Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a23ec81-0c19-3013-a05a-7f03debcadb5.roa
File:                     6a23ec81-0c19-3013-a05a-7f03debcadb5.roa (raw, json)
Hash identifier:          IwMqjc2rF4ubeGIAgz5vRZxHdWWX3y71nXFYP4mg/fw=
Subject key identifier:   7F:72:2E:AA:5E:0A:9C:AE:86:4B:16:C3:3E:0D:F2:68:13:85:2D:FC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D81E2E2B0375E35E61D60
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a23ec81-0c19-3013-a05a-7f03debcadb5.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     64267
IP address blocks:        209.59.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:81:e2:e2:b0:37:5e:35:e6:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=dbf32bfb-f9c7-43ee-8c31-2d10cf180992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:df:36:6f:e2:52:8b:74:8a:ef:9c:2f:ba:
                    4d:c9:47:2e:8c:67:97:76:1d:d9:93:45:db:f8:0a:
                    e1:2a:e2:ff:5d:05:89:9f:a1:90:05:11:1c:f7:f9:
                    6e:4a:86:6f:47:38:90:41:a3:e4:2e:93:f5:67:f4:
                    b6:ee:e4:b1:a6:c0:70:51:09:f9:28:1c:c0:0b:3b:
                    95:b1:1b:a6:8d:97:45:ce:a7:73:1b:07:2b:62:b8:
                    1b:7a:18:c7:48:3e:3e:7f:89:18:92:77:a0:7b:dd:
                    f3:d2:27:8c:99:67:4d:4b:96:c3:b5:f3:82:aa:12:
                    b3:f0:15:88:4f:54:06:05:6a:8d:d9:fb:c0:b7:26:
                    35:de:14:69:9d:c5:e6:17:cd:8e:75:09:6a:a4:ee:
                    90:e0:b0:06:74:0a:20:9c:1b:78:de:1e:f1:29:ec:
                    2d:8a:a3:10:f5:e3:d9:1f:fe:39:5b:43:ae:24:9e:
                    ce:fb:f1:3f:6c:91:40:70:ed:e9:a2:58:9b:91:d0:
                    44:ac:fe:a1:ac:a0:c8:16:c6:1c:84:c9:4e:f5:5f:
                    60:b9:57:7e:6e:32:25:13:86:e4:a6:6f:df:df:89:
                    37:8e:0e:ef:b0:5f:46:ad:6c:8a:47:05:f0:9f:ff:
                    d6:d2:c7:96:29:6b:87:5a:35:76:4b:59:ac:c2:01:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:2E:AA:5E:0A:9C:AE:86:4B:16:C3:3E:0D:F2:68:13:85:2D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6a23ec81-0c19-3013-a05a-7f03debcadb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:f1:37:be:7f:20:1b:39:37:b4:82:ce:19:5c:97:4f:24:72:
         e7:4b:ff:08:81:5b:69:8f:f5:88:ea:8c:1e:03:ee:d8:c2:30:
         00:34:f8:a9:d1:21:83:67:60:03:c4:57:61:b4:a2:5b:65:ec:
         62:17:b1:34:86:0f:48:3b:68:2c:ae:66:30:93:ff:c0:5a:81:
         ce:18:0d:aa:fc:04:a4:3a:d7:b5:cb:35:b4:35:43:83:75:7b:
         6d:c2:d5:89:2b:0e:17:72:d9:84:91:d9:0c:75:f5:b9:9d:6d:
         aa:d3:5d:41:6c:e8:93:c0:92:ab:ce:f8:bb:f0:26:85:99:f8:
         25:83:27:9d:34:f6:51:8c:8a:98:1d:35:cf:d5:0b:c0:0b:e8:
         0e:76:1f:98:e7:01:eb:c9:b0:df:a8:c7:14:f8:74:c2:36:8c:
         d9:79:1d:5d:c4:75:cd:55:70:5e:3d:18:4b:91:c6:31:1c:fb:
         b9:c3:7e:a1:3d:8a:48:c3:03:ed:2b:4b:a8:0b:93:f3:fe:78:
         03:24:e4:97:2d:84:99:4a:45:4f:7c:4c:cc:f9:af:4f:08:46:
         42:2c:ed:4f:52:9a:58:45:a8:c1:fb:a0:2d:52:03:75:c6:e2:
         be:49:d0:d7:4d:e9:d2:ad:bb:ea:4e:6e:fe:0c:d9:a0:1b:c9:
         bb:3c:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:32:26 2024 by rpki-client on console-ams.rpki-client.org