Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa
File:                     2f4be69b-9bf8-3179-b092-a6686655caeb.roa (raw, json)
Hash identifier:          e7aLu4h3UVjZ9GF8c6PD3PSVgmLywwcM8Gd1AoCaw6c=
Subject key identifier:   44:5E:78:69:C6:89:CD:E2:56:04:F3:FA:1F:3E:9A:B3:36:AC:6D:D4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847FB1A1F0EC64E3C2B061C2800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     64267
IP address blocks:        168.91.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:1f:0e:c6:4e:3c:2b:06:1c:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=72d19ab7-0b54-4aa3-95e3-85f3fe61cf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:4f:ec:6d:1c:bb:d6:f4:1d:7f:57:c9:01:
                    25:75:79:49:5e:ce:1e:5b:02:df:71:31:e9:d3:0f:
                    0a:80:48:e2:31:20:0d:68:b1:76:76:59:9c:62:42:
                    ca:49:89:35:55:c0:86:74:a7:64:9a:2a:09:3a:9b:
                    61:23:6b:3f:38:12:8b:fb:e9:a2:4d:81:3f:c4:9f:
                    f9:ae:ec:7a:d4:9d:8c:04:dc:4d:2d:02:89:1a:44:
                    6b:42:90:bf:2b:28:c3:c6:2d:8c:ab:6a:80:4f:34:
                    8a:bd:d7:ef:e7:15:94:a4:a8:d2:e6:47:17:c9:5c:
                    ac:a1:f8:87:e4:36:dd:fc:8b:56:7c:c6:24:c6:94:
                    50:e6:79:56:e3:76:96:b6:17:61:3c:b8:51:0a:e1:
                    7f:23:c7:0c:17:08:38:19:0b:21:e7:4a:64:c6:2e:
                    bc:8a:31:8c:f1:53:c5:48:5b:8e:bf:d9:a9:51:9d:
                    1a:f7:f4:7f:12:e4:76:63:cb:cf:09:a7:bd:6e:1f:
                    95:dc:71:bf:30:83:7f:32:0c:f3:57:c2:24:95:ec:
                    5a:90:8b:fd:23:ce:de:e3:ac:12:c2:da:c3:76:60:
                    49:ff:77:cd:a7:23:b8:79:5d:f7:75:c7:8e:0a:86:
                    5f:2e:39:f0:32:66:74:cd:47:52:9f:5b:e6:35:d5:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:78:69:C6:89:CD:E2:56:04:F3:FA:1F:3E:9A:B3:36:AC:6D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2f4be69b-9bf8-3179-b092-a6686655caeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5e:1a:26:86:54:f8:e1:ed:e3:60:12:ff:8e:66:0f:00:31:
         e3:b2:5a:32:2b:ab:31:cc:87:c9:15:1e:b1:e2:b2:56:b5:ba:
         15:fe:62:33:16:c1:03:46:45:2d:e2:a9:27:5a:bf:01:9c:80:
         e8:be:83:8d:25:72:6d:9b:db:6d:a6:b9:63:13:93:e5:a9:fa:
         c9:2f:ce:28:47:36:b8:58:26:f9:44:80:7a:89:a1:12:6f:4c:
         55:46:c6:6d:74:4d:6d:fb:76:97:21:69:04:c8:68:44:20:5d:
         69:94:9f:2d:59:00:9c:17:94:f1:73:e6:b3:15:7e:d0:d4:8b:
         2a:60:be:6e:ae:cd:ed:e6:80:0d:72:f3:97:4d:3a:86:a7:20:
         52:20:79:9e:a0:7a:42:7d:65:e1:00:09:b2:19:6e:58:ca:8f:
         31:fc:37:97:57:d3:23:60:3f:38:ee:c3:54:df:6a:e1:49:ad:
         bc:9a:6b:76:56:67:29:2e:db:bf:9d:f4:08:cc:c4:74:2c:15:
         4b:24:1d:d6:d5:7e:2d:22:eb:aa:da:e7:82:85:53:65:bf:b2:
         44:32:54:e1:2e:28:fe:fe:73:57:33:a8:d5:0e:30:9c:02:1c:
         a6:a1:d7:d2:eb:a4:ca:91:40:6e:99:f2:07:8c:01:ff:c4:b8:
         f3:4f:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:44 2024 by rpki-client on console-fra.rpki-client.org