Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ab4f47a-c323-3cd1-be3f-9758762a20f6.roa
File:                     0ab4f47a-c323-3cd1-be3f-9758762a20f6.roa (raw, json)
Hash identifier:          Tg2cbsjGxREfrlS5TNMu3BGipF8sNtjD5t4yMw1GAaY=
Subject key identifier:   15:9D:72:2B:71:44:9F:41:F1:6F:96:50:0E:BA:F2:9D:7A:54:97:C9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D837C33D998A2EC9AAE00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ab4f47a-c323-3cd1-be3f-9758762a20f6.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     64267
IP address blocks:        216.180.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:83:7c:33:d9:98:a2:ec:9a:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=74906fad-fb48-492f-b681-65a27cbb2e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:c2:28:73:4b:4f:fa:f0:11:6b:f5:36:f8:
                    09:d3:60:f1:b6:50:2c:66:c1:3d:52:42:ca:5a:ed:
                    bd:ff:8b:47:49:b4:f0:3a:5f:0e:8e:6f:f9:43:f2:
                    59:72:4e:e5:67:25:c9:e5:34:ff:7e:27:d6:58:0e:
                    d2:71:21:c6:26:51:02:05:58:2b:c7:ac:63:43:23:
                    7c:69:bd:52:15:e0:91:8b:b4:93:a8:d2:eb:e0:8b:
                    c7:d9:e4:73:7b:b1:6d:fc:cc:32:d6:a9:39:d4:c3:
                    cb:63:9a:cc:bb:3d:d4:d1:18:64:db:da:68:f6:08:
                    4a:68:81:92:79:71:c7:16:cc:16:c4:54:45:84:d3:
                    6e:2f:09:b2:28:f1:4e:aa:24:2a:cb:a2:68:ff:55:
                    06:c4:de:da:9a:34:ec:e5:91:b2:ca:d6:f4:7a:30:
                    91:b3:03:00:f5:f3:a9:53:5c:00:75:d1:42:94:7c:
                    3d:73:3e:ea:19:6d:21:75:f7:c2:71:fb:14:ef:0e:
                    f7:ff:cb:b3:4e:ed:8a:3a:b3:38:f6:6a:8a:5f:91:
                    44:e6:9f:31:4b:db:0d:da:03:b6:33:25:f4:8c:14:
                    2d:11:38:ec:f4:1d:09:77:6a:0a:f3:bb:4c:de:be:
                    2b:99:8e:aa:07:50:12:f5:41:7c:ed:f3:3f:d6:88:
                    8b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9D:72:2B:71:44:9F:41:F1:6F:96:50:0E:BA:F2:9D:7A:54:97:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0ab4f47a-c323-3cd1-be3f-9758762a20f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:70:d4:b5:e4:f1:22:12:9a:02:d0:16:8f:95:93:05:18:5c:
         8f:a7:2f:30:e0:26:b9:46:0a:6f:fd:cf:78:cb:e2:58:3d:fc:
         d9:3a:c3:6a:43:43:82:2b:22:90:db:02:22:79:90:df:19:30:
         9a:b2:9b:63:ff:4a:61:11:ec:28:6e:9c:28:2b:ef:8f:5e:f9:
         8b:f5:9f:4e:9f:6a:0e:6b:84:db:b7:f8:5b:68:4c:bd:10:d3:
         b4:9a:4c:76:30:31:f8:16:65:04:a0:0b:25:ef:13:5f:12:6d:
         9d:1a:47:72:d9:4d:d1:5a:b7:62:25:bc:4f:86:c1:3e:fd:c4:
         d6:66:f1:fc:37:74:fe:35:42:f0:a2:b8:41:fc:02:65:3d:92:
         9d:6e:41:7b:67:eb:94:9c:e9:c0:24:94:03:85:d4:1a:4c:c4:
         11:cc:14:7c:0b:dd:22:60:a8:60:eb:75:1b:87:f7:5b:4f:21:
         af:62:31:0b:1d:ef:50:51:2b:ee:01:3c:21:2e:bc:30:74:35:
         f8:6e:47:eb:bb:6b:43:b0:b4:c5:85:27:92:2b:43:9c:ad:ba:
         fc:70:4f:21:f7:3f:c3:ff:eb:7c:5a:ef:a5:ef:2d:5c:c3:fa:
         b4:f9:d7:36:27:a6:9f:4c:7b:4a:ea:7d:6b:2e:3e:0e:e9:de:
         20:08:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:01 2024 by rpki-client on console-ams.rpki-client.org