Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
File:                     5dd6712e-6178-3993-8873-ab9cf5de0d88.roa (raw, json)
Hash identifier:          0wH8dJte7CsSnBmcuF38hxSEyGPPdwLgihMW4vAWU3o=
Subject key identifier:   CF:3C:7A:F5:A7:9E:40:72:50:AE:93:DB:A6:AA:5E:5F:49:13:2F:6B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847DC64ACEF3B27F8A2331F9880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     64267
IP address blocks:        199.250.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ac:ef:3b:27:f8:a2:33:1f:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=5a391e9b-dc09-4645-a669-20b9c841274e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b5:4a:4c:7c:6a:58:8e:5c:98:03:56:1e:ba:
                    22:53:64:c3:bb:d3:81:78:87:41:6a:42:6f:11:cb:
                    b7:f8:f3:10:ba:aa:1d:43:36:97:9f:e7:e7:91:75:
                    de:ba:3f:90:07:e6:c2:b9:ba:6b:04:d7:4c:6f:af:
                    df:a7:53:a6:c3:39:bf:51:12:fa:ac:c7:0a:0e:b2:
                    e2:1b:87:26:0f:93:9f:d1:c3:e0:f5:65:1a:0b:6a:
                    32:7e:90:7d:3f:df:f3:ae:7f:91:af:d3:0b:5a:42:
                    88:84:a8:a1:65:57:0c:82:b4:26:9c:63:e4:4b:5e:
                    ec:dc:e7:11:99:c5:b9:81:3f:61:bf:0f:bf:54:86:
                    ae:98:f9:9d:7a:1c:be:39:a8:bf:8f:9e:a8:ff:d5:
                    61:db:36:10:95:b6:f4:60:6c:ad:85:21:10:37:39:
                    38:33:f6:b2:b7:0d:97:3d:d5:0b:64:11:ff:0d:fd:
                    17:ac:30:d7:14:09:10:85:ac:8e:67:89:51:8e:cd:
                    8c:ef:2c:f8:5f:7d:3d:3a:48:e4:6e:68:23:7f:05:
                    de:d1:1f:77:d5:75:2d:1b:91:2e:81:b0:f9:7a:61:
                    93:04:2c:64:a8:a9:1f:da:be:b4:01:70:14:0f:85:
                    92:38:eb:bb:f8:fe:82:7f:dc:6b:7b:14:42:f8:c2:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3C:7A:F5:A7:9E:40:72:50:AE:93:DB:A6:AA:5E:5F:49:13:2F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5dd6712e-6178-3993-8873-ab9cf5de0d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:85:ec:6c:f8:75:7d:74:8d:c1:27:f6:ee:fa:d0:65:93:49:
         c6:78:0e:28:6f:b4:3f:e7:73:6d:b2:1f:07:54:99:76:2a:55:
         77:e4:50:47:6d:65:5a:51:ef:17:0f:4b:18:89:b0:aa:ba:1d:
         ac:37:0b:bc:ea:6e:e6:53:38:98:7c:6a:2a:f8:dc:83:e1:f9:
         c6:5c:a7:3b:10:41:cd:9d:81:cb:b5:a2:6d:b8:52:25:b7:64:
         46:ea:3e:60:9b:90:24:0b:30:0b:48:84:db:50:64:3e:00:11:
         96:40:20:4f:57:88:37:46:49:d5:0b:2d:ab:5d:da:46:6f:f9:
         69:70:91:6b:34:24:0e:7c:17:b6:4b:16:40:77:24:80:5a:b7:
         fa:62:61:79:01:bf:c8:44:64:c8:f3:d6:b5:b0:c4:49:aa:8a:
         73:8e:4a:85:ed:1a:a0:88:ea:17:a2:26:c9:2f:5b:48:86:42:
         56:82:8f:a5:5c:8f:d2:97:76:a8:8e:c9:2b:74:43:1e:be:9a:
         10:85:2c:ac:8c:87:b1:da:35:d4:d0:d5:eb:bc:f0:91:e9:5d:
         79:a6:ee:b0:10:6b:7e:a2:a9:45:70:c1:c2:9f:2f:c7:5b:49:
         ba:5c:50:00:c4:b8:76:0a:bd:28:ed:41:92:9c:05:08:67:22:
         92:b4:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org