Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f023bbde-d159-37b6-82cb-ac46f52e0f6b.roa
File:                     f023bbde-d159-37b6-82cb-ac46f52e0f6b.roa (raw, json)
Hash identifier:          bdMPJnpNnhpAqDz4MtTpXTc1rXDNDGGh/tbyqBvLapE=
Subject key identifier:   34:FA:B0:F5:F1:F3:23:3B:BE:8D:AE:56:48:C4:1E:3D:85:E5:8E:C4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858461C341B59B84649865435CB40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f023bbde-d159-37b6-82cb-ac46f52e0f6b.roa
Signing time:             Wed 05 Jun 2024 13:00:33 +0000
ROA not before:           Wed 05 Jun 2024 13:00:33 +0000
ROA not after:            Tue 03 Sep 2024 13:00:33 +0000
asID:                     64267
IP address blocks:        168.245.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:34:1b:59:b8:46:49:86:54:35:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  5 13:00:33 2024 GMT
            Not After : Sep  3 13:00:33 2024 GMT
        Subject: CN=8e2f1cc6-47b0-41bd-9cb3-4b92d0924266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:fc:99:75:69:7e:f1:ab:9e:8d:ff:c4:1f:
                    e7:a5:c6:00:70:2f:2f:0d:fc:13:cf:8a:fa:ec:1a:
                    ae:ce:1a:e7:bc:1d:b6:8f:bb:e0:96:e0:df:b1:87:
                    3a:75:3e:82:95:1b:b2:93:02:6e:c2:70:95:d3:68:
                    d6:1e:3a:61:90:fd:de:97:d9:83:6c:64:bc:84:e9:
                    aa:ed:00:e8:27:be:07:df:c6:ce:c2:7d:8f:ee:bb:
                    d7:34:82:96:0e:9f:ea:0e:da:3b:5f:ae:a7:02:82:
                    84:eb:77:6d:9b:42:cf:c4:7e:93:75:b8:59:b5:fc:
                    0a:77:0f:65:72:35:53:70:37:03:c8:b5:05:64:31:
                    bb:af:71:1f:bb:6d:02:10:fc:ea:a4:c2:37:62:74:
                    bb:c8:3b:d7:81:56:80:a3:1c:75:e4:5b:04:fd:71:
                    d8:dd:e6:72:1e:36:3d:68:1d:e1:36:21:6e:05:f9:
                    0c:63:1a:5a:b1:bd:12:50:35:9d:d9:a8:b5:3d:d7:
                    a7:96:37:b1:25:bd:cd:13:7b:87:bd:6b:87:ad:97:
                    fd:6e:dd:bb:51:96:d2:18:21:dc:24:fd:51:b0:9a:
                    4a:33:5c:75:b1:ed:c6:0f:d1:ea:e1:49:7d:d3:8f:
                    ea:ea:99:92:25:db:78:2e:7c:39:32:cd:ad:1d:e6:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:B0:F5:F1:F3:23:3B:BE:8D:AE:56:48:C4:1E:3D:85:E5:8E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f023bbde-d159-37b6-82cb-ac46f52e0f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:05:3f:13:d7:46:ec:02:9e:2f:bc:3b:d4:8e:c1:18:e5:
         5a:7d:23:8a:18:46:e9:d0:0a:6e:b5:f7:99:2b:b2:93:3a:72:
         12:e1:9d:c9:6a:04:84:5a:b5:17:c4:80:87:c6:90:75:f0:8f:
         26:95:3b:68:34:a1:f7:e2:7e:c8:48:62:f1:c3:72:04:44:25:
         58:d2:03:b9:55:86:6c:6f:fa:cf:c8:7e:23:2b:68:0b:4c:15:
         95:19:cf:22:8a:b0:b0:d5:19:22:ef:87:11:62:a8:af:54:2d:
         43:ec:62:2a:9d:e9:52:e5:03:6c:94:d2:59:06:83:a2:bf:33:
         d6:08:2a:79:d3:a9:44:7b:4d:10:c7:1c:62:d2:11:30:bf:b3:
         ad:00:bb:0d:8f:f7:e3:ba:fd:b7:27:50:8a:bc:ae:ad:a6:55:
         ce:88:cb:8b:28:51:f2:85:3b:4d:d7:e6:99:2f:e0:8a:a2:83:
         ba:30:cb:f5:ac:e2:9d:bc:5b:6b:00:56:5d:56:e4:fb:a3:18:
         de:1b:03:c8:67:32:55:8d:0e:96:cb:f1:68:e0:e9:a5:21:de:
         21:5c:23:07:08:0a:63:e9:fd:21:94:c8:a3:df:29:0d:22:c4:
         9d:4b:e0:06:55:78:e1:d1:5d:87:39:ed:4d:d9:4e:7c:aa:93:
         57:51:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:09:23 2024 by rpki-client on console-ams.rpki-client.org