Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa
File:                     b33f9824-1d22-3c11-b98f-82918021c09b.roa (raw, json)
Hash identifier:          cSXKdBDBJqEgVzhxxUQZ+ejJmsz+/VGs6OsJDAxqoas=
Subject key identifier:   E3:35:AC:09:2A:9C:F3:6E:FA:88:2E:F8:D2:B2:F8:98:67:12:93:A1
Certificate issuer:       /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Certificate serial:       010D0C9F432858455E5DA66EC969CDA238253D00
Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     53429
IP address blocks:        199.68.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a6:6e:c9:69:cd:a2:38:25:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=fade00e9-cd76-4111-bee6-9f52b3938105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:d7:31:93:c4:4b:74:b6:e4:e8:c7:c8:44:
                    be:a3:4f:93:05:6f:0b:08:13:ac:8e:b8:49:c9:0c:
                    1b:c4:57:1b:d0:f5:97:3f:4b:c2:93:dd:80:87:c8:
                    92:a8:50:85:91:d9:19:78:69:ec:4a:14:e2:e6:0c:
                    bc:6b:b5:8e:37:67:a0:ab:70:99:04:40:0b:db:24:
                    52:b9:f8:5d:a1:0d:e3:cd:39:31:fe:a7:22:c8:a8:
                    b0:69:e7:87:bf:39:c6:02:5d:d7:f4:b5:b3:a3:38:
                    95:74:68:9a:e6:cc:81:83:2b:54:3d:2e:ff:34:98:
                    e6:86:67:fd:3a:02:61:1d:d8:92:b9:d8:1a:9b:59:
                    ff:5b:63:43:2e:c8:df:fb:9e:d8:22:b9:2f:83:95:
                    2c:07:42:48:1a:69:90:98:a8:1f:8a:19:36:db:00:
                    0f:84:69:bb:dd:5b:4f:db:e7:11:4a:e1:d2:c9:a5:
                    0b:e3:34:dd:35:7e:ba:e5:c8:87:a5:c0:75:da:71:
                    17:1f:82:5c:db:cb:54:76:b9:3e:c6:af:d2:fd:8f:
                    9f:2c:c1:30:4f:34:5f:d8:af:76:da:55:97:e5:bb:
                    48:b7:df:dc:76:f4:2c:ed:22:a4:42:78:c3:63:24:
                    c0:6e:ca:fe:7c:0f:32:79:b4:18:d2:a0:a2:b7:55:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:AC:09:2A:9C:F3:6E:FA:88:2E:F8:D2:B2:F8:98:67:12:93:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl

            X509v3 Authority Key Identifier:
                keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:72:d6:51:98:88:94:60:c6:5c:bd:01:ae:67:0c:1e:2f:fe:
         f3:6b:6c:5e:3f:b0:21:3d:40:9f:22:62:cd:27:77:07:a8:a0:
         6a:08:6a:97:9f:e2:05:41:8d:3d:da:02:63:02:b4:5f:4b:6a:
         3e:2b:db:49:7e:f3:38:60:f3:bb:f1:95:6e:23:e6:60:ed:d1:
         fb:60:26:12:9e:bf:81:14:4b:aa:8d:fc:49:05:f3:8a:1b:4d:
         b8:29:7e:61:82:81:24:f6:ea:c9:1e:ff:fe:3d:68:87:00:d9:
         50:ef:55:e4:1e:32:e2:1d:87:e1:e8:00:8a:82:98:85:42:aa:
         a5:ff:8f:3a:60:f2:eb:c6:b3:6e:94:f7:a0:7e:a3:36:dc:45:
         3d:6d:3f:f8:d1:06:29:dd:e1:b7:a3:e9:80:b1:c5:28:fd:af:
         56:ad:4d:98:e3:80:73:a9:2f:3d:23:01:c2:35:e8:9c:fe:c4:
         6f:b5:44:10:44:fe:08:f4:26:1d:9a:23:4f:dd:43:7e:ff:ce:
         b3:6b:ba:11:32:5b:98:4b:e2:bf:cb:10:8e:cb:56:99:ec:4e:
         82:62:73:18:62:5c:63:06:b7:00:57:13:07:db:5d:24:1e:6b:
         4b:85:13:77:d3:7f:9b:0e:39:62:0e:df:4c:22:29:d1:07:94:
         10:ac:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:30:10 2024 by rpki-client on console-ams.rpki-client.org