Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa
File:                     8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa (raw, json)
Hash identifier:          pBUB8sEwmtVlCLawpFjKnUlppZnsmNbhFYStHMwRV60=
Subject key identifier:   84:44:B2:CE:83:D2:2C:9F:3F:42:21:4C:5D:3F:DC:51:13:71:71:BF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285846381F031A7CD8B78ED91B3416
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa
Signing time:             Sat 15 Jun 2024 13:00:35 +0000
ROA not before:           Sat 15 Jun 2024 13:00:35 +0000
ROA not after:            Fri 13 Sep 2024 13:00:35 +0000
asID:                     397630
IP address blocks:        158.62.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:38:1f:03:1a:7c:d8:b7:8e:d9:1b:34:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 15 13:00:35 2024 GMT
            Not After : Sep 13 13:00:35 2024 GMT
        Subject: CN=59475794-520d-45ef-8036-47dceb2f6466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:9d:2c:df:c4:44:5c:4b:a4:9d:19:3b:9b:
                    ec:a5:91:4f:fa:39:33:7c:c3:18:ae:3b:1e:4c:86:
                    65:ac:7b:f7:46:4c:46:a2:67:a1:35:91:38:04:0c:
                    65:1f:8f:30:f3:2c:4b:e4:c4:cf:44:fd:46:bb:32:
                    e6:f2:34:c3:49:ea:92:5b:ea:f3:e0:a0:2a:19:97:
                    1f:f9:71:53:b1:91:9f:d5:5a:12:a4:fa:77:89:29:
                    0c:51:f7:0b:2c:7a:b3:8b:8e:6c:2e:8b:84:7c:4b:
                    0b:d3:c9:69:57:1c:14:d2:a3:9a:be:0b:de:92:bb:
                    22:73:04:70:3a:9c:e2:06:f6:81:25:65:3c:97:70:
                    e7:97:f4:16:a9:14:1d:16:a3:a5:35:7a:3f:f2:16:
                    02:81:b1:ec:e0:7c:f8:b6:39:35:fb:83:8b:c9:1e:
                    7f:82:40:84:55:28:0e:e2:d2:b4:a4:33:cc:81:75:
                    46:62:8f:e5:39:6a:3c:8e:78:63:16:6e:c8:87:a7:
                    82:66:64:59:d6:ed:16:31:17:18:38:d5:bc:3a:69:
                    92:57:96:92:2f:e4:9b:0a:42:17:80:65:2f:99:49:
                    2d:36:2c:f6:60:f5:2a:6a:57:37:87:97:c9:07:da:
                    f7:b5:42:c7:de:c5:7c:9c:68:78:e3:20:c2:75:32:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:44:B2:CE:83:D2:2C:9F:3F:42:21:4C:5D:3F:DC:51:13:71:71:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8b4085c3-80bf-3d18-b6e4-65193bd79dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:35:10:45:40:cf:14:13:61:d8:9c:9b:77:5d:76:f3:f8:99:
         10:12:c6:a8:8f:98:93:63:8d:7f:a7:de:0e:5a:ef:67:ab:89:
         6f:7e:18:d8:eb:ea:b6:fe:d0:e5:dd:1c:88:f4:9e:22:08:54:
         07:4d:be:b0:e3:bf:8a:70:15:44:1f:a1:aa:3b:ce:2e:64:48:
         78:b0:5e:e0:78:64:72:e4:d5:5c:b8:5d:e5:01:05:b5:a8:9a:
         f3:28:fd:39:c0:f8:72:fd:a7:5b:33:1c:ac:d2:6c:d1:05:4f:
         63:1d:70:24:da:12:8e:81:a0:3f:db:57:63:19:90:a0:35:bd:
         47:d4:6a:b5:b6:33:d4:86:3d:98:82:0c:76:c3:e3:30:7e:28:
         f0:5a:e7:97:36:59:6e:95:66:d4:ca:e7:a1:1b:03:a0:d2:d8:
         24:04:17:24:33:de:98:59:ac:31:5e:bf:ae:db:4a:78:b7:67:
         af:f0:ca:2b:04:f1:a4:19:77:75:3a:92:49:59:58:90:b7:a1:
         31:1e:f5:6e:7d:7a:4a:a8:78:fc:76:9e:b7:1c:ee:4b:c9:13:
         f1:cf:f0:b8:20:84:e7:54:a0:eb:55:96:45:97:ba:57:be:0f:
         2a:37:0c:5e:c1:84:c6:72:07:ed:36:4c:87:e6:84:7c:d6:33:
         93:c1:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:09:23 2024 by rpki-client on console-ams.rpki-client.org