Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa
File:                     3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa (raw, json)
Hash identifier:          z2uQ7SKxSjV7Hc894l8+oHYZbMMQBm2rfgGMX0QyT8s=
Subject key identifier:   28:28:AE:70:78:11:54:85:E8:A5:29:E4:86:69:29:57:B9:2C:7D:10
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F43285845840DD03093AD87EBD5031D9A
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     46741
IP address blocks:        216.228.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:d0:30:93:ad:87:eb:d5:03:1d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=a7c16b43-c616-4d00-aeb6-a3546b347133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a9:7c:db:68:82:6d:92:46:06:c1:a5:ad:ed:
                    bf:52:51:da:24:05:c8:6f:66:52:0e:8f:c4:5a:e2:
                    d8:47:d9:d3:ce:e0:0a:a4:fa:38:18:77:ce:41:66:
                    5b:d5:45:6f:f0:5d:25:15:f9:bf:e7:b2:ec:c7:26:
                    e1:73:42:f1:fc:3f:3b:76:e1:82:be:02:fb:73:92:
                    17:b8:4d:2b:4e:13:53:7b:b6:f6:f8:4c:7a:d5:a0:
                    a3:cd:7f:5e:33:47:85:63:1c:91:d1:2d:36:4c:dd:
                    7e:6e:99:87:4a:12:5a:be:af:0a:ca:de:d1:c0:b5:
                    79:55:01:07:c5:be:ca:a9:69:cf:d4:44:b5:4c:b4:
                    db:50:66:f9:72:eb:6c:b3:c8:8c:93:66:45:f3:84:
                    8e:2f:6c:7f:fb:60:99:a9:8b:1d:f1:1d:27:2e:df:
                    e6:21:a7:43:04:bc:6d:4f:35:f6:96:40:15:95:4f:
                    30:29:d0:bb:75:aa:c3:a1:20:54:cf:85:b2:10:b5:
                    43:47:46:63:07:bb:fd:16:7b:a7:03:b5:12:46:f4:
                    46:5d:e7:68:94:ea:88:8a:e3:15:1f:c3:be:61:71:
                    b1:a5:c6:cb:d6:f3:77:b0:59:23:e6:cb:37:6d:a3:
                    71:7a:3e:d0:29:df:91:d8:0e:ef:4b:a2:e5:96:8a:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:28:AE:70:78:11:54:85:E8:A5:29:E4:86:69:29:57:B9:2C:7D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.228.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:aa:67:e0:b5:6a:c2:0f:d1:27:d3:d1:85:29:1d:ae:60:82:
         1d:ab:5d:b5:34:68:ef:0d:c1:b7:98:c6:89:8b:2a:78:85:0b:
         ff:05:f2:49:76:0e:e8:79:40:54:6c:1d:d0:c2:1b:77:2a:d5:
         75:22:e6:eb:6a:0a:9d:5a:2f:58:6c:e7:ad:cf:fc:5f:c3:d2:
         a0:ab:55:3a:bf:c9:41:73:00:57:33:a1:ca:09:1b:49:bd:4d:
         9d:c8:dd:22:86:2e:f9:49:ef:09:d9:e8:2b:2f:1a:dc:23:7a:
         fe:da:f1:7f:b7:b3:9d:9a:7a:92:cb:11:22:c5:a7:4f:aa:bf:
         36:8e:59:31:e5:1e:da:e3:3e:4c:ce:09:89:08:c7:eb:2e:43:
         ba:1c:45:d2:d1:d7:6f:62:63:e1:f7:38:75:55:89:22:c7:55:
         93:80:29:9e:6d:51:d3:f7:88:79:b4:4d:ad:03:8e:22:8f:3c:
         d5:5c:34:92:4a:67:df:9c:8e:54:65:88:48:69:a3:65:50:4d:
         5d:2f:37:1c:c5:a9:ce:58:a0:3d:09:86:d9:d6:03:fb:ea:e0:
         21:44:c3:c0:12:8c:e1:6f:a6:18:74:ed:9b:8d:5d:63:a6:11:
         0b:70:28:b6:a1:9c:9e:7d:74:6c:59:e7:7e:45:fa:94:13:0e:
         38:c6:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:42 2024 by rpki-client on console-fra.rpki-client.org