Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa
File:                     957f4629-8825-3597-999b-ff03241d485f.roa (raw, json)
Hash identifier:          Vw43jc9/gpJ2fyUeM4mIabcmu5JiPTf0TJLeR+B+fw4=
Subject key identifier:   28:0F:9C:65:B0:87:60:23:4F:EB:86:A9:2F:D7:9A:BB:C0:FE:4A:D2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858455A2D83DB49DAFD05AB1C7880
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     397630
IP address blocks:        207.254.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:83:db:49:da:fd:05:ab:1c:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=b74e8f27-db4b-4390-9007-7cd2e390565b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:be:8f:3c:e4:c3:4c:32:31:31:69:17:83:
                    74:0c:09:1f:6d:8e:af:5e:e7:5d:02:7e:bb:f4:8e:
                    a3:34:0a:04:aa:d1:21:5a:a6:66:d4:fe:e7:1f:14:
                    f3:e1:fc:55:f0:49:04:90:e3:0f:5f:f7:ed:55:72:
                    1c:64:31:83:04:db:50:53:b2:ba:5f:f7:75:46:04:
                    00:8a:1f:d0:f9:bc:ad:dc:40:e6:d3:a6:b3:8d:19:
                    14:90:df:5c:3d:89:37:b5:cf:47:6d:37:49:f4:47:
                    7c:a1:3f:a5:1d:a2:02:aa:2b:99:e8:ec:4c:8a:1d:
                    36:7d:02:14:fc:f3:40:fa:a3:8f:c3:2e:51:53:b3:
                    a5:48:9a:4d:12:28:ca:0f:59:70:1d:c3:c5:0f:3d:
                    6f:05:25:23:e4:89:99:00:e3:d0:bd:05:b8:1e:db:
                    58:f6:3f:e8:b6:9c:9c:8d:0f:fa:db:f6:e8:d6:53:
                    b4:98:3e:a8:18:64:93:01:5f:18:b3:57:80:af:66:
                    03:f9:1e:29:25:6b:d8:98:b2:9e:ae:23:10:7e:d9:
                    77:60:0f:0d:94:84:7f:c2:53:48:43:9d:21:f6:66:
                    66:81:76:9f:1f:f7:70:3e:4c:98:6b:38:f7:5c:4c:
                    f0:53:53:e8:50:0d:4e:20:12:49:4b:e7:8f:ce:30:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0F:9C:65:B0:87:60:23:4F:EB:86:A9:2F:D7:9A:BB:C0:FE:4A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/957f4629-8825-3597-999b-ff03241d485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:d5:39:40:bc:59:5a:2d:01:01:1a:8b:fc:f6:a3:71:34:
         8d:d4:5b:c7:be:ef:b5:f6:de:cb:97:17:c1:7f:74:cb:8e:54:
         18:2d:22:e9:ba:60:13:19:c5:f7:5d:60:b1:37:67:a8:60:af:
         58:85:03:f3:9e:1a:30:0f:b6:45:22:39:7b:ba:71:c9:12:b9:
         c0:ea:a3:aa:bb:4d:70:3f:36:8e:56:84:86:fe:bc:6e:43:45:
         a5:da:40:b6:06:73:7d:41:13:72:4c:aa:27:61:6e:ba:84:47:
         89:4d:c6:e1:db:92:e0:25:ec:ed:68:9c:ae:9c:0c:f2:e0:cc:
         9d:19:e9:78:67:e0:5b:f6:59:59:46:43:5d:a4:cc:ae:f4:43:
         2f:c9:44:ad:ed:a4:c9:77:7f:4a:91:8f:c8:1b:21:f7:ac:38:
         96:6d:86:01:e1:36:3d:de:fd:a3:ba:27:7a:03:7f:3b:ae:12:
         79:54:6c:aa:5f:cf:62:12:50:67:8c:9a:1a:fc:cf:57:e1:77:
         8f:c3:bb:3e:4d:06:9d:98:82:9e:88:8d:04:6e:a3:5c:df:2e:
         22:26:44:f2:3e:f1:ec:79:05:04:79:54:25:48:16:96:d2:49:
         a7:27:79:c7:ab:75:63:6e:c4:ef:79:6b:05:99:8f:bd:9f:f4:
         7a:99:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:02 2024 by rpki-client on console-ams.rpki-client.org