Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f27e0f8-a0da-3f99-bf6e-0c9301a298ad.roa
File:                     1f27e0f8-a0da-3f99-bf6e-0c9301a298ad.roa (raw, json)
Hash identifier:          0kXXhIlKzJrx2vc5uxvoKAk9qINMs24gpT8qX3LJP+8=
Subject key identifier:   8A:26:F3:20:66:3E:9B:65:0A:75:15:42:5C:5F:4C:5F:B3:30:C2:61
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D8201418E4ED59F53DC80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f27e0f8-a0da-3f99-bf6e-0c9301a298ad.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     64267
IP address blocks:        152.44.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:82:01:41:8e:4e:d5:9f:53:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=86715810-bb43-44ed-99ac-e8f96668fb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:aa:e7:07:c8:cf:63:23:0f:b8:78:75:fe:
                    ad:ed:ce:40:7a:f6:a9:e5:04:c6:2d:78:b6:b2:e2:
                    89:e3:e9:a1:93:d3:1e:11:53:38:5c:c9:9b:63:92:
                    86:05:d5:be:e2:0f:cb:31:96:9d:e4:4c:12:54:f8:
                    40:ab:5f:e6:0d:e9:e0:fc:bd:c9:b7:fb:0f:20:86:
                    3e:68:20:28:74:04:aa:b8:79:d4:51:7b:10:17:70:
                    b7:d5:8a:ed:02:a7:87:d3:e0:29:11:b0:c0:b3:30:
                    ec:15:95:53:f5:09:ef:4a:11:09:a6:3a:47:ce:bf:
                    f3:35:d4:58:48:9c:99:b2:c2:03:e1:40:50:8f:13:
                    4c:47:e8:22:10:05:61:60:92:f9:b7:e5:31:27:f7:
                    ea:e4:e6:af:17:2a:8f:e8:e8:d5:ef:a5:0c:37:3a:
                    bf:f1:66:e4:25:25:7d:11:95:1f:1e:7d:31:37:7a:
                    e7:d7:89:3d:3a:7f:1e:9a:e6:63:f4:1c:58:7e:96:
                    6f:3e:0a:db:14:3e:4f:d1:6a:5d:b8:65:44:3b:f7:
                    7f:23:7a:f4:08:44:65:8b:4b:75:dd:b1:4e:dc:1f:
                    fa:85:e8:5c:27:f7:21:a3:8b:d8:90:81:f9:b4:6f:
                    6e:d5:61:7b:f4:1f:3b:5e:c1:2c:40:23:76:dc:e3:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:26:F3:20:66:3E:9B:65:0A:75:15:42:5C:5F:4C:5F:B3:30:C2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f27e0f8-a0da-3f99-bf6e-0c9301a298ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fb:93:d9:f1:32:37:84:05:11:3e:f3:e1:bd:77:9b:74:14:
         3b:4a:dd:ee:f8:c7:93:42:04:85:7c:02:db:f2:11:ac:19:03:
         e0:e1:85:c4:45:cd:d7:5f:84:60:f1:c1:46:97:b9:9e:4b:9f:
         2c:9e:53:d2:c4:3d:32:0f:dd:43:0e:3a:c7:4b:f4:98:fe:16:
         5b:cf:88:45:7e:32:8b:80:b3:92:7c:2a:3f:91:95:35:5b:7d:
         74:db:cd:58:58:6c:5d:ce:3d:2d:e1:82:89:31:af:a6:1b:90:
         60:b9:bb:b2:22:e6:0f:8e:b8:f7:65:44:0f:96:73:f4:25:de:
         5b:44:f9:3b:5d:f9:3d:ca:c4:a5:53:8d:04:ff:e6:d9:58:f9:
         81:1b:a1:0d:da:1a:00:5a:2e:bd:c2:ea:84:0e:db:b8:bb:83:
         be:9a:e6:ff:ab:31:1c:46:88:fa:7e:9d:60:e3:90:a0:be:f9:
         2c:b1:49:eb:80:5e:9c:a3:c6:e8:d4:96:14:9e:5b:a1:f7:5c:
         8c:ab:c6:35:9e:e5:8d:4b:31:56:26:72:0b:0d:2c:17:7e:ff:
         e3:16:08:d4:54:fe:94:63:72:7d:bd:90:71:63:f9:e1:8c:6d:
         fe:4d:b3:5f:e2:cd:0b:55:42:34:f7:d9:34:a1:94:d9:59:16:
         b1:6c:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:15:24 2024 by rpki-client on console-ams.rpki-client.org