Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2ce7749c-9098-3b57-9632-a085bafc7d25.roa
File:                     2ce7749c-9098-3b57-9632-a085bafc7d25.roa (raw, json)
Hash identifier:          TFBe7fXuJ+20KjF0Q6SKlsWsrzxA5FxP0NUlAFHJoEg=
Subject key identifier:   47:2B:A4:A8:F0:E6:A9:D0:70:AE:5A:A8:7A:53:8C:4E:5F:C3:53:CD
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285846381F014D2A6855BAD15D1520
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2ce7749c-9098-3b57-9632-a085bafc7d25.roa
Signing time:             Sat 15 Jun 2024 13:00:35 +0000
ROA not before:           Sat 15 Jun 2024 13:00:35 +0000
ROA not after:            Fri 13 Sep 2024 13:00:35 +0000
asID:                     64267
IP address blocks:        192.171.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:38:1f:01:4d:2a:68:55:ba:d1:5d:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 15 13:00:35 2024 GMT
            Not After : Sep 13 13:00:35 2024 GMT
        Subject: CN=10cf4ddd-293b-4860-926f-ec4538f8d520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:09:35:8e:46:c5:54:c7:dd:be:2b:94:f8:
                    23:8b:ff:7e:de:c1:43:5b:05:3b:a3:c7:2b:b5:b9:
                    70:db:df:ef:2a:6b:20:3b:60:32:1f:db:db:29:3e:
                    cf:aa:76:05:ee:ba:36:bc:a2:be:72:2b:d8:dc:97:
                    a6:20:72:36:ac:b7:14:9f:15:d2:7b:cf:39:a2:ed:
                    79:56:2f:cd:74:7d:50:21:5f:04:8b:04:c0:59:2f:
                    46:3d:9a:13:2e:5c:dc:88:8b:a3:6e:10:e1:5f:d3:
                    6f:7c:8c:97:e4:5e:fe:c6:c2:27:63:2c:b3:2d:ee:
                    8e:d5:2e:dc:df:f1:82:f8:53:21:37:72:9f:dd:34:
                    f9:9f:a8:13:7f:cf:45:49:d3:92:ae:3e:37:d6:a4:
                    b2:aa:27:76:f4:b6:8d:23:7f:a2:93:3f:d9:1d:2b:
                    1c:e8:77:f0:21:8a:fa:a6:80:16:74:be:ba:50:11:
                    7f:a8:48:22:ef:15:0e:3d:1b:41:8d:a2:99:75:8d:
                    ab:0d:b4:42:57:f2:b2:66:00:e6:77:0b:58:a4:36:
                    f6:87:26:89:f5:d8:77:49:0a:6e:6d:9a:61:7d:08:
                    e7:b6:83:52:b2:b9:91:69:43:f4:84:62:a4:54:37:
                    8e:0d:46:fe:26:e8:6f:01:4f:23:19:48:ec:1d:c4:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2B:A4:A8:F0:E6:A9:D0:70:AE:5A:A8:7A:53:8C:4E:5F:C3:53:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2ce7749c-9098-3b57-9632-a085bafc7d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:f5:1a:36:0a:c6:e6:85:af:7f:c3:ee:32:e3:19:fc:76:
         83:e6:a8:1d:a7:d4:17:a3:54:1a:ab:ba:82:0a:d3:83:08:e4:
         b6:11:ee:dd:b8:39:57:4f:3b:0d:40:2d:5f:c0:2a:2d:44:16:
         cb:a6:a3:8d:13:a7:fa:c3:75:dc:a4:73:ac:dd:32:21:03:01:
         01:81:10:cb:b2:8f:e2:08:03:57:1d:96:1e:53:e1:6c:78:ad:
         13:1d:b2:fa:5e:f0:05:0f:ec:f3:1f:7e:a3:bb:04:56:45:ad:
         bc:93:c5:31:14:81:18:81:f1:53:e5:e9:38:ed:1d:4a:1f:5e:
         6d:fc:7c:3c:f2:f6:3a:2a:b8:b3:9a:fe:1f:87:0f:22:18:ec:
         75:61:3d:d5:4f:88:7a:25:f3:07:6b:ac:8b:72:f5:8b:67:98:
         58:43:dd:0f:5f:07:bf:74:36:e0:1e:a5:fd:f6:cd:82:76:14:
         74:c6:f5:db:b2:33:3f:79:59:f2:88:e4:79:1b:30:e8:ef:00:
         3b:a8:bf:9c:9c:8b:d8:9f:8a:b6:6d:7e:12:ea:4d:eb:82:32:
         35:57:2f:b4:67:8c:6c:d3:8d:61:c7:38:1a:9e:67:f2:03:66:
         d0:28:f4:5b:00:b5:fc:97:5c:bd:25:7c:df:29:56:e5:36:9c:
         89:78:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:09:23 2024 by rpki-client on console-ams.rpki-client.org