:
                    04:8c:c8:a7:44:a2:70:ae:d0:70:0d:da:90:0c:b8:
                    d0:3e:46:b5:4a:44:df:ff:87:9b:1d:66:2c:eb:e4:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:90:47:86:C3:59:A3:E6:8C:9B:0F:B1:7C:91:A2:D6:A7:3B:0D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d2a4dd-fb74-3aa1-9e43-b202621da4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.41.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:a2:05:32:e7:4f:19:cc:2f:a7:04:84:7b:e3:e1:0d:69:fe:
         20:a9:36:40:5e:2d:5f:24:18:f4:67:3a:64:3e:11:e3:73:c4:
         5c:8a:4c:5a:41:21:b4:ce:51:06:e4:a9:7e:ed:e2:99:21:b2:
         cf:ba:50:d0:42:c1:97:30:15:a3:9c:7c:83:93:65:c9:58:15:
         04:d3:a5:22:d4:ef:1f:2e:39:ba:b4:e8:91:5b:59:59:c1:bc:
         a8:44:6c:fc:8c:cd:6a:c7:2a:07:0c:fd:f6:64:2c:3b:60:e8:
         81:99:cf:ba:84:e5:b0:0e:6f:b3:22:3d:c3:5d:84:be:2e:76:
         0b:3f:7e:b7:4d:59:25:f6:33:8f:06:e8:b7:d6:f9:1e:1b:b2:
         3a:54:35:a5:a9:d4:9d:b9:2d:a2:80:93:bf:9e:a4:18:f4:65:
         03:bb:ed:ac:8a:b9:34:6d:53:ce:e5:fe:aa:50:22:e5:ba:a3:
         9d:45:f2:43:a9:d8:1b:0a:d6:69:91:ca:82:cb:f7:58:0c:f2:
         a2:25:48:8f:f8:f7:2e:ef:90:c8:bc:83:62:c4:71:eb:88:53:
         6e:28:18:dd:d0:d5:91:f0:2c:6b:c9:a8:fa:37:a7:96:74:52:
         13:1e:bf:13:55:14:4d:be:ab:b5:8b:e3:9a:0e:1c:06:bf:e7:
         e2:50:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:49:19 2024 by rpki-client on console-fra.rpki-client.org