Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c7b5a57a-3647-3fbd-a7ef-33a9e2855bcb.roa
File:                     c7b5a57a-3647-3fbd-a7ef-33a9e2855bcb.roa (raw, json)
Hash identifier:          /gKUl2jwK0L9QUvoKyOeREuF5XlswLOabf7bH+ISzl8=
Subject key identifier:   21:5D:2E:02:40:9F:DE:0A:1C:BC:4D:9C:83:C0:D9:9E:7F:60:D7:E0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858461C341D79FFFA7AAB4DA00580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c7b5a57a-3647-3fbd-a7ef-33a9e2855bcb.roa
Signing time:             Wed 05 Jun 2024 13:00:33 +0000
ROA not before:           Wed 05 Jun 2024 13:00:33 +0000
ROA not after:            Tue 03 Sep 2024 13:00:33 +0000
asID:                     64267
IP address blocks:        67.218.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:34:1d:79:ff:fa:7a:ab:4d:a0:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  5 13:00:33 2024 GMT
            Not After : Sep  3 13:00:33 2024 GMT
        Subject: CN=74f6ef80-858f-4166-82f3-3f7826c5c50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:98:d2:53:ba:2a:7e:b9:2e:ce:97:a8:6d:
                    e2:71:de:c5:5b:ac:9d:9e:a5:53:18:82:c7:08:e5:
                    34:e2:d9:f9:7c:7e:c0:22:04:28:1f:96:2a:69:63:
                    ae:13:33:63:ab:cd:31:71:5f:25:09:b5:44:25:0c:
                    78:d8:08:8f:7e:5e:a4:bf:30:84:65:f6:31:d2:b6:
                    3a:ee:cb:51:6b:07:8e:04:22:9a:86:74:a9:6b:a8:
                    5b:42:6d:c4:51:f5:51:33:9c:c5:bf:43:a1:9d:ca:
                    f2:14:39:82:c5:2b:46:f7:47:95:14:70:77:ef:29:
                    8f:a7:d3:d6:61:13:bd:4e:03:92:f5:68:7a:2a:a4:
                    0d:48:8b:66:cb:fb:d7:35:55:df:8b:a2:b6:b4:7f:
                    4f:e8:d4:c6:25:e6:ee:15:1c:49:93:35:3d:c5:a9:
                    8a:35:c7:f7:de:b1:b3:80:d2:c0:d7:42:05:4a:6a:
                    6f:1c:2d:93:d9:2f:cb:d7:8b:b1:50:74:d2:ff:0b:
                    a2:38:32:7d:fd:84:36:24:78:90:e5:87:50:6e:04:
                    bb:ee:a6:22:af:67:f5:27:0c:a7:b2:66:0f:c3:dc:
                    57:d9:eb:0e:92:02:f6:5f:eb:25:d0:76:7f:cf:04:
                    60:24:15:05:7d:3f:fb:b0:fb:b2:ff:0d:6d:64:61:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5D:2E:02:40:9F:DE:0A:1C:BC:4D:9C:83:C0:D9:9E:7F:60:D7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c7b5a57a-3647-3fbd-a7ef-33a9e2855bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d6:b1:74:d4:90:17:6f:89:60:01:5e:17:61:b9:52:5b:a2:
         40:0f:61:1c:18:6d:40:af:26:7c:ca:0f:c8:8c:87:1a:67:48:
         74:29:d8:e5:1f:0f:d5:87:05:04:ff:8b:8b:3a:8c:7a:ef:88:
         7d:3e:97:5d:b3:b9:bd:0d:9c:bb:26:cf:a8:21:3a:da:21:90:
         28:dd:f2:99:ce:b1:5c:ba:8c:42:76:8e:d0:c7:65:6e:d8:8b:
         58:94:5d:ef:04:f8:15:a5:03:fb:6a:39:73:6f:2d:7c:fa:a9:
         f3:3e:02:07:c8:d3:a9:66:a3:bd:bc:72:7c:86:66:8a:a8:e7:
         88:49:5d:e1:d2:57:76:2c:91:3e:3f:b9:04:7e:3e:94:db:b1:
         53:56:ad:b3:ae:a1:9c:72:63:d4:01:53:ce:c7:bb:b3:74:33:
         7c:29:4f:98:3d:a2:6a:72:3b:67:ea:1e:1d:23:36:79:40:0d:
         5b:ab:9c:49:98:8f:f4:bc:88:8d:72:1f:a2:1b:fb:00:4a:01:
         a8:52:2b:1c:47:fb:33:62:b1:69:1d:e2:61:bc:43:bc:82:45:
         57:61:f3:92:02:5f:6e:d5:54:24:50:ed:1e:47:82:a3:bb:4a:
         3d:24:ff:2b:af:62:00:0b:06:23:7e:61:52:3b:fa:7c:67:e2:
         50:9d:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 16:07:50 2024 by rpki-client on console-fra.rpki-client.org