Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/854b0a44-2729-3877-9228-b831fa9a2dec.roa
File:                     854b0a44-2729-3877-9228-b831fa9a2dec.roa (raw, json)
Hash identifier:          Il78utNYN/VSLskm+1Ym7whUfCrXo7YD87FVUO1WqrM=
Subject key identifier:   A5:5B:73:DD:14:8F:57:07:31:B0:CC:5C:A1:39:16:82:CB:99:4B:CB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454F02C4D7BB3303CC9CCD3B40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/854b0a44-2729-3877-9228-b831fa9a2dec.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     64267
IP address blocks:        162.244.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c4:d7:bb:33:03:cc:9c:cd:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=ed552bae-10c4-4279-94ed-a8c35e538199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:3d:e8:93:24:0b:b9:8a:4b:d6:08:60:83:
                    b0:c3:9e:01:df:12:d4:98:25:18:5e:54:fb:04:b2:
                    0b:55:cc:86:c5:66:5a:64:47:dc:05:7e:b2:41:78:
                    9a:0b:e6:28:95:d9:26:41:b8:c8:f3:a4:f3:50:7c:
                    a6:96:57:d9:9c:3f:81:69:db:09:13:90:e3:3d:29:
                    6c:88:9e:5f:27:10:a0:e5:9b:0f:62:a0:f0:4e:f0:
                    d6:25:30:8a:b7:2b:0d:e0:76:24:07:09:56:c4:ac:
                    de:6f:77:a5:a4:8f:a8:1c:1e:70:d0:2b:9d:14:cc:
                    e6:ea:d7:d3:e6:93:0b:a6:46:d0:85:1a:e9:e4:6d:
                    f0:ba:8b:9c:40:fc:a2:5b:29:ee:b0:dc:fe:36:48:
                    4c:4c:34:df:24:89:1e:3f:81:c6:92:69:0a:49:f5:
                    84:a2:e6:a6:db:2b:14:73:8d:2e:ab:7e:53:88:a8:
                    a4:b8:46:2c:c0:d3:53:a0:05:f4:db:07:07:27:dc:
                    0b:2d:29:7b:69:c8:ad:88:d3:b6:49:86:65:fa:fb:
                    f7:85:2f:50:70:2f:10:52:a2:9d:10:2d:be:6e:3b:
                    bb:37:86:ad:ab:51:84:fc:88:19:b3:57:30:1c:7d:
                    8a:94:fb:38:4d:54:f6:d5:38:fe:31:c9:b8:38:b1:
                    10:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5B:73:DD:14:8F:57:07:31:B0:CC:5C:A1:39:16:82:CB:99:4B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/854b0a44-2729-3877-9228-b831fa9a2dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:ac:85:e1:e0:a0:6c:42:75:c1:89:4d:28:3e:3a:ea:3c:
         4f:88:67:9b:e3:93:ad:07:32:19:c4:36:15:0a:54:f0:4b:ed:
         c6:77:af:d3:a6:e1:78:6e:6d:ce:87:fb:4e:ce:a1:34:6c:31:
         db:62:2a:a7:7e:36:52:ed:37:fa:df:be:16:e0:55:f9:02:55:
         2d:44:12:54:5d:7a:65:31:de:6f:54:95:a6:8a:30:3e:df:82:
         63:6c:e7:53:e6:c3:c7:d5:ae:ee:02:ee:50:c1:9c:8f:38:f4:
         26:25:54:e9:ae:66:dc:b3:15:22:00:d4:4f:f0:2c:aa:0a:9b:
         58:55:e1:d0:b8:3d:86:4c:19:39:1d:50:36:d1:8c:d0:7d:88:
         d3:31:1a:b4:91:0e:df:25:54:4c:0d:d5:cc:37:e7:da:aa:69:
         ae:24:7d:92:39:f6:00:c6:97:26:00:9e:5f:44:af:82:e7:80:
         0e:89:9e:70:78:f4:98:7c:4d:f9:4e:9e:a9:c7:b4:7e:4c:39:
         f2:5d:5b:95:5b:f7:e5:a4:72:51:ec:66:5d:23:99:a8:87:52:
         be:7c:ec:c9:55:a5:b8:b4:59:00:46:80:07:94:ca:f2:66:cb:
         3f:86:31:b6:3e:65:22:7d:5c:e1:5d:fc:75:01:d4:27:cd:9b:
         ce:75:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:02 2024 by rpki-client on console-ams.rpki-client.org