Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f2bee5c-4856-3ed1-af41-7fe69b419937.roa
File:                     5f2bee5c-4856-3ed1-af41-7fe69b419937.roa (raw, json)
Hash identifier:          4uTK+sEJxgGNCdrrcIFZIsldzF46ax3LOlL+wsUHFPI=
Subject key identifier:   54:4A:14:5A:C0:61:38:FE:43:8E:B7:4C:19:40:77:73:C9:D4:95:5B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858450A36270EF28E2989EE8A1A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f2bee5c-4856-3ed1-af41-7fe69b419937.roa
Signing time:             Wed 28 Feb 2024 09:33:16 +0000
ROA not before:           Wed 28 Feb 2024 09:33:16 +0000
ROA not after:            Tue 28 May 2024 08:33:16 +0000
asID:                     7018
IP address blocks:        209.251.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:36:27:0e:f2:8e:29:89:ee:8a:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 28 09:33:16 2024 GMT
            Not After : May 28 08:33:16 2024 GMT
        Subject: CN=0ac8b559-d328-4c42-8c38-b2bec9479a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:7e:f7:ae:30:bd:56:52:b6:55:57:ac:7b:
                    e3:61:e5:f0:a5:09:05:f6:92:cb:f0:cf:85:8c:8d:
                    32:e1:de:9e:a9:3a:de:25:1e:4d:9e:93:0c:82:23:
                    cd:4f:e6:8b:c2:44:d9:b3:4e:8a:82:87:99:86:81:
                    43:34:99:ff:0d:45:bd:67:b5:e0:af:6b:03:c1:f9:
                    74:38:ae:93:28:6c:06:0e:54:b5:4b:e0:69:23:f1:
                    78:ef:bf:4e:37:62:20:05:a3:c2:e4:ca:55:40:e2:
                    27:c6:98:c2:5c:1c:e3:9f:bd:f6:38:06:2e:1e:a9:
                    37:11:8e:11:96:e1:e0:c9:72:b3:74:5c:47:4c:91:
                    1f:71:71:5a:84:76:b5:b1:0e:31:26:51:4f:b7:5b:
                    e4:bc:a7:a0:c7:6b:0a:a0:16:7f:5b:33:91:2c:68:
                    30:86:a3:68:f6:e1:2e:76:fd:b9:67:8d:85:6b:61:
                    2b:ab:f8:13:1f:a0:fb:e8:37:6d:05:31:8a:1d:46:
                    c1:32:9a:fd:17:1f:a5:02:08:63:70:f7:3a:be:28:
                    c0:a1:4b:60:51:37:2a:f2:05:e0:fe:11:1d:d4:b6:
                    3d:16:37:0d:1e:c8:c9:73:47:58:ba:f4:92:c5:3d:
                    72:17:d8:ed:8f:c2:56:7b:72:94:08:42:1f:70:a2:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:14:5A:C0:61:38:FE:43:8E:B7:4C:19:40:77:73:C9:D4:95:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f2bee5c-4856-3ed1-af41-7fe69b419937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ff:30:4f:c2:c4:48:ec:1f:30:65:e6:0b:a5:25:53:9a:b8:
         66:e2:4e:92:69:89:4d:ab:12:0f:c9:8d:7c:39:3f:26:b3:14:
         9f:b1:ce:98:11:00:be:43:01:f1:e8:55:6e:d9:2b:8e:ee:cf:
         26:73:27:70:fd:c7:c9:1e:f0:e2:a3:46:92:ec:d9:e4:8d:b3:
         9f:d3:46:db:26:fe:c6:77:e9:3f:9a:95:4b:42:6b:a3:52:6e:
         41:cc:2f:2c:7d:b7:e2:12:4f:8b:05:a5:ac:61:ad:b4:eb:a5:
         7f:c4:4b:63:32:da:77:27:52:b5:1d:da:8f:c8:1c:f4:d3:43:
         7b:54:06:03:3f:a2:36:ca:84:98:82:40:ab:16:02:8f:50:9f:
         82:37:a2:d9:9f:5c:ae:61:25:82:c2:7d:4b:ca:13:50:f4:c8:
         ac:4c:16:17:d7:e2:4c:49:3f:48:43:fb:81:b7:6b:7f:2b:d8:
         f0:76:9b:18:ca:9f:32:e4:d2:4b:eb:0f:ac:39:ff:19:a1:6a:
         ed:f9:72:a8:38:cd:51:3b:c2:af:0c:d9:85:36:70:75:ba:37:
         46:94:43:63:2b:f1:3e:bf:e1:01:57:0f:ef:4c:74:e0:ce:e9:
         60:91:3e:21:64:8b:ce:02:48:b6:c3:f7:b2:2c:84:e6:15:ca:
         bb:08:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 13:20:50 2024 by rpki-client on console-ams.rpki-client.org