Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2d90174b-4e4d-398e-ac98-8a3276625c7d.roa
File:                     2d90174b-4e4d-398e-ac98-8a3276625c7d.roa (raw, json)
Hash identifier:          bInEOTog7Q9FwOon5m1+LJKXqLnwVHd87VL4UWweKKA=
Subject key identifier:   08:A4:CC:A5:C6:79:FB:D5:86:7A:CE:B1:41:34:79:0A:2F:63:1A:3D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858457F3132EAB90069DE8E023B40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2d90174b-4e4d-398e-ac98-8a3276625c7d.roa
Signing time:             Wed 10 Apr 2024 07:12:52 +0000
ROA not before:           Wed 10 Apr 2024 07:12:52 +0000
ROA not after:            Tue 09 Jul 2024 07:12:52 +0000
asID:                     7018
IP address blocks:        199.101.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:31:32:ea:b9:00:69:de:8e:02:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 10 07:12:52 2024 GMT
            Not After : Jul  9 07:12:52 2024 GMT
        Subject: CN=927a7011-81af-4536-a8dd-41e7c6669e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:ab:2a:d2:5d:60:04:84:8d:43:de:5a:39:
                    e8:c5:9c:44:7d:6f:22:c2:be:d1:98:7d:51:21:6b:
                    89:90:57:30:7a:80:db:cf:c7:52:af:86:82:46:a9:
                    f6:b1:e3:fc:0b:ef:81:93:d2:bc:14:87:3d:5d:7d:
                    92:d3:2b:a4:f0:91:3d:a7:f1:63:8f:36:9f:fc:fe:
                    23:e1:41:6f:74:8a:99:1d:65:ee:6f:11:de:0d:39:
                    a6:6c:ca:b3:d1:44:7b:f8:3b:53:e9:8c:7f:b4:7b:
                    fb:e6:f5:78:c4:2a:cc:e8:9a:7c:ab:2e:43:75:48:
                    e3:1c:9b:da:87:d3:e1:29:24:77:ff:c1:66:56:f6:
                    b5:30:3f:12:a9:a5:ca:ab:5e:61:8f:c8:d8:90:40:
                    97:45:a1:13:ec:e8:8f:56:f2:9d:00:f2:ab:9d:8d:
                    2f:9b:91:f6:86:be:74:f2:1f:a2:a1:ab:a2:19:18:
                    f3:a8:1b:6e:85:02:74:40:74:d9:62:b2:28:09:9a:
                    c8:4c:21:18:c8:d0:89:d6:95:e5:9c:43:9a:37:76:
                    ed:9c:5d:65:56:42:59:75:49:8e:01:e5:76:c0:6f:
                    2a:8c:61:f2:cf:9b:e5:2e:18:9f:f3:a4:2d:bb:3d:
                    40:fb:16:6e:16:e7:06:fa:d7:2b:a1:b3:f2:6d:dd:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A4:CC:A5:C6:79:FB:D5:86:7A:CE:B1:41:34:79:0A:2F:63:1A:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2d90174b-4e4d-398e-ac98-8a3276625c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7f:cd:af:13:b2:05:0e:68:25:24:ab:ac:cc:49:78:93:59:
         09:40:aa:12:85:73:94:7c:82:c7:d7:2c:f0:38:af:02:c4:a1:
         ed:4e:d4:c4:79:fc:30:51:03:ea:8c:c0:02:b4:73:75:8e:e5:
         28:14:db:15:2b:23:bf:3e:da:57:28:ed:64:b8:72:ec:e8:21:
         6d:9e:bb:c7:4d:ac:5c:cc:23:e1:8b:21:61:38:b6:aa:da:6e:
         07:f7:77:fb:2f:2a:52:01:68:99:1f:83:45:68:ba:5c:87:fe:
         01:e3:6f:fa:e4:b9:36:d0:f6:03:cd:3b:da:7f:0e:d5:3e:a2:
         6a:3f:76:8e:e8:0f:d5:c0:80:fe:c0:67:98:31:9e:19:60:10:
         36:22:fc:d9:bf:af:b1:61:9a:b6:c4:6f:86:5c:89:3c:1b:d3:
         8d:e5:fa:41:8e:50:c3:1f:57:2b:f1:3f:a1:d0:f8:31:13:83:
         db:a4:f7:56:a8:ee:a2:b6:84:ae:09:2b:93:3e:16:d8:94:56:
         34:c1:29:c4:dc:2e:03:1e:ba:87:f2:ab:00:f1:52:2a:b3:2c:
         5f:2e:ea:3e:e8:6a:ed:a3:ee:e1:1c:dc:2b:9e:b5:0c:55:bb:
         1a:7b:3c:33:6a:f3:16:ee:dd:f8:ca:41:72:f4:dd:3f:f7:2a:
         0f:25:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:37 2024 by rpki-client on console-ams.rpki-client.org