Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa
File:                     9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa (raw, json)
Hash identifier:          WGHtjKluK+1qS5TzCFD4Mh6JFdb+zU2yd5GhkMETob0=
Subject key identifier:   7B:E3:23:C1:FA:98:F2:C5:25:06:77:98:BE:03:11:75:EA:2F:AA:DC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285845987877EDE1F86414454A8A00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa
Signing time:             Fri 19 Apr 2024 08:31:40 +0000
ROA not before:           Fri 19 Apr 2024 08:31:40 +0000
ROA not after:            Thu 18 Jul 2024 08:31:40 +0000
asID:                     64267
IP address blocks:        152.44.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:78:77:ed:e1:f8:64:14:45:4a:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 19 08:31:40 2024 GMT
            Not After : Jul 18 08:31:40 2024 GMT
        Subject: CN=8321963b-e9a7-4f9c-95c7-63562aa2cb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:48:4c:ce:ef:04:36:cb:ae:36:f2:c4:04:
                    1e:9d:7f:4a:d3:37:cf:7a:34:c6:0c:d9:2c:71:3b:
                    a7:2c:cd:0d:a0:4c:e6:d2:0d:bc:00:61:3f:23:47:
                    8b:6c:6e:7f:74:67:02:61:f2:9c:65:1f:20:4c:9c:
                    6c:49:eb:c2:13:d1:86:43:9e:97:08:e9:7a:07:9a:
                    c4:8b:53:86:3c:3d:5a:93:63:56:78:8c:44:93:82:
                    3e:2a:be:ef:d8:9c:23:ac:76:c7:f0:aa:d7:57:3f:
                    70:bb:e2:0a:dd:ea:28:64:10:32:e3:27:15:6e:f5:
                    1c:3f:58:a0:82:a5:85:01:f7:7f:a7:32:6d:d0:04:
                    18:e0:0a:a1:c8:0d:ad:c6:99:8e:e1:81:e6:01:d2:
                    ca:90:a4:72:73:74:e4:c5:33:88:27:37:a4:00:df:
                    49:e0:c3:26:2e:25:71:b6:8d:c2:69:d5:a0:5c:1c:
                    38:7b:c1:f8:7b:81:45:38:92:1b:b8:3e:d2:ba:7b:
                    36:4f:73:e8:4d:ad:8d:6a:32:92:7f:fa:e8:51:d5:
                    94:ed:6c:e3:ab:85:57:cf:c4:51:0e:16:bd:8c:1c:
                    82:be:9b:82:5f:fd:52:66:9e:d8:27:ca:0c:e0:d8:
                    fc:ee:9f:6c:08:59:6d:0e:b5:27:08:92:40:b5:15:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E3:23:C1:FA:98:F2:C5:25:06:77:98:BE:03:11:75:EA:2F:AA:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ba922fa-5dcb-3b9b-bb8d-914f614bde6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:13:0b:3e:d6:fe:bc:ac:59:67:dd:b6:b6:65:46:4a:75:6d:
         3b:1f:06:d6:bc:89:74:55:42:15:66:aa:7f:66:4c:f3:52:48:
         2e:27:6a:a9:4c:18:7e:10:5d:c9:23:20:3b:49:cb:5d:98:23:
         55:00:8c:63:06:e3:8c:3e:50:b5:62:f8:20:63:0c:43:00:47:
         72:e3:df:35:41:b5:37:61:44:8b:ca:dc:90:74:76:5f:e2:85:
         f9:b3:34:f3:a3:f6:24:f4:b5:b7:56:d0:39:8b:d4:82:d8:8d:
         8e:30:ab:c5:79:85:e2:26:38:9e:44:4e:80:87:08:23:39:50:
         c0:68:6c:67:86:03:8b:06:54:fa:ee:db:35:22:d6:61:ca:dc:
         3d:92:d0:5b:71:7f:ca:06:f3:6f:cf:4f:a0:72:2e:af:84:b3:
         38:c9:33:21:26:b2:1d:c3:2e:c6:1e:09:2b:97:5e:d3:e7:4d:
         88:a7:f0:59:87:54:0b:a0:03:c5:21:cb:d4:e4:2f:61:29:0a:
         9c:d7:07:09:68:38:6a:a1:87:a2:0e:21:4b:4f:80:81:c6:b1:
         d9:27:4d:4e:cd:3b:34:d1:40:81:f0:8e:c5:3a:5e:c4:d4:41:
         79:86:ef:a6:36:28:e5:5b:74:01:d8:21:e0:99:91:57:3b:85:
         d4:03:08:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:16 2024 by rpki-client on console-fra.rpki-client.org