Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/615206ec-a3d1-3d9c-a82b-5110d0c145ff.roa
File:                     615206ec-a3d1-3d9c-a82b-5110d0c145ff.roa (raw, json)
Hash identifier:          xTiSq+o62Hybn5y+z/WE07MtlvVHvf4gvb2HrA6TIN4=
Subject key identifier:   E7:7D:B3:C7:CE:E4:01:2E:4B:80:19:0E:BB:F4:90:55:80:4D:50:B9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858450A31985C0E848B2020DD3080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/615206ec-a3d1-3d9c-a82b-5110d0c145ff.roa
Signing time:             Wed 28 Feb 2024 09:24:05 +0000
ROA not before:           Wed 28 Feb 2024 09:24:05 +0000
ROA not after:            Tue 28 May 2024 08:24:05 +0000
asID:                     7018
IP address blocks:        172.96.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:31:98:5c:0e:84:8b:20:20:dd:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 28 09:24:05 2024 GMT
            Not After : May 28 08:24:05 2024 GMT
        Subject: CN=728ae71f-a77b-447d-9917-07cffbcecea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:bc:0d:3f:5d:69:c1:9b:3a:8e:2c:6c:00:
                    88:fe:3d:05:d4:57:e7:fc:5a:29:ea:e1:70:f8:d3:
                    ac:f1:00:85:6a:38:88:9b:31:ec:c0:1b:1b:01:51:
                    f2:ab:b5:7c:17:4a:82:51:27:42:53:58:af:0d:43:
                    63:9e:61:36:96:8f:ed:d6:20:6b:c8:be:a4:e4:ce:
                    b1:5f:3c:44:7f:8d:1c:10:a6:ac:44:1c:4e:06:5e:
                    34:73:55:47:83:9f:19:81:b9:81:ac:f9:41:c1:b2:
                    5d:bc:df:1c:fd:40:df:c7:b2:2b:5c:54:1f:cd:92:
                    cf:52:d5:f0:9c:84:f8:50:55:48:24:10:6a:8e:87:
                    20:3a:ad:81:2b:da:03:85:98:c3:78:62:a3:1e:3a:
                    4c:df:0c:48:82:69:03:12:f6:1a:a1:07:aa:ed:ee:
                    8c:d3:8f:6e:f8:ee:77:b5:2f:e2:f5:a0:e3:5c:ab:
                    69:57:38:9c:3c:2f:fd:12:ab:d3:50:d4:f5:b3:25:
                    82:6d:f3:45:3a:7c:83:ff:0d:4e:ce:5e:a5:d1:3b:
                    1e:63:6b:12:89:c9:77:f2:78:53:56:02:d7:b2:40:
                    3a:e6:f3:ac:63:67:ed:9c:f2:5b:4c:b9:37:69:cf:
                    92:24:e0:fa:5f:f5:48:60:cf:26:9c:ed:31:53:89:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7D:B3:C7:CE:E4:01:2E:4B:80:19:0E:BB:F4:90:55:80:4D:50:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/615206ec-a3d1-3d9c-a82b-5110d0c145ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:09:35:01:f1:1a:71:d3:9b:0a:61:c7:03:ce:54:aa:5d:
         92:7e:f9:9e:6e:de:bf:9b:94:18:74:20:f7:7e:03:61:f8:81:
         f0:e7:93:b4:6d:24:e9:fc:a1:46:6c:7f:b5:39:9e:70:d9:09:
         8e:a9:f1:e2:f8:1e:d1:c1:ea:78:33:6f:c7:60:fd:04:b9:47:
         a6:e0:db:c3:d9:ec:d8:45:b7:3d:2b:a6:2c:74:73:7d:c7:f2:
         b7:43:ff:dc:97:d3:05:a9:f3:25:ae:2b:f2:2c:db:e6:67:7b:
         23:46:86:e6:e4:63:4e:d9:d4:1f:b4:c4:87:05:6b:52:4f:24:
         1d:f9:3d:d3:8c:5d:61:7d:27:9d:e9:9b:7d:1c:90:a1:41:ca:
         bc:91:0e:b5:b8:61:11:8c:bf:3f:c7:0c:06:be:aa:b3:6e:fc:
         57:ca:9e:af:ed:e5:b5:c0:73:80:ec:2b:65:07:da:8a:ec:a0:
         cb:1d:09:6a:03:5a:04:48:cb:1f:e7:08:dc:00:ab:a5:9d:89:
         b4:00:c4:3d:5f:26:c9:f6:d9:e4:c0:42:06:5e:2c:b8:bc:11:
         14:79:8a:a5:28:4c:93:b6:42:f6:92:5d:5f:4b:13:3c:93:fe:
         07:35:db:f2:43:36:89:cb:11:c7:f7:b6:93:e2:fd:c2:a6:76:
         85:6f:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:08:48 2024 by rpki-client on console-ams.rpki-client.org