Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/108b52f0-3e55-31e9-95fb-938fea461438.roa
File:                     108b52f0-3e55-31e9-95fb-938fea461438.roa (raw, json)
Hash identifier:          vhNMNC4GblIGXGF/BZBerSPSgO5Pi5mlYnOg1oesRUA=
Subject key identifier:   79:36:15:1F:87:16:8F:BC:F6:AC:6F:BA:46:D7:A2:8E:AF:F6:55:F9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847EF91705C817521039577C800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/108b52f0-3e55-31e9-95fb-938fea461438.roa
Signing time:             Tue 19 Nov 2024 22:51:11 +0000
ROA not before:           Tue 19 Nov 2024 22:51:11 +0000
ROA not after:            Mon 17 Feb 2025 22:51:11 +0000
asID:                     397630
IP address blocks:        216.230.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:91:70:5c:81:75:21:03:95:77:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 22:51:11 2024 GMT
            Not After : Feb 17 22:51:11 2025 GMT
        Subject: CN=5537ec06-1f04-49db-8852-ad77e9864fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:37:48:02:3c:6d:d1:dc:b6:82:02:07:9b:11:
                    26:aa:57:5d:15:69:b4:68:8e:cf:54:5c:06:6a:80:
                    37:50:16:58:42:96:a6:b8:71:95:ca:4d:c4:e6:68:
                    76:9f:be:e5:cc:46:27:51:e7:42:ff:24:15:28:8a:
                    c2:52:6f:cb:74:d5:8f:a3:60:ed:4e:79:ab:48:a3:
                    06:e2:90:cc:73:30:e6:18:e2:f4:21:b8:05:5e:9a:
                    18:11:83:22:d7:68:02:e2:c2:9d:46:a2:97:4c:a1:
                    3e:7e:52:d5:3c:7f:9c:18:c5:cd:09:0a:41:4d:23:
                    a9:11:30:16:20:12:02:c0:f5:bd:a1:1c:8d:d5:94:
                    71:d4:f5:26:75:1c:20:e0:34:00:1b:fb:72:55:cc:
                    5f:9b:56:32:fd:ab:3b:36:4c:04:34:ef:7e:4e:90:
                    7a:86:0a:24:b4:e1:1c:64:c1:c1:53:a0:02:22:4e:
                    b8:63:42:79:d1:4a:c9:c3:d7:37:c9:6a:8b:b7:56:
                    c9:49:35:cb:46:ba:66:77:0d:64:a6:d7:a8:9c:75:
                    0e:ce:a2:e8:f9:e6:3b:ed:7c:76:00:c2:28:6c:ae:
                    61:c2:d4:c2:b4:92:0b:2d:d6:c6:7b:ae:ea:3e:f8:
                    a4:ff:ad:d5:c1:37:fa:f6:39:c0:57:31:ba:58:5f:
                    f3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:36:15:1F:87:16:8F:BC:F6:AC:6F:BA:46:D7:A2:8E:AF:F6:55:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/108b52f0-3e55-31e9-95fb-938fea461438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:16:7e:7e:3b:95:77:78:8a:03:2d:6b:ee:7b:65:40:20:d4:
         fc:0d:77:cf:ef:c8:c8:76:db:db:82:8a:f0:e8:57:a3:8a:60:
         1c:59:9c:9d:b3:21:a1:c6:9d:6c:e8:aa:6c:20:52:f4:0a:81:
         93:f1:f6:48:38:98:df:a6:cf:84:89:79:e0:15:a2:98:41:e3:
         66:f7:8d:75:55:99:8a:da:e2:96:c8:44:61:10:38:a4:57:e3:
         b3:b0:13:4c:35:ea:1f:a2:9a:94:60:d7:29:62:0e:4b:d9:1a:
         b2:c4:e7:10:39:ee:9c:3f:59:4c:b2:60:9c:c7:7c:2f:ba:08:
         05:bc:0c:e1:5a:ba:b2:c1:de:2e:d8:b6:2a:0e:97:4f:aa:fd:
         10:15:2d:05:5d:35:e5:97:19:91:b8:22:be:05:53:f9:f2:25:
         e0:56:d3:b9:13:39:72:aa:e5:14:ea:7b:cb:a9:62:64:1b:00:
         bb:a5:11:91:fd:d1:e5:c7:23:97:0a:b5:18:2d:1b:7a:6f:0d:
         2d:69:9a:4b:58:ce:27:86:7d:5a:94:01:ab:a2:5b:58:44:c4:
         2c:03:69:25:ad:e1:a0:e9:9b:14:9d:0e:2b:5e:a6:93:65:52:
         44:89:21:40:ad:d5:c9:20:97:65:d1:8c:54:fe:eb:18:04:39:
         bc:a5:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:20 2024 by rpki-client on console-ams.rpki-client.org