Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa
File:                     906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa (raw, json)
Hash identifier:          gSSixCmjHZUQ4ypdbfAS3kFP4QQ49y9yiQyDDPoj5sw=
Subject key identifier:   D8:BA:BD:01:1B:1D:74:95:9B:0F:88:AC:06:DC:2C:8B:D1:B9:A3:83
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285845A3BBD29AC27C1B6F60268C00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa
Signing time:             Tue 23 Apr 2024 09:21:16 +0000
ROA not before:           Tue 23 Apr 2024 09:21:16 +0000
ROA not after:            Mon 22 Jul 2024 09:21:16 +0000
asID:                     64267
IP address blocks:        152.44.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a3:bb:d2:9a:c2:7c:1b:6f:60:26:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 23 09:21:16 2024 GMT
            Not After : Jul 22 09:21:16 2024 GMT
        Subject: CN=47f3a426-9824-4459-8ac8-c46fc0c079dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:8d:8a:f2:c4:c6:53:0d:07:ba:2c:02:8c:
                    08:c5:53:14:88:45:55:74:d7:8f:fe:a3:f4:64:0f:
                    55:f3:d3:92:99:dc:23:b7:c8:5e:fd:c0:6d:10:52:
                    04:f7:fd:34:5b:75:8e:26:25:9a:9e:ba:dd:ca:80:
                    11:dc:30:ac:88:ff:e2:fc:c0:f2:65:f1:2b:d4:d5:
                    5d:1e:3e:1b:75:2d:8e:5e:04:f8:aa:ed:35:49:8b:
                    21:ea:70:9e:b2:87:a7:be:63:54:f1:57:70:f1:9b:
                    89:b6:b8:35:eb:6c:00:79:ac:99:54:ce:66:47:e4:
                    68:5e:1e:9c:0d:06:dd:fa:3d:bb:ff:a1:9a:0d:7d:
                    fe:13:f3:7a:a0:ad:86:ef:ce:1b:c5:95:cb:ca:52:
                    99:c7:2b:cc:67:26:79:f4:fe:77:c9:ca:72:0d:b2:
                    d8:39:3b:33:f9:01:c0:0d:d6:44:84:de:8a:c3:a0:
                    05:f9:24:a2:3c:1f:3c:6a:4b:3f:e1:96:53:17:fe:
                    74:d7:22:18:e5:df:8a:7b:1a:33:b8:33:97:d5:9f:
                    50:09:09:18:c7:1a:8b:58:15:e1:68:69:f7:27:34:
                    30:c4:ec:84:d1:c5:15:10:f6:a3:bb:6e:c7:7f:78:
                    28:be:c8:5a:8f:84:9c:ba:41:ba:a6:ff:e4:fe:3e:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BA:BD:01:1B:1D:74:95:9B:0F:88:AC:06:DC:2C:8B:D1:B9:A3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/906fb5d0-5e1a-3f1d-bce3-7d3cada98357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:5c:d9:9c:1f:c9:c0:21:d0:f3:86:8b:1b:fb:2c:4f:db:6b:
         ce:43:e5:7b:77:a4:16:61:75:7d:97:3e:3f:1c:d8:45:84:a4:
         ee:49:51:07:fc:4a:22:e2:db:67:1e:1a:37:13:2f:aa:b7:1e:
         1f:cc:47:93:c1:0a:36:c4:5e:8d:4a:81:2a:29:5e:2f:c5:03:
         bb:dc:71:1b:d1:16:26:50:ac:91:e5:2b:6c:1f:8e:b9:d0:73:
         bd:84:ba:44:63:4b:b4:bb:6d:39:76:50:99:d2:18:5a:45:93:
         da:c9:89:c8:51:68:b3:c7:f1:17:df:7c:f2:50:43:6a:56:50:
         bb:aa:ab:10:8d:8c:da:17:d3:58:b4:6b:f8:3e:3e:5f:29:50:
         3f:50:17:a9:1c:7e:da:39:3a:ea:5d:a3:99:3b:14:b1:10:57:
         61:35:60:aa:0a:e6:fe:b5:dd:bc:25:c7:a9:2e:53:0c:93:44:
         77:52:f5:ef:70:65:a1:51:8b:b9:09:3e:37:54:8a:d0:85:29:
         03:37:5e:c1:a7:d9:0b:62:4d:a2:8f:e7:a2:7f:05:21:99:e9:
         62:40:44:11:a9:ec:78:fa:03:5f:61:ce:9b:ec:c9:5f:1b:6e:
         0c:be:75:06:31:8f:f9:71:51:1b:74:2f:fd:ca:41:ee:1c:a4:
         7d:d1:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:12:31 2024 by rpki-client on console-ams.rpki-client.org