Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/72a0b2b6-906d-3004-a2a1-69872504b8d1.roa
File:                     72a0b2b6-906d-3004-a2a1-69872504b8d1.roa (raw, json)
Hash identifier:          sfVdR+wrR0o1nAQT6VBA96fKnO4CSVZ8s5srJaai5ZQ=
Subject key identifier:   25:33:69:AD:60:28:C1:F8:1E:E3:4C:0D:AE:C6:4B:7C:69:48:80:73
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285845990BC7F2852A95D1134FD980
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/72a0b2b6-906d-3004-a2a1-69872504b8d1.roa
Signing time:             Fri 19 Apr 2024 13:28:29 +0000
ROA not before:           Fri 19 Apr 2024 13:28:29 +0000
ROA not after:            Thu 18 Jul 2024 13:28:29 +0000
asID:                     23470
IP address blocks:        128.254.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:99:0b:c7:f2:85:2a:95:d1:13:4f:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Apr 19 13:28:29 2024 GMT
            Not After : Jul 18 13:28:29 2024 GMT
        Subject: CN=b6e566f7-8682-4dac-b7d3-8516d7f24aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:30:74:9d:77:85:60:70:bb:e0:e7:25:c3:
                    e4:1b:84:6e:c3:b8:91:5b:41:63:d5:6a:a8:c9:55:
                    9e:b5:25:16:e6:0c:18:40:61:ea:fe:b1:e2:67:a8:
                    21:03:7a:20:d1:78:3f:0f:fe:c8:c7:87:30:12:ee:
                    f5:a9:75:38:9c:d0:7d:cf:88:3e:5f:ba:32:b9:a0:
                    29:cd:1d:d4:6b:63:96:7c:35:ad:9b:af:eb:70:94:
                    c8:5d:23:54:c9:e6:ef:ab:a2:97:a3:fe:1d:ca:7d:
                    e9:75:ea:98:8a:c4:c6:2c:16:18:e0:34:b0:b9:66:
                    3d:84:41:e0:a5:29:f2:1c:eb:a4:43:cc:a7:a6:3d:
                    0a:c1:67:92:fe:a0:3d:3b:02:5f:0e:3a:5a:0f:2c:
                    7f:11:c9:ac:90:05:0f:e0:20:c9:09:ce:88:bf:3a:
                    e2:c2:6b:79:d9:49:e2:72:62:a6:65:21:f3:8d:23:
                    ea:18:22:ce:4c:e5:a9:61:1d:47:f6:4a:2e:a1:f6:
                    7a:16:e7:a1:30:d4:35:86:42:28:8c:5b:3b:65:94:
                    8d:0d:4f:be:1f:57:5c:8a:fe:10:0c:7d:a0:62:dc:
                    f2:d3:8f:00:8e:8b:d5:24:ac:10:bb:0d:09:13:9a:
                    73:25:24:ea:bf:70:57:09:e6:2c:5c:2a:91:0f:2f:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:33:69:AD:60:28:C1:F8:1E:E3:4C:0D:AE:C6:4B:7C:69:48:80:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/72a0b2b6-906d-3004-a2a1-69872504b8d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:29:b2:3d:9a:74:5b:03:88:e8:e1:af:92:ae:d1:a1:1f:
         23:2e:5a:b0:ac:44:18:ea:f6:62:a1:c7:77:7a:a1:70:4a:41:
         00:75:b2:e0:f7:8e:2b:c4:dd:7a:7f:98:96:d2:a7:03:db:24:
         28:db:d9:df:67:c5:d5:c7:8b:a5:5b:5f:63:31:69:11:46:84:
         7d:ff:31:3b:37:87:1c:a8:be:18:e7:d1:15:a9:ba:85:21:10:
         ae:6f:0e:02:f2:a7:ad:40:d5:2c:83:59:8d:ec:e9:69:fa:27:
         23:7a:80:0a:73:8c:a5:c7:ca:be:83:aa:9b:58:70:6a:b6:b3:
         cf:25:15:d3:4e:76:69:e4:f8:72:42:dc:10:d1:16:69:21:cc:
         9f:f0:79:ed:0b:1f:f2:d2:61:62:17:85:52:8a:78:4f:7b:95:
         3d:ac:28:f3:d2:b5:0c:e4:71:9f:b4:5c:8f:23:12:12:d5:59:
         38:bf:a0:77:1a:23:ae:73:cd:d8:c4:5f:be:61:b9:d4:88:02:
         4c:7a:e2:74:44:d2:85:03:b6:8b:a0:45:87:7b:82:96:08:cb:
         5a:97:8a:5a:79:87:ef:8f:fd:78:70:03:d6:b9:14:52:d5:e4:
         3c:57:06:32:86:f6:42:df:04:d6:73:26:7a:0e:8d:06:03:87:
         5f:6f:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:15:48 2024 by rpki-client on console-ams.rpki-client.org