Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1955f3c3-8a8e-3921-8f79-9f898e718408.roa
File:                     1955f3c3-8a8e-3921-8f79-9f898e718408.roa (raw, json)
Hash identifier:          FA6E3tGYzGdwBZa7TTqjU8HQdhRg6vGQLyHecTppoGg=
Subject key identifier:   A8:33:3E:52:E7:00:CA:24:E3:E6:60:80:AB:6F:86:F4:B4:60:B4:42
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285845E9F3C6AE8D936467DE215100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1955f3c3-8a8e-3921-8f79-9f898e718408.roa
Signing time:             Sat 18 May 2024 13:00:35 +0000
ROA not before:           Sat 18 May 2024 13:00:35 +0000
ROA not after:            Fri 16 Aug 2024 13:00:35 +0000
asID:                     7018
IP address blocks:        172.96.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e9:f3:c6:ae:8d:93:64:67:de:21:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 18 13:00:35 2024 GMT
            Not After : Aug 16 13:00:35 2024 GMT
        Subject: CN=39c1a064-ac0e-4358-b710-ffccfe04df81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:fa:50:86:a6:31:56:e9:1e:15:b7:67:78:
                    9f:4d:0f:7d:b9:b6:f7:3d:94:c7:27:3d:de:da:2a:
                    c1:83:d0:2e:81:cb:76:a1:51:15:0c:36:7c:ee:bf:
                    95:66:72:ae:3f:2c:8a:01:d3:12:cb:f9:4a:18:75:
                    60:8f:06:d6:1c:8e:8b:23:ca:a8:02:cb:8f:20:4d:
                    e5:81:d6:a1:8c:14:7a:5c:e8:40:56:99:83:eb:0f:
                    2b:fa:3f:3c:26:22:cd:82:ab:ae:61:cc:59:20:dd:
                    28:90:b7:da:e8:7d:da:27:84:87:0c:cd:27:4f:a3:
                    f3:af:a3:d0:d2:15:d6:91:c5:af:de:36:bc:67:0f:
                    29:8c:e4:f6:81:08:63:e2:f9:e3:e7:e1:9c:2d:89:
                    62:84:c1:2b:1d:0d:29:23:0c:0b:1c:76:ce:45:2f:
                    06:d8:06:71:2b:fd:19:b0:7c:95:e7:27:10:3c:9a:
                    e3:9f:af:2e:0e:2c:5c:dd:84:6c:91:a4:52:60:87:
                    c7:2a:5d:5a:00:a4:ab:c5:15:fc:bb:a4:62:e1:64:
                    b2:5c:75:3f:86:14:3d:3e:a0:0d:b7:0e:ad:c2:56:
                    c2:15:f0:95:24:f8:40:50:43:a8:10:0c:a0:cd:ef:
                    5d:f5:bc:ff:fe:e3:a6:b9:0a:c8:a5:97:33:1d:70:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:3E:52:E7:00:CA:24:E3:E6:60:80:AB:6F:86:F4:B4:60:B4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1955f3c3-8a8e-3921-8f79-9f898e718408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:89:0a:ef:e3:6e:52:4e:33:f6:7f:72:c3:eb:ac:b5:37:
         e6:fe:b8:d6:38:8e:2d:f3:1f:2a:7d:10:96:5b:b3:7d:19:de:
         d3:e3:75:17:f3:37:b8:06:a3:74:52:5b:b3:65:11:03:49:94:
         94:0e:de:f6:49:ab:ec:b6:a3:b9:65:f4:bb:9a:38:5d:20:3f:
         e5:93:20:63:b6:55:20:77:23:53:cc:8f:f6:2e:04:c4:07:b9:
         59:68:50:13:d5:4a:e5:f8:6e:04:44:c6:87:3b:3f:13:58:73:
         2d:40:eb:a4:70:36:12:08:02:89:67:43:64:df:f2:5a:ef:e6:
         91:56:f2:73:bf:86:0e:c6:30:7f:d2:9d:8e:9c:c5:44:bc:35:
         76:db:21:2d:89:35:f8:40:4f:84:14:9f:36:a2:62:28:8f:31:
         3c:15:1a:25:7d:02:04:41:43:13:b2:f1:f9:5e:fd:55:6e:85:
         29:9e:18:2f:da:00:70:c0:7a:0a:8c:59:1c:a6:1c:18:96:93:
         04:fa:0a:89:18:c9:1f:1f:07:28:f1:01:58:8e:63:ce:34:07:
         35:db:02:3d:5b:47:f3:1d:ed:59:59:ef:c4:94:32:77:f5:c4:
         4d:e7:17:ae:c8:b3:98:98:a1:e6:75:06:e4:75:c3:44:d2:7e:
         a7:d5:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:18:18 2024 by rpki-client on console-ams.rpki-client.org