Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc266190-61b0-3d15-82e1-78e0220e2333.roa
File:                     fc266190-61b0-3d15-82e1-78e0220e2333.roa (raw, json)
Hash identifier:          tHqPmtb6s76EbfWrip9gb/JhRfPMinMcUj739yIKxO4=
Subject key identifier:   15:07:B5:E8:93:99:F9:2F:46:86:A2:1E:37:85:C0:68:FB:25:51:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8933E7AAF3BF35A4533E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc266190-61b0-3d15-82e1-78e0220e2333.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        174.167.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:33:e7:aa:f3:bf:35:a4:53:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=3c5de84f-96a1-4625-b778-8db467ac2d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:76:85:aa:62:d3:c3:36:06:f5:08:ff:39:
                    59:af:f5:7c:40:90:08:89:04:a3:dc:bb:4c:03:12:
                    be:d3:40:81:01:4d:f6:fb:43:1f:c4:c4:ae:68:c9:
                    17:b0:47:12:70:f4:55:1b:da:d7:c5:17:5b:c9:42:
                    d4:1a:b7:3e:40:35:f2:5e:45:15:83:1d:47:d7:cb:
                    26:08:43:38:8e:44:48:42:b4:d7:05:af:e2:78:09:
                    84:9f:ba:48:f3:ba:cb:f2:23:5d:1a:e3:5a:54:e3:
                    76:7c:aa:af:1d:c2:6f:65:a2:f5:a2:49:96:fd:72:
                    a3:fd:ff:9a:58:fb:56:04:2e:d5:98:7b:74:de:bb:
                    8d:c4:27:25:96:47:6c:88:3d:26:0a:49:1b:20:d8:
                    11:42:0d:3d:81:79:d5:76:e7:a0:65:c3:37:34:8a:
                    d5:3e:67:24:f8:64:ee:0b:35:2a:fa:72:9d:b6:bb:
                    53:e5:a5:7f:ba:88:67:63:ba:ad:d1:b9:38:67:b4:
                    da:e1:ad:e9:76:1a:44:af:41:9b:24:4a:26:25:3f:
                    5e:64:16:cd:e9:5a:23:14:11:8a:77:aa:6a:e3:74:
                    36:a8:64:7c:a1:45:2c:cc:2f:d2:15:2d:9a:5d:bb:
                    a3:cd:c5:e9:4d:0d:be:a6:fa:90:f9:9d:12:4e:ad:
                    3b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:07:B5:E8:93:99:F9:2F:46:86:A2:1E:37:85:C0:68:FB:25:51:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc266190-61b0-3d15-82e1-78e0220e2333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.167.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:c8:39:3b:61:5b:5a:e7:18:67:50:fc:b1:da:17:61:13:
         62:f0:42:8a:54:c0:3a:a9:30:c3:5d:9e:13:de:b3:f0:0a:a5:
         0d:b2:2a:fd:c0:8f:d5:9e:ab:e7:85:d9:f2:d0:67:f4:0f:a5:
         d4:ec:3b:94:2a:5d:64:38:62:fe:cf:6b:a0:8c:ff:92:85:f5:
         4d:22:d7:e4:ff:a5:78:62:53:5d:c8:b1:b7:f3:55:52:c1:2c:
         c3:72:ab:c4:a0:b7:f4:bc:8e:7d:40:0a:1c:df:67:1d:86:66:
         16:10:1c:52:ba:91:1a:32:84:1a:be:fa:ce:da:a5:9a:6c:59:
         c9:c6:23:d9:c2:f7:f6:3a:4c:91:97:8b:76:29:47:34:7d:d9:
         90:d6:3e:77:80:c2:0c:3e:b3:4a:40:69:4c:dc:dc:e7:35:f8:
         e9:98:49:89:34:83:68:63:33:cb:99:c8:fc:28:04:4b:e5:cc:
         35:4f:ff:fe:0e:be:11:d8:b0:85:95:6e:04:ef:2e:a0:b4:54:
         c0:5d:52:cb:e5:56:40:75:7b:a3:26:8e:18:e5:dd:6a:83:a5:
         a5:43:a5:cd:c4:bb:db:4a:39:f9:fb:e4:08:7b:d5:a4:13:f3:
         66:23:fc:d1:7c:e7:19:64:f5:12:0d:6a:82:62:b3:14:80:59:
         2f:9b:d3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:24:16 2024 by rpki-client on console-ams.rpki-client.org