Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ccd4c55-d3aa-37a4-9a11-917256097fd9.roa
File:                     7ccd4c55-d3aa-37a4-9a11-917256097fd9.roa (raw, json)
Hash identifier:          foaK8cnRA55v784zCtjyV8pyFjDBukAxOv99Bmedcko=
Subject key identifier:   D5:F7:3E:06:F7:01:2E:3E:34:D7:83:16:BB:A3:10:0B:38:10:E9:ED
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D8335BD526B6E6B538880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ccd4c55-d3aa-37a4-9a11-917256097fd9.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     64267
IP address blocks:        173.214.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:83:35:bd:52:6b:6e:6b:53:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=db4ebb2f-5be2-460c-997b-6ae0d980f902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:48:3d:d6:d6:06:82:48:5d:2b:ff:e5:e5:c0:
                    9f:d0:1e:46:c9:14:a4:96:a2:5c:db:dc:6b:7c:d9:
                    18:81:a1:39:78:03:a6:8a:e3:34:d1:54:ba:9d:e6:
                    62:33:ae:bd:57:89:86:22:8c:4e:e0:81:1e:83:02:
                    71:c9:71:6f:f6:20:78:9e:9c:1c:07:7b:9d:d5:31:
                    17:d8:e2:4d:b4:a2:56:b1:88:7a:d2:c6:52:cb:93:
                    8c:20:18:bc:51:55:c5:99:62:e1:c6:56:fb:ec:db:
                    9b:5b:46:ac:bb:d3:87:fb:b0:8c:24:23:60:5e:8f:
                    68:9d:c0:c7:e6:3b:56:a4:99:dd:c3:b4:8f:1e:55:
                    75:92:32:5a:02:f5:3a:77:1a:f3:8a:d7:39:84:8c:
                    85:e8:03:1d:2e:b3:04:ca:69:a7:ea:ff:a9:ed:83:
                    de:26:a8:50:1b:c5:42:61:22:cd:6e:02:7a:33:13:
                    ab:f3:09:6c:9b:13:0c:d4:fa:b0:69:69:0b:26:e3:
                    a9:2e:c6:ed:f8:73:36:03:42:5f:e5:6c:ac:e6:9e:
                    db:0c:00:2a:a3:fc:79:69:9f:bc:5d:31:85:9b:d8:
                    82:a5:d6:82:c4:ca:b9:82:32:5a:6c:fc:aa:a2:10:
                    fc:a5:b9:5a:45:8d:28:9d:12:6a:d6:6e:19:07:e4:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F7:3E:06:F7:01:2E:3E:34:D7:83:16:BB:A3:10:0B:38:10:E9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ccd4c55-d3aa-37a4-9a11-917256097fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:45:62:50:be:e6:77:85:7a:9a:fb:c5:fd:3d:64:8d:8a:c9:
         71:c1:f4:9e:15:23:73:67:ec:cb:3e:17:15:7c:a1:f8:2f:68:
         50:cf:45:f5:85:d6:17:40:8a:4f:06:b1:47:83:c4:13:a3:51:
         63:8d:e2:f6:ef:36:f2:dd:9c:8d:be:4b:5b:fb:22:62:b3:74:
         54:05:0f:63:2c:4b:6f:f3:68:63:63:18:39:a1:e7:24:8e:c9:
         85:08:01:72:be:1b:5d:70:8b:38:0a:6c:16:94:74:cd:d3:09:
         e0:4c:e7:e3:73:f9:97:9b:25:8a:72:9d:c8:95:f8:4a:05:69:
         1f:5e:8c:38:e7:49:a7:63:db:db:c0:77:93:5f:e3:48:b2:a9:
         9e:ec:b5:33:6f:47:25:bc:d1:57:8e:6a:07:40:8e:01:6f:d7:
         ec:4a:a8:5a:ac:b8:79:35:23:96:1e:0b:a0:a9:ea:85:99:c6:
         92:4c:4d:4e:1a:f6:97:1d:e5:f3:4c:a0:9c:2f:d9:d3:25:a1:
         d2:3a:a9:f5:93:26:ab:82:46:92:01:ed:7e:3a:23:a8:5c:3a:
         34:69:4d:ea:e5:64:0f:e8:13:fb:50:49:7d:14:d0:aa:76:32:
         46:bd:0d:9c:fc:11:19:cd:b4:ec:5f:3e:69:9e:a3:90:ac:08:
         ec:60:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:02 2024 by rpki-client on console-ams.rpki-client.org