Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa
File:                     40a03e32-5251-3da2-b2fa-a2e789263d7b.roa (raw, json)
Hash identifier:          4RILVAhAnbaUs9IIPvWcBg3O1e4JrezoGhqagUXywnw=
Subject key identifier:   0D:9D:91:DF:C9:02:D6:3E:28:6E:50:FD:0B:1D:02:DD:84:97:74:12
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D826368BC1AD7BCE8EA00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     64267
IP address blocks:        152.44.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:82:63:68:bc:1a:d7:bc:e8:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=b5fe4db6-b8b0-4611-a4b9-165f408df81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5b:e6:6c:ca:b8:ea:5a:78:80:fd:a5:44:02:
                    43:59:33:46:d9:ce:f7:97:19:32:a8:33:43:99:f8:
                    4e:e8:1f:b4:75:3e:9b:58:3c:51:f8:81:0e:2b:49:
                    da:f0:cb:b4:de:86:97:5b:96:6b:c3:e8:13:7a:8c:
                    aa:92:24:e3:e1:4e:f9:6c:50:65:11:5f:7d:b3:7c:
                    c1:eb:5b:60:3c:40:3b:e0:0a:de:d7:3f:c0:af:a5:
                    25:2d:33:37:a7:50:6c:21:57:3b:21:8f:c9:89:b0:
                    38:00:da:c8:6a:e6:ff:4a:23:fb:07:2d:d0:1e:ac:
                    e9:6f:b5:b5:a3:71:b3:bb:81:7f:22:5d:23:42:6d:
                    5a:00:e9:ec:27:53:58:81:d3:a3:79:d2:9c:c2:11:
                    78:17:f2:7d:41:06:ee:08:e8:c8:1e:01:4f:e6:51:
                    6c:17:c1:a8:18:d2:82:45:7b:9f:73:0a:95:cf:00:
                    08:14:d7:ae:59:89:fe:41:9f:28:38:99:d1:a1:11:
                    33:22:52:34:f0:3c:a0:60:1e:f3:41:ea:25:bf:12:
                    31:6d:14:a2:2e:bf:8f:14:3d:d7:2a:0d:0f:dd:b9:
                    8f:2b:cd:80:44:d3:96:ec:79:77:09:13:60:e1:1b:
                    65:03:1a:38:f4:43:47:49:58:05:ca:cb:80:9d:62:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9D:91:DF:C9:02:D6:3E:28:6E:50:FD:0B:1D:02:DD:84:97:74:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/40a03e32-5251-3da2-b2fa-a2e789263d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:4b:9e:7a:3c:1d:22:49:5f:07:1c:4d:e3:aa:e5:8f:03:
         d4:aa:2d:d5:31:0a:8c:cf:9b:80:76:b6:d0:01:2f:2e:e4:73:
         48:f1:b7:55:0b:8a:f6:c1:03:28:8d:53:9a:26:62:1c:4c:98:
         69:0d:07:3b:be:82:12:19:1d:f4:12:fb:a3:03:64:05:bd:75:
         8d:5f:77:f2:b7:3f:6f:36:0a:69:ac:a3:3f:f0:b8:a7:95:96:
         56:f4:6f:04:ae:79:6e:d5:18:b9:2c:85:ca:96:91:07:7a:7e:
         e8:fe:00:9a:08:c3:cf:6d:2c:3d:2c:57:b7:12:3b:06:4f:d8:
         e3:43:dc:9d:29:9e:9f:a8:f2:2f:10:e8:44:27:97:6c:89:cc:
         d9:b0:88:81:f0:21:c6:28:ee:8b:3c:3e:89:69:c1:7a:a2:b8:
         34:c7:a5:e2:f4:01:48:78:e5:86:12:64:49:7c:3f:1d:41:1b:
         e3:ed:b4:17:5f:36:78:65:3e:54:98:37:05:10:fa:0d:95:fa:
         25:56:4d:48:4b:18:82:a6:3d:c7:05:75:1e:4c:60:af:48:0b:
         e0:b1:9c:c5:a8:4a:a1:ca:4c:56:b3:6a:22:cd:ff:33:7e:dc:
         77:19:bd:a6:7d:09:47:9f:81:c0:48:86:ce:3a:e5:48:70:83:
         ce:7d:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 13:20:50 2024 by rpki-client on console-ams.rpki-client.org