Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/c8f7ae4c-2181-3754-b041-341eb6d48710.roa
File:                     c8f7ae4c-2181-3754-b041-341eb6d48710.roa (raw, json)
Hash identifier:          NB4XujVq4cMyXI5uaQTC6Fg75gZSRtvkXqy8ZxuTWZs=
Subject key identifier:   FC:60:FA:46:AA:62:F1:3C:55:E0:D0:35:5B:05:CC:9A:32:FB:80:64
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F43285844E7D5406D46630E48B07D2E80
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/c8f7ae4c-2181-3754-b041-341eb6d48710.roa
Signing time:             Fri 16 Feb 2024 02:00:26 +0000
ROA not before:           Fri 16 Feb 2024 02:00:26 +0000
ROA not after:            Thu 16 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        204.8.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:d5:40:6d:46:63:0e:48:b0:7d:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Feb 16 02:00:26 2024 GMT
            Not After : May 16 01:00:26 2024 GMT
        Subject: CN=668fa881-74ce-4d05-9b71-c77684eb5083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e6:52:3a:fd:85:7c:b9:3c:4c:10:b2:e7:ce:
                    7e:c6:e2:ab:51:e0:11:16:20:61:72:82:f1:3f:b3:
                    f7:02:7b:1f:78:b2:30:59:5a:c2:d3:50:d9:a5:0d:
                    5c:e0:c0:13:5a:78:d3:79:08:33:7b:63:91:c0:aa:
                    98:f0:c0:97:df:42:81:a2:45:4d:ae:4d:57:f0:95:
                    3b:dc:16:b8:d4:c1:33:eb:7c:0d:8c:46:82:47:2b:
                    71:89:0a:fe:6f:57:49:9e:55:ef:b3:2a:c7:4c:bc:
                    24:0a:6e:dc:b9:a2:79:61:97:45:a7:90:26:a5:1c:
                    f6:8f:8a:f2:81:eb:d8:b5:a2:be:70:f5:97:3e:41:
                    8b:12:cc:48:d1:84:b8:77:c1:43:4e:63:ca:75:be:
                    f7:ec:83:80:05:a8:a5:4e:ad:c8:3d:36:fe:d6:db:
                    b2:63:40:5c:16:12:8c:71:f6:31:01:ab:4f:96:67:
                    99:ed:f5:28:0e:b7:71:ff:2f:8a:80:2d:be:e5:56:
                    ec:1c:3e:a9:58:29:3c:58:dc:6e:1e:32:3a:d1:c9:
                    af:c5:f5:03:2d:49:f7:f1:44:c9:13:e2:05:1a:79:
                    c7:8f:01:b0:4a:ac:8d:e8:fd:16:fd:be:91:55:19:
                    18:d0:b4:bd:71:0c:a8:3b:b9:04:07:a9:a0:f3:fd:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:FA:46:AA:62:F1:3C:55:E0:D0:35:5B:05:CC:9A:32:FB:80:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/c8f7ae4c-2181-3754-b041-341eb6d48710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:87:0a:59:ef:6c:4a:6b:87:d6:f1:25:cf:f9:f9:cc:ae:
         7e:82:48:4d:24:f9:eb:24:d9:79:0b:d7:20:4a:fa:09:fc:ec:
         60:3c:b3:de:27:6c:a7:15:51:c2:d9:9b:a4:82:e5:99:c8:dc:
         c9:ee:7c:7f:64:8e:18:af:19:c2:c2:22:74:98:a1:8d:2a:1f:
         2f:ce:06:86:4b:ea:8d:6b:b3:1b:c5:db:2b:19:a6:39:9e:b0:
         2f:89:e3:77:62:6d:14:13:b3:93:24:ed:40:7c:49:d5:c4:ab:
         30:61:d5:02:c2:99:39:96:54:dd:db:ab:7d:93:fd:0d:37:1d:
         36:59:a9:92:7e:96:98:95:16:1d:ba:3f:f1:c8:a4:f8:27:e1:
         0e:24:5e:7c:ee:83:c6:5e:c0:1b:fa:17:e4:11:da:3f:3d:e6:
         9c:4b:a3:81:c2:78:5b:b3:48:17:65:05:94:c7:6d:c8:1f:d1:
         08:21:ee:ba:52:17:71:44:bd:c0:10:d1:ec:20:51:b9:bf:76:
         4e:21:0d:31:4e:f6:5b:7a:9c:1e:ce:d7:5c:86:26:ee:9a:8a:
         a1:c6:c1:ae:af:7b:c4:2a:5c:45:23:18:ef:5f:03:5c:76:f1:
         97:2e:cc:fd:39:b8:a6:48:5a:6d:f9:1d:96:81:2b:8f:fc:0d:
         4a:2d:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:55:42 2024 by rpki-client on console-ams.rpki-client.org