Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/66c413c9-53d9-34f7-9004-f3fe204017cd.roa
File:                     66c413c9-53d9-34f7-9004-f3fe204017cd.roa (raw, json)
Hash identifier:          FasmK8BA99Sq8RJ2YXPcTTJWoaViAGw9YrnU8zltgXc=
Subject key identifier:   F9:F3:74:69:18:68:9B:F1:EF:B5:37:51:03:5D:75:B2:AE:5F:D8:5A
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858456F1DB67384A4657DE0E7F700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/66c413c9-53d9-34f7-9004-f3fe204017cd.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     25899
IP address blocks:        192.95.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:b6:73:84:a4:65:7d:e0:e7:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=2e5e61f4-2890-46e5-abf8-1953dcfd4cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:0a:2c:cc:f0:ff:62:39:77:c3:82:4a:f9:
                    aa:37:5c:ca:0b:6e:ab:98:ea:1f:c8:de:c3:cd:d8:
                    fb:74:56:2a:f0:f0:94:ac:37:3a:75:03:1e:a8:ae:
                    13:1f:05:f4:a1:a6:a9:40:66:5f:b1:bb:71:16:87:
                    39:26:e4:2a:24:30:e3:cd:29:dc:b6:4c:a4:e0:02:
                    fb:3f:06:66:89:0e:ee:e6:ed:8d:91:f0:97:0f:01:
                    44:5e:52:11:52:52:49:cb:0b:3f:fb:d1:f6:10:9c:
                    62:d9:00:88:05:d2:30:cb:01:6c:1c:50:6a:f4:45:
                    fc:b3:bd:f8:f3:a7:0e:4b:3b:3b:00:48:57:83:93:
                    3a:56:ae:12:42:4a:22:ca:35:2a:06:9d:d8:7e:a5:
                    d3:b5:71:46:fb:fc:f4:b5:7c:da:e1:fc:89:4f:b0:
                    a9:54:26:21:09:94:a0:41:0c:74:7e:1e:0c:f4:35:
                    5c:f8:de:2f:cb:45:15:e3:22:4c:19:bf:1c:5f:b2:
                    dc:6d:77:80:73:22:f6:d4:c4:80:85:b6:15:fa:d3:
                    60:35:d0:05:88:48:b7:30:d7:89:fc:fc:6c:5d:fa:
                    94:04:3c:4e:14:14:c2:99:fe:92:7b:f0:35:31:ca:
                    a7:d7:3f:17:76:e7:f5:66:17:11:cb:03:34:77:86:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:74:69:18:68:9B:F1:EF:B5:37:51:03:5D:75:B2:AE:5F:D8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/66c413c9-53d9-34f7-9004-f3fe204017cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.95.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:00:59:69:33:4d:d7:97:3b:ad:8d:a6:5c:3a:3c:7a:8f:
         1c:73:eb:95:b7:8a:c5:41:69:7f:40:ee:16:85:10:18:5b:89:
         12:3d:21:67:f7:c3:31:d4:91:cd:ec:b1:62:de:2a:56:07:5e:
         84:61:ba:63:1f:be:ef:8e:86:7f:a4:8e:01:d8:83:05:9f:f6:
         17:ce:70:e0:03:a0:b7:59:ac:b7:b2:6a:4d:7d:20:91:3f:c1:
         3b:44:6c:05:44:5b:8e:b1:b5:f3:8e:06:6e:50:43:50:a3:d3:
         4c:e2:4b:fe:e7:8f:dc:f5:a6:74:ff:5d:86:4b:a0:4f:7d:78:
         e3:e0:7a:da:fb:47:78:72:7e:0f:d1:9a:c6:7b:87:f4:af:68:
         d0:8b:26:71:a5:1b:e5:0f:90:5b:95:74:38:f7:65:05:e9:d4:
         c7:9f:b3:5b:d9:74:29:3d:9a:7c:62:8e:fa:2f:75:7f:ca:6d:
         bf:6a:52:18:50:7e:b2:39:ac:67:f0:65:22:f6:25:7e:44:40:
         d8:e8:09:b2:ad:5e:39:14:87:28:97:d1:59:f4:82:f5:23:49:
         4c:0e:a6:51:df:41:6e:a7:17:10:22:4e:88:f0:a3:2a:7b:7f:
         68:08:c2:c8:f7:8d:9b:8a:8d:85:ef:6f:8f:23:5b:69:45:81:
         2b:ff:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:49 2024 by rpki-client on console-fra.rpki-client.org