Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa
File:                     fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa (raw, json)
Hash identifier:          hGHwC3HRFvtlru5x3e67iBnzokyahQoK9G7FZGN+6rU=
Subject key identifier:   DC:DE:C5:26:7F:A5:FD:E0:EB:68:10:20:E3:25:E0:BF:E5:C4:4A:4C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858462CF447B70FD5CF10548D6A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa
Signing time:             Tue 11 Jun 2024 13:00:33 +0000
ROA not before:           Tue 11 Jun 2024 13:00:33 +0000
ROA not after:            Mon 09 Sep 2024 13:00:33 +0000
asID:                     64267
IP address blocks:        173.214.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2c:f4:47:b7:0f:d5:cf:10:54:8d:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 11 13:00:33 2024 GMT
            Not After : Sep  9 13:00:33 2024 GMT
        Subject: CN=1c8bb330-a130-4e51-8f26-12363e729cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:0d:fe:dd:76:a7:37:e9:e6:eb:24:4b:57:
                    9d:82:0f:1d:5d:1a:d2:cb:d2:c4:43:28:16:b4:87:
                    74:8f:0c:ab:3c:ca:45:1c:4f:2c:70:f1:25:5f:0b:
                    f2:73:bd:30:67:a8:cb:f2:21:55:7a:1d:8d:62:c2:
                    1e:24:b2:2a:4c:73:d5:08:4d:85:b0:0b:1e:9d:ed:
                    dd:96:9d:21:1f:3e:34:d3:f0:82:1c:49:25:10:4c:
                    5b:b7:77:fc:31:ce:ed:80:99:c6:15:f5:96:d6:ab:
                    07:2d:8f:47:62:af:1c:6e:12:df:3e:7e:68:e5:d9:
                    e5:5a:51:2c:d7:a6:52:e9:ea:2a:25:05:20:77:77:
                    f8:8d:28:ae:fa:92:f9:14:52:13:b9:4c:9f:8d:db:
                    b2:75:51:7c:1b:b8:bc:c1:fd:7a:e8:1a:d7:03:63:
                    61:d3:fb:75:83:10:07:58:ac:28:94:00:44:b2:d1:
                    3a:95:b3:77:af:04:c0:55:11:d1:c5:d2:c1:f0:af:
                    86:65:5d:78:b9:be:65:b5:6c:df:55:81:db:97:3d:
                    05:75:0b:a9:3e:99:01:63:40:23:f7:48:41:53:f3:
                    96:31:6c:65:2e:25:8c:95:b8:f3:15:8a:e2:a9:2c:
                    da:01:ce:7c:fb:bb:56:df:f2:f5:76:84:0b:a4:7c:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DE:C5:26:7F:A5:FD:E0:EB:68:10:20:E3:25:E0:BF:E5:C4:4A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fa4fd6c0-de61-3cb2-849c-dc438dda3144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:1d:22:9a:5f:4c:7d:b9:14:03:d0:3a:31:70:b4:d0:a6:
         3c:f8:d0:a8:24:d6:05:40:67:a2:66:e3:50:56:5a:7b:3f:bf:
         b0:7e:92:2c:1c:8d:6b:b1:4e:01:20:cd:ae:b7:18:3b:16:9f:
         b8:97:e8:6a:2d:99:d9:a4:2b:f3:95:b5:d8:9e:dd:8c:0f:3e:
         7e:35:8e:64:55:74:3e:92:0a:c1:2b:72:29:65:b9:e8:c8:5f:
         07:35:f7:45:f3:43:9a:44:32:63:7c:55:3c:b5:31:eb:db:fd:
         b4:d3:46:da:2b:b0:ed:92:b3:6b:25:69:53:f4:72:be:e2:bc:
         db:23:c1:95:fa:61:1c:e4:57:f0:03:73:50:71:e3:dd:9b:4e:
         91:28:b9:ec:7d:e1:ac:00:42:bc:07:ab:96:42:07:57:2f:48:
         0f:68:28:2e:37:0f:d3:33:bb:76:6f:2c:38:8d:bd:0b:3c:d0:
         66:0e:20:4d:40:d4:10:4a:fa:d4:d7:b4:94:ae:43:65:40:3a:
         ee:6c:52:f9:91:a3:c3:d5:c5:83:3a:a1:31:19:02:8c:9d:13:
         52:98:5e:cc:1b:19:f4:73:7f:54:d3:a0:4c:d3:71:e5:ca:e6:
         3c:b0:00:20:b6:f5:3a:b6:ca:7b:03:36:2e:0a:39:2d:3a:c9:
         4e:10:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 13:49:30 2024 by rpki-client on console-fra.rpki-client.org