Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/62f5aa42-c4c2-35b5-b2ae-341f1752cc1c.roa
File:                     62f5aa42-c4c2-35b5-b2ae-341f1752cc1c.roa (raw, json)
Hash identifier:          NSNj4ZFET7hmEB/n/Vu4YGzheJUnbzqURVJI152DU4I=
Subject key identifier:   32:20:C4:8D:65:A8:69:83:65:0F:FC:5C:D8:A5:81:71:E9:7C:1B:93
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858450A36544E9345E81E0D0ABC80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/62f5aa42-c4c2-35b5-b2ae-341f1752cc1c.roa
Signing time:             Wed 28 Feb 2024 09:33:37 +0000
ROA not before:           Wed 28 Feb 2024 09:33:37 +0000
ROA not after:            Tue 28 May 2024 08:33:37 +0000
asID:                     7018
IP address blocks:        209.251.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:36:54:4e:93:45:e8:1e:0d:0a:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 28 09:33:37 2024 GMT
            Not After : May 28 08:33:37 2024 GMT
        Subject: CN=71f2d348-4ac9-4b44-b048-122e9ac8c431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:74:62:01:f8:76:32:10:55:bc:73:82:99:
                    30:80:20:5d:d5:17:10:21:29:a3:50:2a:c5:73:be:
                    19:d4:79:59:29:59:0c:bc:51:18:ac:04:1c:a2:72:
                    5c:98:39:9e:ce:d9:1f:d0:be:0d:b5:58:77:41:50:
                    25:a4:fb:7a:ad:8c:74:3c:ce:8d:36:e6:ef:25:66:
                    00:c0:65:bc:10:92:45:d2:a4:fc:97:5a:bd:03:27:
                    84:39:14:a6:28:c7:7e:3f:c3:6a:0b:b7:b2:ff:76:
                    53:01:e4:23:1f:90:37:70:a5:81:44:4f:a3:c4:e7:
                    b8:55:69:d3:ea:d9:ed:25:38:fe:d4:ec:05:b0:0c:
                    f8:eb:cb:d5:53:02:4f:21:ce:21:7f:8f:e4:ca:a2:
                    c8:9f:8d:66:f6:25:09:38:66:c0:82:65:f5:e4:ea:
                    67:a9:c4:19:ff:0f:65:00:4c:3d:5e:20:7b:10:e5:
                    88:2c:ee:ba:77:24:70:27:89:41:81:eb:c8:70:ec:
                    77:90:78:7d:c7:b0:ca:67:0c:f6:63:62:97:30:ad:
                    64:bb:72:ca:a1:d0:07:63:db:9c:7f:f0:65:7b:be:
                    10:9c:e1:ed:b0:db:b9:13:5f:66:56:0a:fc:64:7a:
                    93:b3:33:26:f9:b6:95:45:c8:cd:0d:02:f5:26:76:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:20:C4:8D:65:A8:69:83:65:0F:FC:5C:D8:A5:81:71:E9:7C:1B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/62f5aa42-c4c2-35b5-b2ae-341f1752cc1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:99:5e:0b:54:33:3c:d5:6a:3b:54:b6:bd:a2:fb:06:61:
         8e:bc:c1:de:52:77:31:ce:c6:10:8c:38:be:12:8d:cf:a2:1f:
         bc:a5:76:61:64:b0:5d:bf:d2:b0:00:b6:ba:0d:ad:4d:00:ff:
         58:cd:f5:cc:df:34:1e:66:59:dc:99:5b:8e:c1:a9:4e:79:49:
         44:0d:e8:c5:42:60:4b:03:fe:54:0e:24:a9:31:81:cc:29:f9:
         2a:9f:e7:c2:32:53:88:ab:50:77:bc:9e:71:a2:39:9f:ca:35:
         76:1b:33:08:7b:4b:da:07:b4:08:11:39:47:bb:76:91:a2:1e:
         e0:92:53:69:46:b6:3d:7a:02:b7:ba:ef:86:e0:3f:88:72:44:
         da:55:5b:f7:24:b6:15:72:bd:ec:e5:54:0e:9d:be:2b:98:cb:
         0b:05:db:ee:7c:1b:c5:0c:01:fa:96:72:ca:76:bd:d9:ac:c3:
         18:3b:3a:bd:b6:7e:58:5b:a2:a0:ae:bb:4f:17:47:ef:87:53:
         a3:49:90:6d:36:c7:31:8a:c1:b5:a8:ad:ce:88:31:6d:0c:b2:
         31:39:a6:bd:0c:fe:ec:78:c6:fe:4c:dc:6f:e2:ae:bd:f1:7a:
         f3:e8:ae:87:1f:2c:eb:79:92:cc:c8:19:6f:a1:b5:d0:7b:5d:
         19:16:2a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:02 2024 by rpki-client on console-ams.rpki-client.org