Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/27ec9d3e-9b79-3fac-905d-95506eff6506.roa
File:                     27ec9d3e-9b79-3fac-905d-95506eff6506.roa (raw, json)
Hash identifier:          uevDTuBN2nBDyRG5wKw+lRG+AksSNbT0T8R0zFjIi3M=
Subject key identifier:   C2:65:4B:B0:15:E0:E6:4A:20:CA:F4:7A:F9:3F:69:96:01:97:37:D9
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F432858457A488E26E3F9E05D3F1E7600
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/27ec9d3e-9b79-3fac-905d-95506eff6506.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     22438
IP address blocks:        208.92.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8e:26:e3:f9:e0:5d:3f:1e:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=ec2f6062-27af-4509-8b1b-8e8ee3f3035b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:bc:51:4d:a8:20:30:c9:a1:0c:f7:ac:2c:
                    e0:86:d9:45:c3:3d:58:1b:86:f4:de:5f:b8:35:f2:
                    74:8d:bc:4e:bf:c2:ed:32:5f:fa:d2:94:9e:14:8f:
                    ad:5b:fc:de:28:f0:a9:ca:fa:02:cf:7e:7b:d4:48:
                    e9:a4:4e:29:01:5e:ba:d9:02:69:4f:b3:d2:c1:2d:
                    a3:8c:ad:d3:9c:63:e6:b4:83:06:8e:bd:4f:3f:ec:
                    59:82:1f:63:fc:b9:8c:46:17:da:f3:61:f1:18:bf:
                    3e:4c:1b:b2:a3:b4:a1:33:fe:6c:a7:8d:d4:3a:e0:
                    35:90:40:a3:e6:39:63:d0:5e:6e:d5:34:7b:38:ec:
                    b1:35:a4:5b:6e:c7:ab:d7:33:58:96:07:66:f8:ea:
                    b3:b4:25:14:45:27:59:90:c3:16:59:1b:19:24:7d:
                    34:10:f9:96:82:e1:18:de:18:55:d0:d7:0f:fe:d1:
                    07:e0:50:8a:ad:7b:91:b5:4b:80:42:0f:8b:9c:43:
                    2a:d5:73:89:74:30:8e:a6:53:50:8c:9c:4a:5f:cc:
                    22:67:c7:89:cf:53:89:d8:c3:d9:97:4b:74:f5:83:
                    c7:e9:79:e8:7a:01:d6:5b:b2:72:3d:fa:23:55:34:
                    8f:ab:54:53:46:74:43:66:91:e5:41:c0:81:eb:96:
                    5e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:65:4B:B0:15:E0:E6:4A:20:CA:F4:7A:F9:3F:69:96:01:97:37:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/27ec9d3e-9b79-3fac-905d-95506eff6506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:35:22:db:69:a6:23:86:0e:df:d8:44:6c:76:99:b0:34:
         0c:b3:23:6f:8c:53:e4:c2:66:15:ca:3d:ff:d2:1c:e0:51:ac:
         a6:50:51:b7:9c:01:98:1b:2e:90:87:d2:85:f8:00:69:46:cf:
         d3:f3:54:80:08:2f:81:1e:08:3a:3a:c0:d4:bc:35:28:15:e0:
         b8:81:ad:51:22:16:0e:ea:a6:5b:ca:46:a5:d6:b5:fd:0f:72:
         fe:c1:af:6e:4b:80:22:c9:b6:d1:48:8a:25:e4:be:4b:6c:5f:
         bf:29:f5:6a:70:1a:a3:ff:f9:0d:68:10:68:db:80:c0:2e:03:
         69:f1:36:5c:61:a3:e0:90:de:a4:da:19:ff:0a:88:e9:79:c5:
         c2:1d:a8:e9:4f:a6:2f:55:79:16:b4:0c:76:e9:3d:30:0c:c5:
         8d:b3:de:e4:b4:aa:e6:87:91:6e:17:39:19:40:4e:4d:60:12:
         b1:28:dd:e7:51:94:0d:30:da:24:aa:c4:e9:6a:f0:c9:28:56:
         7b:1a:89:d1:9b:c4:21:ab:71:02:66:31:01:fd:aa:4d:ac:92:
         40:21:50:91:06:9f:3f:63:f0:21:f1:f0:79:80:1c:f3:97:1b:
         0e:62:a1:d2:56:8f:e0:e2:71:0d:27:c3:9d:9d:46:9b:16:e6:
         14:b9:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:56 2024 by rpki-client on console-fra.rpki-client.org