Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a23ec81-0c19-3013-a05a-7f03debcadb5.roa
File:                     6a23ec81-0c19-3013-a05a-7f03debcadb5.roa (raw, json)
Hash identifier:          s8wMb1pvHrrF42WEOPTdAn/EJlWb28i+pTZr5THVCWg=
Subject key identifier:   AE:49:EE:FE:F5:FA:92:12:25:78:32:21:13:D9:31:A5:2A:13:3C:CB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C395CF17951F5FCBD960
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a23ec81-0c19-3013-a05a-7f03debcadb5.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     64267
IP address blocks:        209.59.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c3:95:cf:17:95:1f:5f:cb:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=f8859f6f-6169-4771-80b7-a049bb533150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:84:ae:d4:aa:0e:a5:6e:49:d9:56:3b:ed:
                    ac:da:12:54:33:e9:40:3a:5c:7b:5b:60:a7:ac:2c:
                    91:f4:67:95:4c:90:ad:16:5e:6a:32:f3:ef:38:e8:
                    8c:02:0e:99:d7:6b:2b:09:70:d5:0a:3e:e5:de:88:
                    a9:ae:c4:b1:27:d3:1d:48:f3:fd:f6:d0:ce:c5:9e:
                    8b:53:dd:c5:d3:2b:28:a1:8b:48:54:1d:a8:b3:f0:
                    1c:ad:30:b5:be:5a:6c:bc:77:83:10:37:28:3e:2f:
                    32:9f:72:be:ac:f8:ab:46:25:89:a7:84:df:2f:51:
                    ca:12:66:54:0c:15:a9:ad:f5:98:3a:d1:93:95:fe:
                    03:e8:8a:05:6c:ed:df:7f:6e:51:13:de:ac:ae:ec:
                    e4:5e:7f:65:53:ab:47:5b:95:9d:8a:d1:29:24:cc:
                    d5:20:0c:7d:68:b7:7f:85:bd:2e:aa:1e:56:04:0c:
                    82:ec:39:92:a0:3f:de:d8:64:9f:5d:b2:6c:8a:f5:
                    28:b1:67:62:27:85:f2:56:27:b2:ea:39:c1:1a:f5:
                    8e:7d:ec:ef:91:27:5d:57:d3:a4:ba:81:2f:5e:16:
                    c1:70:89:d3:44:d0:93:76:ff:11:95:df:fb:24:5e:
                    7d:57:be:5d:de:57:d6:4a:85:5c:77:83:0d:f3:01:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:49:EE:FE:F5:FA:92:12:25:78:32:21:13:D9:31:A5:2A:13:3C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a23ec81-0c19-3013-a05a-7f03debcadb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a7:40:2b:7e:fc:48:25:29:56:8f:b3:55:5e:ac:cf:05:fc:
         57:86:55:77:5c:23:ee:36:02:33:8b:2a:7d:ff:58:16:ba:65:
         33:6c:55:e5:07:c9:d2:38:8a:e2:12:ca:4b:bf:9b:a0:5b:32:
         d0:7e:0f:ed:c1:25:26:cd:1b:92:be:73:cd:4b:21:f0:52:4e:
         18:1b:59:da:60:17:10:48:0c:37:15:9b:d2:4d:2a:39:54:57:
         f4:d3:1d:1b:0e:2a:21:3a:7f:27:04:0b:cb:49:20:1f:c1:ed:
         dd:4e:18:00:26:a4:71:1b:90:77:05:51:f0:c3:7a:b1:46:71:
         59:ee:bb:d4:b0:96:b9:c0:0c:9b:63:a3:a6:47:4f:59:4e:fd:
         3c:63:c1:e9:92:ef:57:45:33:77:41:65:c8:79:72:fa:1a:9b:
         5c:51:56:94:1c:2b:ac:16:e5:ba:c4:7b:a6:8a:c5:62:8a:a0:
         64:11:b9:2c:2a:e3:dd:41:f9:e3:b7:d6:04:2e:31:e2:5d:1e:
         86:e6:a8:71:97:cc:c4:4b:78:cb:99:b4:4f:71:1f:85:7e:7a:
         87:25:61:6b:20:b9:72:9f:0d:db:79:d9:c8:d9:96:12:b1:9e:
         a2:9f:52:49:14:51:1a:fe:15:db:ec:5a:5f:3c:30:95:14:fb:
         b4:c4:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:45 2024 by rpki-client on console-fra.rpki-client.org