Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/abc4c03e-a317-34c8-8e56-1c74f9ab5904.roa
File:                     abc4c03e-a317-34c8-8e56-1c74f9ab5904.roa (raw, json)
Hash identifier:          9i6yIbwqiUPbxvjiqNV1qbgF729vwxxxODmOqp37gCw=
Subject key identifier:   77:4F:5D:F0:F5:23:06:68:35:21:AB:06:E8:45:B4:0F:D1:58:35:AF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584558C84740BCDD2FBECCEC6E10
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/abc4c03e-a317-34c8-8e56-1c74f9ab5904.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     397630
IP address blocks:        158.62.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:47:40:bc:dd:2f:be:cc:ec:6e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=da645030-e827-4dc5-ada3-f55d5aed5a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:05:79:42:ff:8d:f7:96:4d:94:bb:80:53:
                    55:81:cb:ae:00:cf:34:25:28:94:cb:46:c7:c8:0f:
                    74:a8:e0:73:95:f9:0f:1f:d5:ef:26:8d:b0:43:44:
                    03:8c:e8:72:4f:76:97:98:e9:51:cb:2e:c4:c0:71:
                    aa:18:93:73:ff:67:ce:39:f5:79:6b:19:3a:f6:ad:
                    47:0a:83:64:6a:23:81:3b:79:1f:45:7e:b2:1d:a6:
                    25:3d:4a:57:12:c1:06:fb:40:59:94:66:9e:26:56:
                    25:6a:36:8d:22:f7:47:23:4f:05:b3:6b:07:2e:f2:
                    cf:b3:41:59:7c:a1:4b:96:1b:a0:95:84:4b:0c:4b:
                    17:36:96:2f:ab:ec:30:6b:17:72:8e:4e:93:a4:6e:
                    59:1d:df:d6:7c:42:78:66:d8:d4:ca:84:94:dd:67:
                    31:d1:88:de:cc:6d:79:af:65:20:ef:dd:da:c3:26:
                    35:25:20:a3:f8:9b:12:10:83:ab:50:60:57:dd:a4:
                    21:34:85:08:43:cc:c5:d9:68:58:b1:ed:c7:16:15:
                    52:d5:b8:3b:94:ee:40:7a:17:28:08:b4:66:9c:a9:
                    b3:4c:af:bc:a5:99:54:36:ce:b2:f2:8d:58:87:0c:
                    b5:0d:98:95:a8:f8:f9:18:e2:74:1f:e5:ca:74:5c:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:5D:F0:F5:23:06:68:35:21:AB:06:E8:45:B4:0F:D1:58:35:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/abc4c03e-a317-34c8-8e56-1c74f9ab5904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:1e:b0:40:02:8f:9a:cf:df:d0:94:41:ee:7d:80:c7:ce:d4:
         89:ea:16:0d:f8:72:56:34:84:36:75:4c:48:74:ce:03:92:c2:
         42:0b:2d:7a:07:13:1c:d8:06:a9:04:54:b9:9a:37:f9:ef:c3:
         53:c9:d5:4f:e0:39:bc:b3:44:fa:a8:05:e7:d4:e4:af:d1:57:
         d5:1d:a5:ab:dd:32:aa:9e:b9:cb:b8:97:71:b9:7c:03:48:58:
         7c:f3:b8:79:e0:6f:f4:f4:c0:7a:6e:d7:c6:af:33:2f:48:ed:
         73:f7:a0:19:65:a5:54:67:29:9e:bd:76:8e:23:bd:68:c3:a7:
         83:ae:00:5f:8b:46:c4:df:e2:ae:b7:36:aa:9a:5d:7b:15:34:
         5b:16:d1:69:1d:5e:7d:15:c7:e8:95:41:a9:3a:49:60:ee:b4:
         df:b7:00:05:34:77:9f:13:5f:65:c0:e4:1e:17:81:31:12:a5:
         8d:7b:38:87:95:35:15:4e:23:67:40:50:21:28:73:a8:1b:95:
         51:74:b7:2d:57:04:50:99:2f:f4:a4:23:71:bb:3b:e6:fb:a9:
         04:2b:fb:d1:cb:0a:7d:e1:04:7c:b4:c9:2c:c3:cd:6f:b3:ca:
         3f:57:48:0c:d9:b5:80:13:11:0c:b1:6f:fa:d7:e6:59:e3:d7:
         dc:b8:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:31 2024 by rpki-client on console-fra.rpki-client.org