Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/453306b1-7630-3fd7-89eb-b9d19e53ebb0.roa
File:                     453306b1-7630-3fd7-89eb-b9d19e53ebb0.roa (raw, json)
Hash identifier:          OfT+KQ41ZxyywlhmN1hfHKQEO8I5mqICHNm7QZFrFs8=
Subject key identifier:   54:DB:48:31:6F:90:C1:49:7A:AC:88:56:A7:45:17:02:E8:80:E6:60
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285845AB2354713BD9BBE17BE58900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/453306b1-7630-3fd7-89eb-b9d19e53ebb0.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     7018
IP address blocks:        69.58.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:54:71:3b:d9:bb:e1:7b:e5:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=fc4ce965-c423-452d-9519-d30f7d61329f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:ae:74:f3:64:a5:2b:42:33:8f:d5:f1:16:
                    37:5c:09:33:ad:23:59:e8:78:15:30:04:2b:18:fa:
                    91:af:2e:20:aa:08:a4:50:b5:3e:0d:ba:1e:9b:41:
                    88:ef:c4:d5:14:b3:74:77:6d:cd:5a:a3:01:b2:fb:
                    a8:d7:6d:4a:0f:99:56:4e:8a:59:e7:e1:2e:f2:40:
                    d3:0d:42:9c:b5:77:a2:92:17:3d:35:22:bc:7f:54:
                    b0:6e:10:6e:83:5b:0c:8a:d7:95:5f:46:ce:13:bd:
                    f4:98:eb:87:73:01:a9:04:0d:75:b5:10:57:b2:6b:
                    e2:08:d4:8d:2c:91:b9:ea:26:21:d6:bf:8e:2e:60:
                    4f:ed:54:d4:62:2a:ec:c4:0e:3b:6a:ca:2e:3f:51:
                    7f:70:36:b7:72:36:98:9d:57:31:76:3a:b2:e0:f0:
                    0d:30:13:31:0c:2f:60:ec:b7:a7:00:5e:92:88:c9:
                    53:86:1c:fb:22:3d:6d:2f:6b:8f:89:b1:4b:b1:68:
                    78:9f:db:1c:9d:f5:7d:3b:fa:80:00:a2:0c:44:8f:
                    c1:58:88:bd:ff:ab:66:e2:a3:76:0b:41:21:f1:92:
                    17:35:64:5c:d3:c4:1e:11:5e:3f:42:09:67:35:81:
                    59:31:e5:d7:6f:4e:e8:89:7a:d1:8d:ea:b6:16:36:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DB:48:31:6F:90:C1:49:7A:AC:88:56:A7:45:17:02:E8:80:E6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/453306b1-7630-3fd7-89eb-b9d19e53ebb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:70:4c:f7:0e:5b:13:d9:92:33:58:5b:c7:c1:f4:3b:ff:70:
         34:e8:07:35:f8:6a:08:1d:df:ac:34:23:6f:54:09:46:a3:06:
         10:c9:22:ab:17:fb:a5:a5:2b:47:43:f3:45:cc:ab:27:ba:59:
         62:a9:ff:39:c5:c0:c0:a5:81:1d:ab:50:94:e0:ea:a8:1e:d6:
         55:8f:89:a4:f0:cb:d6:d6:16:d3:94:d9:f5:43:d0:3f:fa:8d:
         16:9a:0c:c3:59:03:9c:7e:ec:28:45:df:a8:73:14:3a:0e:5a:
         0b:82:d9:c4:c3:d9:fd:30:9c:d9:c7:c6:ab:4b:a1:24:8d:c2:
         48:24:7a:97:e8:e1:50:bf:2f:ef:a6:3a:2a:b1:75:83:a6:a4:
         d6:ce:eb:b1:b4:bb:93:76:76:96:02:d5:2a:bd:8d:a4:ec:c7:
         fa:4f:9c:46:3a:3f:1c:ea:65:bc:84:62:ee:67:1d:8d:81:36:
         73:0c:05:88:18:4b:fd:87:fe:3c:46:b0:86:a3:24:4f:8f:2e:
         28:f1:79:59:f3:f8:e1:a4:44:d0:cb:d7:1a:3b:c0:86:fe:10:
         e4:37:b9:82:ec:1d:ad:7a:18:ba:55:c7:1b:92:81:9e:78:5f:
         fd:fe:de:d2:84:7c:e3:ba:29:cf:1c:1d:25:67:53:33:c0:e0:
         cf:48:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:32:26 2024 by rpki-client on console-ams.rpki-client.org