Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa
File:                     7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa (raw, json)
Hash identifier:          F7arOgsV+LnUQvXiewbiZklVFOUh8/wF8687tinCPME=
Subject key identifier:   26:9D:65:90:9F:1F:3B:EF:F6:68:3C:77:48:E4:74:9B:A1:C3:96:71
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D81BD87147E4D35182F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     397630
IP address blocks:        208.89.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:81:bd:87:14:7e:4d:35:18:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=6cb099e6-5c4f-46a4-aea1-f5c6695a7fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:ce:18:6f:0d:2a:5f:fc:9f:15:ff:67:80:
                    a6:b5:44:14:87:c5:17:ab:ec:64:58:cb:94:17:3b:
                    09:64:19:3e:f8:c8:bd:35:1a:ea:ae:90:47:35:20:
                    a9:90:c4:2b:5a:f7:a3:e2:33:f1:3c:c9:1b:30:bf:
                    3d:d0:9f:79:4b:4c:49:94:85:60:20:a4:f4:f7:1a:
                    d4:00:10:76:68:d2:36:d3:a4:a8:e8:38:fb:32:31:
                    f3:8e:c8:84:41:13:2c:8f:40:04:3c:cb:f5:45:9d:
                    90:5e:e4:bf:ca:41:6e:85:c8:92:47:82:70:cd:bc:
                    1c:68:d2:85:25:5d:a3:b2:55:35:70:1d:f1:8f:2a:
                    43:a1:b2:85:77:3c:ea:f2:17:3b:d4:ab:4d:cb:ef:
                    97:01:a0:96:9a:db:d0:36:25:ab:f7:87:07:4f:27:
                    37:01:de:42:52:19:80:ea:b8:13:fa:95:4c:f0:20:
                    f0:44:0a:9c:e1:9e:cf:14:c3:03:2e:a6:78:d8:ee:
                    2b:a8:71:cb:18:5e:9e:47:14:43:4c:57:ea:ec:d0:
                    6d:25:cf:51:65:0d:8a:ad:95:01:48:81:55:2f:37:
                    cd:8f:b7:2c:a8:58:46:ef:43:22:8a:63:62:55:c3:
                    b2:34:08:b3:03:f9:13:2b:0d:60:09:28:c7:a9:54:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:65:90:9F:1F:3B:EF:F6:68:3C:77:48:E4:74:9B:A1:C3:96:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5e:c3:92:ce:8f:29:a0:f5:0b:fc:08:c4:40:7a:ef:8c:85:
         f2:40:d1:69:a7:b4:86:50:29:b9:17:78:7e:5b:d0:92:00:af:
         16:53:bf:e7:09:72:ba:33:3b:b7:ff:3b:d6:0a:1b:c7:e9:32:
         b2:d2:71:23:15:a1:80:a2:6b:5d:d8:e5:a0:17:8b:47:84:17:
         df:93:a8:80:a0:52:e2:88:8c:e3:1e:f3:aa:b5:39:bc:a4:0f:
         28:51:7d:c8:41:75:4c:96:de:40:bc:48:e1:81:e3:c9:84:c4:
         7b:58:5c:0a:81:69:f4:6a:19:1a:23:01:49:84:4b:4e:32:9f:
         3f:97:90:27:f4:a7:80:d2:f2:45:2d:a5:e1:80:29:42:9d:74:
         1d:da:03:8f:30:4e:a1:c8:10:cb:17:20:ba:d6:d4:b3:9b:4d:
         c3:a2:85:20:15:7e:70:e0:c9:55:67:92:ca:bc:34:a1:ee:c4:
         5a:fb:54:66:28:78:62:0b:bf:d5:67:a4:4a:cf:92:4a:77:cc:
         91:b0:3a:84:7a:d1:6e:ef:44:b3:42:b1:d1:e4:28:85:6a:1e:
         6e:54:99:6c:f7:fd:50:0b:0b:7b:5d:e0:93:03:f6:92:9f:0b:
         7f:f6:0c:03:45:83:89:b8:28:69:55:44:b1:15:83:4b:65:51:
         bc:2a:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:32:26 2024 by rpki-client on console-ams.rpki-client.org