Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
File:                     b8e04097-9cf9-319f-b848-5e2a18e47e51.roa (raw, json)
Hash identifier:          J1w77B2EmLWNj7yMElkqKE2y6EWHL0VMPBT5PoqUbRA=
Subject key identifier:   6B:B1:C1:95:2F:71:5B:ED:A4:B2:D2:A2:27:44:F4:EB:37:AE:3A:23
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584558C846852D3A751ADE0A00C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     7018
IP address blocks:        158.62.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:46:85:2d:3a:75:1a:de:0a:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=e0ce1455-ec4b-4897-b233-50db90ee5dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:53:42:13:09:09:a7:1b:1b:6d:72:bc:85:
                    95:e3:73:96:c9:66:62:1d:f2:ec:4d:79:1c:44:25:
                    7b:3a:8a:86:7a:b1:55:a6:da:11:71:a9:eb:9d:fa:
                    5d:2c:18:d3:26:26:f8:d6:d4:91:7a:cb:01:45:46:
                    f8:ff:c2:da:2e:4b:fb:b5:18:7c:af:37:7f:09:8f:
                    fb:eb:16:70:87:60:32:7e:a4:b3:74:90:cb:34:07:
                    e0:5e:67:cc:72:48:39:4b:54:22:9f:7a:bc:f6:ad:
                    75:60:a4:a0:39:ad:c2:9e:37:74:0b:44:d1:bc:bc:
                    44:c1:e2:6e:f2:1e:cd:7e:33:7f:ee:a1:ab:a6:c3:
                    8f:eb:26:e1:6d:94:1e:59:06:49:d4:49:24:a3:f8:
                    7f:19:f6:5c:2f:4d:48:d9:f4:53:4c:20:0b:d8:df:
                    c5:b2:80:5f:5e:21:11:e6:73:e3:52:e4:5c:5b:55:
                    b9:7f:7c:e2:3d:e7:72:0b:52:5a:49:01:58:e7:c4:
                    59:1a:35:e0:93:79:27:24:f0:e5:3b:12:59:95:6b:
                    ab:80:d5:3a:b2:62:0e:24:74:d1:9d:8b:9f:fc:3a:
                    ca:39:f8:20:7d:83:81:72:08:cb:7a:60:5c:12:f0:
                    6d:ed:53:03:de:01:5b:8c:66:b3:d7:f7:f4:4c:c3:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B1:C1:95:2F:71:5B:ED:A4:B2:D2:A2:27:44:F4:EB:37:AE:3A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:f4:43:d9:6e:b5:19:f8:36:77:69:a8:a9:12:e9:18:34:
         86:e5:8a:af:be:45:a2:64:13:c7:6d:35:20:51:5d:e3:44:7b:
         c0:51:94:c4:7b:2f:89:7c:5e:ef:91:81:6d:b6:99:25:46:e2:
         ea:28:7f:73:07:55:d0:bb:8f:a0:a4:67:55:2f:81:c3:8e:72:
         4f:3a:94:f3:b9:07:27:be:d7:6d:b3:7d:90:f4:66:ae:cc:80:
         29:5b:50:ab:3e:64:fe:b4:bc:04:aa:c5:0b:93:ec:a8:ce:ea:
         40:3b:cd:25:cb:c6:3b:25:d1:e8:ca:5a:c2:66:f7:0e:64:e6:
         22:bf:74:3d:42:8e:1c:67:ff:aa:04:7a:5c:3c:07:98:c7:25:
         84:05:17:67:51:28:35:73:55:51:0a:26:84:95:54:b7:4d:e3:
         d3:16:d5:ee:a0:6b:cf:99:c6:43:d2:26:06:19:99:bd:41:a9:
         16:e8:89:17:4c:39:94:96:23:9d:eb:e0:1f:1e:b1:56:d9:4b:
         ad:a4:e5:28:69:76:ab:ed:f4:eb:a7:c6:f5:fd:3c:13:97:8c:
         e0:b3:e6:de:d8:f9:33:06:90:bf:6c:d0:67:30:c1:d2:ab:a9:
         09:2e:65:e6:87:50:be:3e:d8:48:85:e2:a6:ac:39:a3:c8:c5:
         26:72:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 13:20:50 2024 by rpki-client on console-ams.rpki-client.org