Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
File:                     17acb471-f0ec-3752-90a5-05f953ebd85f.roa (raw, json)
Hash identifier:          O04eV2zRAoJLEXQA1XhkluEPJGo/haxKnCupKW+7RzQ=
Subject key identifier:   2A:4D:1F:AF:4B:DB:5B:39:89:E5:B7:5E:02:1B:92:B7:E1:6B:B8:96
Certificate issuer:       /CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Certificate serial:       010D0C9F432858455E5D9DBE872F059CA3421D60
Authority key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     36352
IP address blocks:        128.254.228.0/22 maxlen: 22
                          162.245.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:9d:be:87:2f:05:9c:a3:42:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=644aa4c1-7851-4246-9e1c-486ec7d93cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:1f:b6:dc:c5:ef:3d:99:98:1a:11:a0:d3:
                    bb:35:91:f3:bf:de:19:91:4b:38:5d:f5:b7:12:47:
                    20:7f:bc:13:ae:f9:38:c4:76:83:a4:f3:e7:ef:36:
                    0f:7d:f2:c9:5b:95:00:78:d1:e5:00:b2:9f:ba:68:
                    1e:9b:3c:a8:54:ac:f5:b7:ca:41:ba:79:31:79:e1:
                    10:60:1b:ff:ed:44:ed:42:c2:4c:54:4e:30:1d:49:
                    70:0c:20:2a:0e:ad:fd:00:c5:f6:03:5b:51:96:cc:
                    ff:19:4e:06:1b:1a:6f:88:3e:13:c2:10:3a:45:84:
                    73:4a:8a:bc:b9:13:c6:d1:5f:14:f6:55:aa:c8:9f:
                    f9:9d:49:22:b7:ea:52:f6:dd:d7:b5:cf:b1:d8:59:
                    6d:eb:69:93:e7:08:72:0e:34:98:dd:9f:df:7a:f5:
                    b0:f8:7b:81:6c:e4:74:be:02:e0:66:25:49:f7:3e:
                    3f:13:9a:da:96:29:20:9e:d1:66:86:3f:a5:79:33:
                    44:5c:49:13:a9:bf:f2:33:f2:0c:8a:13:a9:c8:88:
                    e4:ca:98:b0:00:bb:f4:7f:08:01:8c:57:20:2a:8b:
                    22:1c:e2:33:f5:b0:16:d8:68:21:c4:da:84:8e:eb:
                    99:bb:1c:18:58:89:64:05:ed:93:97:a1:3d:1b:e3:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:1F:AF:4B:DB:5B:39:89:E5:B7:5E:02:1B:92:B7:E1:6B:B8:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl

            X509v3 Authority Key Identifier:
                keyid:E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.228.0/22
                  162.245.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:7f:de:6c:a0:9d:c2:c4:e3:af:5f:83:86:0d:2b:71:37:
         b1:23:74:47:ca:6a:75:c3:18:3e:e9:a6:86:14:02:84:39:4d:
         7b:8c:4e:24:d3:28:1f:e2:08:7e:f7:59:10:54:a7:b4:5b:c6:
         69:29:05:50:4e:53:93:a8:18:ab:22:31:37:94:fa:04:40:27:
         2a:85:bb:ec:a8:2c:83:c9:62:d7:21:fa:ad:69:5d:c1:bd:27:
         b7:0b:39:03:f6:b5:94:12:5f:8c:0f:27:3e:da:0e:d8:6c:12:
         df:f1:8d:e1:86:a0:40:77:39:42:8a:19:35:b9:70:75:45:cb:
         e8:0a:7d:2a:3b:a2:c5:70:dc:69:2e:3c:49:be:1c:8b:c5:d6:
         94:f0:2b:3b:fd:ec:d9:b5:9d:90:2e:ff:c3:68:d7:d5:5e:de:
         6f:9f:f1:45:74:97:eb:90:ec:ae:e9:49:59:60:02:f9:d5:02:
         3e:52:8c:fc:e1:80:c6:94:a9:77:14:34:d5:8a:99:f5:74:a9:
         63:0c:ae:48:25:44:f4:60:f4:b8:b3:bb:7d:e4:db:6c:ca:ff:
         4c:66:cc:f6:17:ba:b2:87:7e:6a:07:e3:41:69:5d:03:e6:d3:
         3c:c1:77:6d:47:9a:4a:60:11:2f:5f:38:dd:9e:a5:11:f2:da:
         47:8f:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:37:05 2024 by rpki-client on console-fra.rpki-client.org