Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
File:                     59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa (raw, json)
Hash identifier:          PxF9XgeCzSD/Fu0k9ywbQBWTuldIBgJgB7al1YwSRzQ=
Subject key identifier:   AE:DB:34:33:8C:3A:93:F7:F3:3A:48:AD:9D:DB:DC:4A:D0:00:04:0C
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285845EE23BD1D6B6B89CC1660EE80
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
Signing time:             Mon 20 May 2024 01:00:26 +0000
ROA not before:           Mon 20 May 2024 01:00:26 +0000
ROA not after:            Sun 18 Aug 2024 01:00:26 +0000
asID:                     22142
IP address blocks:        170.186.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ee:23:bd:1d:6b:6b:89:cc:16:60:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 20 01:00:26 2024 GMT
            Not After : Aug 18 01:00:26 2024 GMT
        Subject: CN=5ec343a1-ce2f-4fd9-930a-72fb2371c83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:b5:b8:ab:fa:e6:07:75:03:72:f0:d6:04:
                    46:1a:34:aa:59:27:42:fc:15:94:8d:b7:ea:8c:7c:
                    69:6e:41:cf:96:01:0f:d9:86:41:f7:35:66:2d:4e:
                    15:f2:9d:6a:5f:fe:86:44:7b:87:95:04:04:2c:58:
                    15:c8:a0:9b:31:79:1f:3d:78:5b:a1:5d:6a:8c:38:
                    96:b7:7d:70:33:94:38:6d:b0:b6:1a:17:a5:f7:dd:
                    ab:97:39:a1:03:d0:43:69:d0:e5:83:34:58:f3:d5:
                    61:24:ae:02:dd:13:a8:e7:4c:95:a2:a5:3d:23:61:
                    14:d9:86:e3:80:aa:b0:46:8e:a3:86:48:d7:f3:6e:
                    ae:61:56:a3:36:68:82:3a:71:0b:27:14:be:e0:3c:
                    77:16:48:b0:04:da:c1:6d:6b:b6:ad:09:af:84:7d:
                    39:99:db:31:0a:be:fb:9b:18:33:9c:71:92:f5:af:
                    59:8c:df:d6:31:12:ea:db:ce:60:35:7f:66:38:61:
                    55:e5:f0:e9:46:fc:eb:ba:ec:2b:d9:c4:02:a2:30:
                    1e:12:19:bb:c2:1f:a1:89:f1:84:e0:f9:f5:3e:97:
                    5a:c6:b0:13:3c:b9:3e:c3:11:16:c7:d1:81:ee:e1:
                    80:21:70:50:f1:0d:76:48:9b:be:b3:d4:88:69:f6:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DB:34:33:8C:3A:93:F7:F3:3A:48:AD:9D:DB:DC:4A:D0:00:04:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:5f:6e:ec:84:f5:2a:51:80:93:13:38:ac:89:64:de:73:
         d0:68:7c:aa:fb:6d:5c:6b:56:8c:e3:e3:f0:df:72:c3:c0:f8:
         55:7f:97:40:f7:62:12:a1:77:b9:81:0c:58:5b:8f:39:f2:94:
         c3:22:1a:91:8d:51:ed:06:8a:df:f8:38:50:9d:51:d1:1f:85:
         12:20:0d:4c:5b:2e:55:1d:b8:3d:d9:2a:62:4a:3b:2b:a4:48:
         e1:17:49:93:ae:38:de:9a:66:c2:05:44:6b:24:9b:80:ef:d1:
         62:dc:c8:47:b5:80:19:d4:52:9e:fa:c6:47:36:b1:a8:6b:3a:
         35:bb:cd:9e:7b:c5:3e:50:52:44:58:97:17:40:dc:e2:2f:17:
         af:6c:f9:7b:ca:55:fa:93:24:ff:a1:32:5a:1a:3a:09:89:7b:
         d3:dd:df:cf:f7:c0:a2:60:ec:f8:6f:c3:a3:d7:d8:ba:37:5a:
         2d:e3:41:8e:68:bb:fc:d5:12:b6:d1:ff:ec:25:7d:6c:7c:9a:
         d9:d4:26:bd:59:eb:77:cd:db:59:94:42:f5:1d:ad:de:10:b0:
         17:e8:e4:65:bb:9a:cd:41:8c:aa:46:67:ab:33:f7:47:26:3e:
         b3:e9:a7:f0:0e:1e:d1:d3:f2:8e:31:d4:48:5d:2c:27:f9:46:
         1e:34:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 01:58:09 2024 by rpki-client on console-fra.rpki-client.org