Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa
File:                     4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa (raw, json)
Hash identifier:          wx380ykPZJAYAmwIh4y2rzuBk90gcvyfoK8sgFklc6k=
Subject key identifier:   4A:9A:60:EF:6B:9D:06:B5:65:2C:ED:9C:C3:B7:D7:A0:E1:1B:42:EB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285844DD73F5D9B30B79024D49C380
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa
Signing time:             Mon 12 Feb 2024 08:46:26 +0000
ROA not before:           Mon 12 Feb 2024 08:46:26 +0000
ROA not after:            Sun 12 May 2024 07:46:26 +0000
asID:                     7018
IP address blocks:        138.229.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dd:73:f5:d9:b3:0b:79:02:4d:49:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 12 08:46:26 2024 GMT
            Not After : May 12 07:46:26 2024 GMT
        Subject: CN=94cee6f1-7c41-4faa-bb87-be096c61eef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:1e:dd:19:ce:d3:c0:f2:ce:b9:4c:1e:86:
                    2c:a9:90:01:4a:79:25:6e:a9:80:fd:e8:43:9e:97:
                    43:4b:fd:02:c3:6c:89:c4:88:78:f5:74:7d:8f:87:
                    a1:c6:55:db:85:0a:ef:6c:24:2c:b7:1e:c7:b7:c2:
                    be:68:08:5a:54:54:e3:35:65:57:73:9e:e3:74:f1:
                    74:3b:58:cd:49:80:2e:61:63:a0:e8:bc:92:a8:e4:
                    39:07:d5:1e:4f:cb:0f:a0:49:71:86:ad:d3:bb:86:
                    c7:23:74:15:12:a9:11:4b:d7:c8:f9:2d:d4:00:77:
                    92:07:eb:09:42:7a:17:c3:18:12:94:51:a6:f2:ef:
                    65:bb:ff:c5:e7:1d:2c:3c:6d:da:38:60:59:58:f4:
                    9d:e9:ec:00:41:9d:10:76:50:2c:6e:49:8e:24:1d:
                    5d:4c:74:ef:89:ab:8d:ff:b1:76:f2:63:ae:c7:90:
                    44:74:81:1f:da:25:e7:1c:cc:93:c9:22:94:ae:69:
                    d5:a8:76:6e:f7:6b:16:6a:2e:df:11:f5:3b:33:6f:
                    ae:57:4b:b1:62:8c:72:87:2e:6c:e8:6c:33:06:16:
                    1c:b5:f4:1b:87:85:fa:22:1c:8b:b3:23:79:24:a8:
                    96:b0:cd:a8:70:f2:e9:bb:6f:a1:97:1f:7c:aa:7b:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9A:60:EF:6B:9D:06:B5:65:2C:ED:9C:C3:B7:D7:A0:E1:1B:42:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4d23543c-1cdb-3eb0-b39a-1fa3129491d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:47:8e:8d:3a:07:d8:4b:55:14:dc:d4:1e:9c:f0:0c:e6:15:
         64:ba:cf:2b:d0:50:1b:af:53:f0:0e:46:5c:fb:ff:94:03:0d:
         63:d3:9f:5b:a7:00:85:63:65:ff:61:9e:29:ac:64:7f:ae:98:
         ee:e3:d3:df:f1:fb:a9:59:91:0c:cd:26:b2:86:5f:58:fb:eb:
         c6:a9:8e:14:37:a5:9f:c4:3d:fd:9a:41:10:64:e0:f1:c3:9f:
         b4:66:d6:7d:8b:71:80:99:06:62:5f:18:cc:8e:b1:87:95:62:
         31:b5:60:60:7d:ac:9e:a3:9f:13:24:71:17:82:cd:26:62:5b:
         fe:6c:fb:78:0a:76:b0:70:b9:4f:5b:af:84:42:b6:20:23:95:
         dc:6d:d2:1e:02:d5:20:d5:3d:98:11:1c:83:0d:8a:ce:2d:95:
         e4:c0:f8:0c:9f:dd:d9:f2:68:44:28:94:de:f7:5b:56:0e:28:
         9f:f0:38:a3:2a:a4:eb:ab:85:15:39:c4:61:d7:f6:c4:68:75:
         85:96:0d:44:94:df:17:e6:2e:16:56:71:62:aa:3c:c6:c5:79:
         44:41:8d:50:cc:ef:43:92:03:af:e3:9c:f3:aa:c3:c2:31:ba:
         22:34:78:60:83:56:27:35:a6:3e:14:3a:08:d8:4b:1b:1a:96:
         d8:d2:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:32:26 2024 by rpki-client on console-ams.rpki-client.org