Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/129d9c2c-1929-3537-ab83-96096b6debe4.roa
File:                     129d9c2c-1929-3537-ab83-96096b6debe4.roa (raw, json)
Hash identifier:          H776SefDWNzM+e133ogu8g60GJV1M13a5kSq9x2i+rk=
Subject key identifier:   9B:D8:FB:C5:75:20:71:86:7D:B8:91:10:95:4D:A3:61:66:D8:89:70
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858455A2D7EFC6D723523A429B820
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/129d9c2c-1929-3537-ab83-96096b6debe4.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     64267
IP address blocks:        168.91.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:7e:fc:6d:72:35:23:a4:29:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=783d72be-bd1a-4d8e-a6a6-5c1945ee65cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:68:a6:db:d5:04:c5:46:33:e4:b3:89:ba:
                    a1:ee:b2:76:08:1a:24:9c:46:19:1e:4f:c1:5c:27:
                    a4:6a:1a:36:16:f1:6c:1c:36:31:04:cd:8f:2e:c6:
                    50:3f:e0:4c:cf:11:05:26:22:b6:c7:d6:9e:b0:a5:
                    c3:d5:68:43:44:6e:af:56:19:e4:38:11:3f:02:40:
                    f7:04:7d:b7:40:18:0b:d4:27:8e:8b:07:cd:29:8e:
                    0c:4e:c5:e9:65:38:67:e5:d4:f0:e2:59:35:36:9d:
                    dd:1f:c6:c1:93:c6:15:36:b1:7a:97:32:f0:f2:55:
                    c9:97:b2:49:6b:34:de:75:25:cd:ef:ee:c0:c6:c0:
                    d8:16:9c:37:d9:cc:01:13:0d:5a:28:c5:e0:12:89:
                    65:cf:aa:06:ca:fe:79:80:cc:fe:1f:1b:0d:bc:59:
                    3e:18:4c:a3:ca:b2:0e:3b:61:f9:86:a3:52:12:86:
                    15:1a:6d:08:d2:04:1f:7d:93:03:e7:b8:4b:21:39:
                    41:1b:a4:50:74:ea:39:e8:f1:70:6a:86:21:99:a5:
                    f7:ba:fc:1f:6d:19:8d:65:59:0a:a0:b0:44:ff:12:
                    b6:cd:9e:dd:52:df:90:fe:6c:12:4f:39:38:59:a7:
                    5c:54:d7:a0:26:28:04:1a:e4:61:7a:9b:ef:f2:0e:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D8:FB:C5:75:20:71:86:7D:B8:91:10:95:4D:A3:61:66:D8:89:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/129d9c2c-1929-3537-ab83-96096b6debe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:89:0d:19:8b:b9:73:f5:a3:6b:e0:9a:44:54:dc:dc:bf:96:
         42:54:76:46:39:5c:38:7c:ff:0b:2c:2c:24:20:39:56:35:cd:
         27:be:3e:7c:30:54:9a:84:1c:8d:e8:aa:81:53:a7:d9:90:be:
         03:33:d9:d3:85:86:06:8d:8f:ee:d7:59:ab:d3:71:07:44:41:
         d6:19:76:d0:41:8d:a3:e7:71:3a:38:7c:f2:c5:d1:5f:e9:c2:
         04:a7:ad:a1:b8:5a:25:0a:30:b8:1b:58:72:6c:85:af:57:0f:
         53:f6:8e:7c:9e:a3:6d:a0:a5:43:93:5f:8c:43:8d:1c:a9:9c:
         d2:1e:1a:02:79:98:ba:ce:f0:8f:2d:a5:54:b0:4e:0b:d6:41:
         5b:a2:19:45:4c:82:74:5d:3e:73:74:70:6d:9e:19:da:60:b8:
         05:3b:79:2c:e2:c9:85:c2:70:3f:10:dc:3b:3f:b0:68:e1:ee:
         f9:38:f1:df:16:b2:71:23:df:4c:18:5f:7c:4b:c9:09:5b:3e:
         7e:de:71:9f:0e:58:a8:e3:e6:31:28:7a:0a:f4:06:c0:e0:d5:
         f2:82:d0:26:9a:72:e3:c1:bd:c2:01:44:2f:6e:43:8c:b8:bb:
         bb:06:f6:cb:26:23:88:79:18:6b:3f:ca:84:42:60:19:f5:09:
         fb:f9:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:01 2024 by rpki-client on console-ams.rpki-client.org