Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
File:                     5dd6712e-6178-3993-8873-ab9cf5de0d88.roa (raw, json)
Hash identifier:          +MnE5bzpPavs4PpRNoSY/y3sTJKAGm7/bIxmJgpJLL0=
Subject key identifier:   82:F6:AE:B7:9F:2B:F1:CA:B3:9D:A1:3F:4B:0E:A8:A2:19:03:7F:B8
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858453B77FF3B5D6FD252BF57E180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     64267
IP address blocks:        199.250.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:ff:3b:5d:6f:d2:52:bf:57:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=2021b5f4-35ee-4e94-ad96-7387df89ac40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:b3:d9:7f:99:6d:c8:db:43:e6:e0:e2:16:
                    40:8e:c1:d7:6c:49:24:9e:c7:b2:47:b7:87:d2:c8:
                    26:77:e6:49:ec:ed:a6:4f:d3:3d:17:59:3b:be:93:
                    46:e6:42:f6:d6:ae:40:77:4e:63:2e:ea:d1:48:14:
                    5f:ff:ba:9b:2f:c3:71:87:14:ce:1f:25:20:9d:2e:
                    5c:f5:2f:60:3a:2c:82:29:51:05:f5:c6:76:8a:c9:
                    1d:81:43:2d:8d:28:f4:b6:0b:44:a2:64:7e:58:40:
                    cf:f5:31:40:f0:80:cd:7d:08:ac:2a:7b:83:0a:6c:
                    e4:99:a0:1c:e4:5e:d1:fb:fa:b7:57:37:37:c9:65:
                    98:7a:59:27:e5:87:ad:05:bc:43:80:00:ba:4f:c1:
                    7e:19:13:f8:80:ab:dd:ff:c4:50:eb:f3:2d:43:4c:
                    9b:b6:2b:af:49:ab:4c:94:76:a8:e8:42:c0:48:bf:
                    14:e1:10:ca:17:9d:95:4b:0a:d8:67:59:9a:a2:7d:
                    e7:0b:cf:75:e7:e8:88:d4:76:b0:16:22:63:01:6e:
                    cb:92:cd:fa:c6:9c:bb:a4:0f:df:e3:9a:0f:81:f8:
                    d3:ec:3c:36:ca:55:c7:34:ec:36:aa:6f:88:65:b5:
                    7e:7b:59:c7:46:96:5d:fa:23:24:79:db:50:f7:c2:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:AE:B7:9F:2B:F1:CA:B3:9D:A1:3F:4B:0E:A8:A2:19:03:7F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:64:2d:fd:87:be:18:fd:48:87:03:b9:04:2c:d1:bc:a0:
         ed:a7:3f:5f:a7:14:01:da:33:d7:45:1c:09:8c:58:02:b8:ae:
         4b:88:f2:6e:30:aa:9c:8a:2c:1a:32:b9:c4:8d:f9:50:2c:23:
         2d:91:f6:ad:81:b4:53:9f:44:52:fa:b7:e2:5e:0f:3e:61:2d:
         59:31:94:41:89:23:2a:8b:89:ff:53:d6:20:8d:6e:dd:fd:ed:
         94:6d:2b:46:6c:40:41:c1:0f:12:4a:49:57:5b:f3:68:44:e0:
         d0:b5:67:35:37:41:bd:4f:c6:ff:72:f6:9f:27:99:a6:2d:ca:
         70:3e:b8:2c:2a:2a:e5:cf:35:62:4d:c9:a3:c4:09:02:6d:3e:
         94:8b:f5:28:ec:33:b8:9b:53:37:10:6a:8b:5d:16:d2:a9:f2:
         ce:44:48:1a:6c:90:19:5d:01:b5:8e:fa:2b:ff:21:e6:3c:09:
         02:8e:c8:66:81:3d:c5:d9:95:93:48:19:23:4c:48:e6:31:bf:
         d4:97:ed:41:0c:e3:fa:c2:3f:40:70:95:cd:f8:c5:41:ae:13:
         e8:03:5c:de:dc:c3:f9:a2:0c:31:c5:9c:6b:2a:99:1f:86:27:
         26:43:18:59:4f:cb:be:db:2f:f2:ca:db:53:cd:ad:94:1b:65:
         0e:a9:4c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:31 2024 by rpki-client on console-fra.rpki-client.org