Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa
File:                     7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa (raw, json)
Hash identifier:          3lO2PZwRuGkNPlZ3PML7rm9XFbVYKDuwXfMUsGXcggM=
Subject key identifier:   A5:92:2E:4A:B7:34:C7:ED:90:40:07:E1:9B:67:2B:85:45:3F:1C:EA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858453B77FEACD15CDB622E251980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     397630
IP address blocks:        67.216.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:fe:ac:d1:5c:db:62:2e:25:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=0d08aa93-71de-4e15-b587-575fbefa3f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:60:2e:94:88:95:73:bd:0c:73:02:f2:b9:
                    b4:c5:4b:53:65:63:36:dd:35:21:7e:b1:e5:44:55:
                    75:20:15:ca:42:78:67:9f:52:3c:ff:47:12:f4:02:
                    ab:70:82:72:2d:f4:36:be:05:6a:51:5a:cf:72:c7:
                    73:4c:b0:4b:35:81:69:43:c7:0f:0a:de:ca:2c:ec:
                    ad:72:96:a6:cd:aa:a4:ac:de:d5:30:a7:91:11:7a:
                    c1:8d:c2:1e:85:f9:34:1f:88:03:e1:ab:7c:d4:28:
                    5a:ae:b5:a1:bc:31:ca:19:02:04:bd:a8:ad:5d:75:
                    10:d7:75:27:f2:da:1f:a7:40:67:5d:ab:fa:42:e9:
                    ed:4e:67:22:62:aa:73:4b:78:07:67:7f:ec:b0:7f:
                    16:1e:5d:24:ef:16:3a:44:98:29:4f:3b:7e:2b:d1:
                    ea:ba:7f:43:d6:ce:6d:7f:95:19:3b:96:74:2e:ad:
                    72:8e:d9:7d:76:66:cf:ee:e0:cd:c6:be:5c:b4:d2:
                    f8:4b:d7:46:bf:db:d4:ed:c6:63:d1:b2:00:01:ba:
                    79:6f:ef:67:bf:49:f0:b1:5f:b2:64:f6:e6:d9:92:
                    4b:84:17:e3:cf:06:d3:72:88:34:26:6f:9f:30:4b:
                    bb:f8:44:c3:d2:31:91:45:7f:6d:87:08:ec:30:a8:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:92:2E:4A:B7:34:C7:ED:90:40:07:E1:9B:67:2B:85:45:3F:1C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7a1fe1ca-33f5-335e-82f1-8dcc7b1d97f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8c:45:f2:8e:bb:eb:c4:ac:2c:4b:04:a4:61:f2:71:20:a1:
         6c:52:c6:56:9d:d7:74:22:b0:a4:24:14:b4:56:3a:5a:c9:e4:
         7f:28:83:9a:78:e0:e7:61:3d:47:2e:16:b4:54:c6:12:42:40:
         5e:0b:1d:86:4e:d3:f7:90:64:a1:5a:03:93:c2:08:d5:65:4d:
         e5:7b:03:4d:8e:66:86:cc:f4:28:7e:5e:dd:91:f1:11:13:86:
         02:0e:5f:d6:d9:41:e9:78:88:e5:78:fc:16:ef:a1:d1:19:5d:
         18:41:23:97:f0:48:af:66:44:2c:ba:b3:c5:5a:8b:da:34:bc:
         66:57:49:87:8a:30:3b:5c:dd:2f:b6:e3:94:05:42:0a:be:74:
         62:2f:ef:51:19:aa:17:3c:5a:82:8e:48:22:65:2c:49:86:ff:
         c5:b9:7a:1a:d1:3a:5e:c6:c6:a1:8b:60:eb:1e:d2:a3:22:2f:
         a3:c4:fd:88:00:58:c6:dd:73:90:df:b4:ef:91:f2:68:6b:8d:
         4d:bc:b4:e6:a2:1d:d9:b1:3b:89:01:3e:63:d4:0f:de:26:a1:
         43:85:13:bd:dd:9e:e8:e1:b2:60:bd:62:f0:0d:cb:95:56:3a:
         01:4c:63:7b:69:5d:07:c2:c4:b1:3b:7c:56:b7:5b:2e:53:61:
         58:f7:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:02 2024 by rpki-client on console-ams.rpki-client.org