Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfcc69eb-bb17-3cc9-96b2-5511434695eb.roa
File:                     bfcc69eb-bb17-3cc9-96b2-5511434695eb.roa (raw, json)
Hash identifier:          gah7NL1gxjZdcL7YhemUpX9PtCecTeyv8Jf29MpkU1M=
Subject key identifier:   48:90:62:76:0D:DA:D5:89:42:F1:E5:C9:E0:A0:B8:F4:90:50:F8:19
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285844DD736C73760D12917166CC00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfcc69eb-bb17-3cc9-96b2-5511434695eb.roa
Signing time:             Mon 12 Feb 2024 08:45:21 +0000
ROA not before:           Mon 12 Feb 2024 08:45:21 +0000
ROA not after:            Sun 12 May 2024 07:45:21 +0000
asID:                     7018
IP address blocks:        138.229.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dd:73:6c:73:76:0d:12:91:71:66:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 12 08:45:21 2024 GMT
            Not After : May 12 07:45:21 2024 GMT
        Subject: CN=3df65c59-e5af-48ea-9c18-a5a30f52f41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:dc:72:5e:18:01:92:fb:a4:4b:8d:19:d8:
                    68:9b:24:cf:73:f1:3e:ee:46:d8:ab:ed:3c:48:4c:
                    9a:5a:8f:c5:05:26:0b:59:5a:52:15:3c:1d:49:d8:
                    89:94:00:f8:73:12:26:b1:0a:2a:d7:f9:4b:92:ec:
                    31:09:03:e0:5d:09:7f:99:37:e9:77:f3:da:ee:2c:
                    74:1a:03:86:2e:18:97:b2:38:e9:dc:7b:7b:9c:ae:
                    a0:6e:2e:51:6a:4c:03:06:5a:3a:20:d3:44:76:4e:
                    07:1a:02:2f:5d:58:c8:8c:7c:06:fc:e0:f9:b2:6b:
                    89:14:57:ae:76:bb:df:9f:98:de:e6:51:02:59:00:
                    a5:d4:ff:62:f7:47:cf:e4:bc:b6:b2:03:6e:a8:17:
                    ab:26:c6:c8:37:fd:d3:b3:be:39:67:0c:87:c7:c5:
                    19:bc:e5:f8:93:23:23:bf:dd:f3:ee:20:ea:eb:78:
                    eb:91:64:9e:d5:fd:f0:92:ca:da:64:8a:e6:90:3b:
                    8d:10:77:ef:ca:37:50:56:b7:07:ba:c4:3e:fe:6c:
                    9c:a4:79:e8:dd:5c:99:b7:e8:55:89:91:4a:2b:fd:
                    af:d7:a5:2b:15:6d:ee:6f:1a:32:55:91:12:14:38:
                    9f:11:0d:fc:3a:1e:de:1e:c0:50:7b:84:d2:0c:89:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:62:76:0D:DA:D5:89:42:F1:E5:C9:E0:A0:B8:F4:90:50:F8:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfcc69eb-bb17-3cc9-96b2-5511434695eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:52:8d:d6:d2:72:2a:37:5d:25:56:de:61:7b:31:54:e3:6b:
         ef:53:ba:c5:0c:57:f5:89:2d:43:7b:ab:58:2c:6a:dc:ae:dd:
         1c:5e:03:8f:1d:97:03:c8:ba:e3:30:10:2d:df:61:fb:da:72:
         56:39:ce:98:94:c7:38:28:c5:42:f4:33:01:94:cf:7e:da:6a:
         c8:b4:f2:da:13:75:9a:ef:0c:a3:1a:a8:ef:dc:da:f1:d4:0b:
         7f:2a:52:38:50:c4:1a:f3:81:07:0b:ae:b5:0f:a8:f0:e7:8c:
         7c:91:ba:dd:5a:d7:3d:21:32:1f:c7:09:57:c4:c3:d8:db:d8:
         71:71:77:8b:39:80:cf:9a:66:b9:a4:a9:70:f8:79:23:ee:5c:
         18:13:fc:9d:e3:e0:ac:38:8e:91:60:42:28:f9:b4:59:d2:9f:
         1b:a2:92:7b:1c:0e:c3:f1:eb:af:20:2c:b7:b5:87:00:0b:c3:
         ed:ca:e2:61:42:79:3c:79:a2:72:62:99:da:ce:d4:e6:13:35:
         09:66:1e:70:60:6c:7f:69:a9:a8:97:89:f2:47:2e:01:26:43:
         61:fd:59:c0:50:a0:95:7d:79:43:19:a6:bf:01:08:e0:cb:67:
         ac:3a:e5:aa:13:3d:41:7a:d6:47:e8:64:e0:2d:b4:2a:60:5e:
         a4:55:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 13:20:50 2024 by rpki-client on console-ams.rpki-client.org