Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
File:                     02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa (raw, json)
Hash identifier:          wUSkI1iU+IcaZ2qLKI+7U1+qJu4R+U7erckvffQDXjc=
Subject key identifier:   33:8F:02:70:EE:44:09:EE:4A:C5:7F:DF:BD:65:3C:9E:6E:C0:29:DF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858471A4064E5B81FB2371AC69CA0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa
Signing time:             Wed 04 Sep 2024 13:00:41 +0000
ROA not before:           Wed 04 Sep 2024 13:00:41 +0000
ROA not after:            Tue 03 Dec 2024 14:00:41 +0000
asID:                     64267
IP address blocks:        168.91.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:64:e5:b8:1f:b2:37:1a:c6:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  4 13:00:41 2024 GMT
            Not After : Dec  3 14:00:41 2024 GMT
        Subject: CN=d4846c2b-a4b0-4585-bfc7-f5e0f98b0c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:47:c7:4e:95:e6:64:ee:4b:3c:0d:79:0c:
                    fe:09:a2:48:88:65:ae:46:84:6d:5e:13:50:8b:93:
                    54:53:f5:fb:65:a7:89:6b:eb:73:8b:64:51:b8:9e:
                    60:f5:72:26:35:1e:68:9e:5a:9c:30:ff:2f:47:de:
                    5f:30:7c:11:09:7e:50:5c:fe:51:c1:64:8d:d6:c2:
                    2e:f1:10:6b:c6:7a:fc:4d:22:b0:f9:a0:bd:dd:97:
                    c3:18:26:4a:8a:58:7f:05:ae:e5:22:ab:82:88:57:
                    7f:4a:23:0d:8a:5a:27:25:e3:0d:96:88:86:37:25:
                    23:09:5b:ea:76:1e:07:03:0b:20:37:26:c5:05:ec:
                    ef:5b:62:05:20:5f:bd:5a:02:80:6d:fe:12:db:4f:
                    ca:05:84:18:a4:78:89:87:2f:f1:ca:c4:b3:d3:4e:
                    fc:de:a0:69:36:d7:1d:84:96:6b:f9:6b:99:d7:b6:
                    ff:06:1e:b9:ca:fb:27:3c:b5:d5:9f:2c:8c:c3:f8:
                    d3:e2:61:3b:a0:b6:d8:72:8c:96:2c:1c:8d:96:81:
                    a2:ca:cd:09:48:e3:21:ff:a5:48:3e:29:b6:f9:6f:
                    26:f5:91:96:54:a6:46:5a:f2:0e:6b:14:fd:7c:f3:
                    08:15:57:43:b7:e5:30:99:f1:30:1c:41:1a:12:d0:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8F:02:70:EE:44:09:EE:4A:C5:7F:DF:BD:65:3C:9E:6E:C0:29:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/02b4b5be-576c-320c-8c47-29c2b07fdd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:fa:02:10:42:b1:0e:94:92:7f:ee:1c:ab:8a:d5:1e:d8:6d:
         48:19:b2:92:64:da:fe:c5:33:d0:a4:cc:23:85:03:95:49:f2:
         15:31:69:db:4c:74:1e:ec:61:4f:24:cb:84:74:09:e6:76:45:
         d4:be:d9:be:53:25:59:d5:87:e6:4f:d2:56:77:20:00:4e:ef:
         88:9c:e0:12:47:2d:46:ab:22:17:ce:73:d6:be:af:a2:60:bf:
         d3:c6:46:c4:33:ba:4f:7e:e3:45:3d:2f:af:e1:9c:95:5a:2b:
         d4:82:75:66:1e:4c:59:cc:70:7c:d1:ac:8c:a7:9d:05:da:65:
         1a:55:e1:51:7e:96:8c:a4:be:72:79:4a:f5:a2:96:63:af:ef:
         6d:d4:94:a7:0d:d5:4b:c3:a1:b1:97:ef:a7:3b:c4:35:1a:f6:
         60:68:7a:92:31:8d:ae:a6:52:b4:7a:5c:74:b2:9d:19:41:ff:
         5a:1c:d4:22:b7:34:9d:35:29:f2:f2:40:e0:12:9b:c9:65:db:
         63:d8:db:ef:90:15:d3:c1:f1:4e:8e:8c:91:c2:5f:f1:66:52:
         8f:30:bd:4a:da:de:bc:25:f3:d0:30:34:69:9f:4b:a8:43:aa:
         16:75:90:f6:7f:78:fc:c9:0a:15:10:23:d5:f5:b5:a4:13:3a:
         9c:66:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org