Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d2570375-1dd0-318b-9bfd-cc729b4bd5e0.roa
File:                     d2570375-1dd0-318b-9bfd-cc729b4bd5e0.roa (raw, json)
Hash identifier:          0CDODEy3QLT6qgxxshDot4h4S+GQyBTiSJv7j5nRIHI=
Subject key identifier:   3B:4A:4E:AD:43:AE:3C:7E:D7:37:20:2F:A1:88:89:54:84:C3:C4:85
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285845F0EE6AD79E1A814DE5EB1570
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d2570375-1dd0-318b-9bfd-cc729b4bd5e0.roa
Signing time:             Tue 21 May 2024 01:00:25 +0000
ROA not before:           Tue 21 May 2024 01:00:25 +0000
ROA not after:            Mon 19 Aug 2024 01:00:25 +0000
asID:                     22142
IP address blocks:        216.66.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f0:ee:6a:d7:9e:1a:81:4d:e5:eb:15:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 21 01:00:25 2024 GMT
            Not After : Aug 19 01:00:25 2024 GMT
        Subject: CN=b10a3ab6-3600-4592-bfa9-79e62db24ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:48:a1:1d:1d:54:c9:81:f7:10:58:fd:f3:f6:
                    c8:3b:5b:84:60:ab:76:8e:0a:48:35:05:d2:1d:47:
                    e7:a6:3c:30:29:43:9d:00:0c:bd:82:b5:a0:a9:2a:
                    e3:b6:24:67:69:e3:de:cb:eb:4a:9e:f3:41:1f:97:
                    67:bf:af:9c:a8:96:7d:bc:1c:ef:2a:a5:de:6f:cd:
                    0b:bf:ae:76:f7:2c:98:ec:b1:9f:a4:a1:44:6a:1d:
                    b6:66:bd:33:85:3f:af:17:30:d5:94:c8:3e:77:d1:
                    50:79:b4:b8:70:3e:f9:c4:64:7d:41:3b:00:8b:9a:
                    37:eb:00:a8:ee:df:56:7d:43:6f:05:16:56:a8:1c:
                    c9:ec:da:d0:99:2c:02:df:30:52:76:8c:0e:97:b9:
                    3d:b3:d9:81:43:f2:4e:b9:96:7c:81:67:ae:df:df:
                    d5:6a:0f:9b:ee:3f:5c:0d:83:78:ea:b6:bc:94:fe:
                    ce:d4:91:d3:84:1f:60:5c:ba:05:ad:84:32:74:67:
                    fb:df:21:df:eb:b1:d9:bd:53:e1:e9:5a:a0:16:4f:
                    34:10:9f:f5:71:a4:ca:30:53:a0:00:c6:8c:0c:ea:
                    85:80:05:32:c4:94:66:9c:38:70:5c:4f:7c:c7:4a:
                    27:d0:5e:4d:26:52:83:a0:ec:f9:01:89:be:b4:fe:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4A:4E:AD:43:AE:3C:7E:D7:37:20:2F:A1:88:89:54:84:C3:C4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d2570375-1dd0-318b-9bfd-cc729b4bd5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:41:56:00:f7:1b:78:e3:ed:ca:39:ea:eb:46:98:87:ee:28:
         be:21:06:08:24:99:14:31:16:00:ce:ce:26:e6:d6:96:85:c6:
         e7:52:6f:fe:8e:4e:a8:7a:96:42:ea:28:e2:bd:7b:61:65:84:
         29:64:61:ee:33:e3:4b:d2:19:b9:14:ff:1b:15:54:4f:3a:69:
         15:97:ed:76:61:13:bd:7e:0f:dd:c4:15:96:26:a5:28:56:78:
         8f:88:42:fd:19:64:23:cd:b9:43:d9:a1:19:c9:29:f3:8e:10:
         d0:f4:36:9e:b8:1f:c3:86:17:18:4f:c0:7a:b6:72:27:8c:88:
         9f:f3:2a:10:f7:6d:dd:52:de:2d:b1:8b:f2:05:84:44:46:3c:
         2f:09:6f:ea:07:b7:63:c4:36:79:9d:9b:6e:01:9f:02:f4:a5:
         6d:7d:44:6e:5f:11:01:c6:f6:5b:72:48:6b:3e:8e:7a:0c:18:
         2f:b8:af:8d:68:8e:7c:37:2c:80:15:66:23:be:94:c1:7e:5e:
         31:25:73:28:94:25:69:d9:f3:54:c1:ed:f5:c3:7e:cf:d2:b7:
         bd:a6:bb:79:0e:87:a8:68:e2:ac:70:4a:e2:d2:f4:e9:36:e1:
         38:ee:07:db:c2:5b:19:9d:97:4d:21:41:70:a9:cf:d1:85:a7:
         cc:69:ed:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:09:20 2024 by rpki-client on console-ams.rpki-client.org