Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/15d5fcae-12a1-3ba9-bea7-7aadf1f55864.roa
File:                     15d5fcae-12a1-3ba9-bea7-7aadf1f55864.roa (raw, json)
Hash identifier:          4Qqyaz9oYa1CH4aF+2D0uwjpryzeZGhzhmiUPg/Z15U=
Subject key identifier:   6F:46:9E:D6:65:D9:76:FE:BA:FC:75:B7:6F:BB:56:30:A1:82:C0:73
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584558C846B3D4D1820F203F3500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/15d5fcae-12a1-3ba9-bea7-7aadf1f55864.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     64267
IP address blocks:        158.62.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:46:b3:d4:d1:82:0f:20:3f:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=45033aef-0397-43af-b7f3-586872adb35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:08:9e:03:0a:2b:04:de:49:d5:d0:c9:4f:
                    8a:02:92:d6:27:38:41:56:6e:b0:87:ee:7c:6a:92:
                    2b:dd:19:a1:bf:df:0e:8f:ad:0a:5c:42:95:96:8b:
                    32:17:3b:9f:24:0a:dd:ea:e2:2f:9b:46:7f:fb:f7:
                    3a:96:97:7d:ed:7f:ce:bc:f8:bb:4a:02:ac:4b:56:
                    01:9e:b3:7a:e0:b3:74:16:6e:7f:b4:85:79:94:2a:
                    75:c1:e7:87:fe:5c:73:b5:98:99:7b:5a:89:cf:2b:
                    76:28:b0:24:f4:4a:8d:8a:89:5f:a7:d7:ea:14:62:
                    20:7e:67:1e:2a:e1:b2:34:0b:4f:f0:62:af:12:da:
                    93:13:34:98:d8:0b:0a:e7:fb:9a:52:2c:4a:0f:64:
                    b9:45:fd:47:c8:01:90:b5:a9:fb:db:f8:51:94:e9:
                    46:25:6d:b0:93:3c:da:87:eb:48:85:19:31:69:89:
                    90:f7:06:84:2e:20:80:96:68:a3:75:5d:6a:4e:d3:
                    63:43:45:0a:d1:6e:cf:30:db:01:98:45:3c:34:2d:
                    db:90:ea:06:66:72:42:76:96:5b:9e:f1:9d:ef:63:
                    c6:1e:e1:8e:07:83:40:0c:74:ae:20:76:9f:fc:76:
                    c8:ea:20:5c:8e:64:ca:ad:79:8a:c5:7f:2e:1f:af:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:9E:D6:65:D9:76:FE:BA:FC:75:B7:6F:BB:56:30:A1:82:C0:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/15d5fcae-12a1-3ba9-bea7-7aadf1f55864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b4:27:8e:41:1d:1b:45:7e:f7:32:f2:f6:7b:c8:82:7b:0c:
         e1:bd:2e:37:a1:3c:90:aa:57:6f:3d:06:f4:db:91:08:c3:1f:
         15:57:ba:75:45:6c:72:d8:ee:87:72:20:a8:c1:17:77:c0:54:
         ff:68:6c:4d:73:57:73:5a:21:53:47:56:09:28:0e:c8:a7:9b:
         f3:f6:c4:2c:f8:83:02:4b:d9:5d:00:0c:09:e0:de:0a:04:d9:
         73:2f:6c:60:68:e5:d3:22:70:d8:96:c7:37:6e:d9:e4:81:24:
         77:42:39:15:cf:2e:bc:7c:ff:02:8d:ea:59:c2:51:09:8c:9f:
         cb:3c:57:e8:d0:94:74:40:a4:05:c5:bf:2d:4f:c2:d1:d8:40:
         3b:0f:f6:67:76:6b:9e:5b:91:48:5c:1e:03:2d:3b:e5:34:c4:
         a9:42:8e:97:3d:b3:26:5d:d5:f2:6c:c1:a1:62:42:25:a3:92:
         24:85:b9:00:f4:59:e9:64:56:b3:93:f5:13:ae:70:f2:78:e4:
         b4:4f:d8:88:e4:09:a5:cb:3c:e3:95:43:a3:8e:d4:f0:3a:cd:
         15:7f:5a:3e:5a:30:07:15:e4:42:68:95:a9:73:48:1d:ac:ca:
         aa:31:16:2a:06:b9:60:d6:97:74:6d:9f:78:6a:e5:8a:eb:aa:
         93:92:64:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:01 2024 by rpki-client on console-ams.rpki-client.org