Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa
File:                     ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa (raw, json)
Hash identifier:          aWLzEzQPKM9m5+Xp6r9CAEGkoutks9AvGaqZEHM2Yv8=
Subject key identifier:   BD:7E:A9:8A:B8:DA:EA:41:14:9E:D9:16:31:3E:36:A3:C2:E1:31:82
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858455A2D7E09984EB83953120000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     64267
IP address blocks:        168.91.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:7e:09:98:4e:b8:39:53:12:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=7525080f-9146-465a-afc0-05e60b29aca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:08:60:8d:fb:b9:b7:cf:cb:0b:4e:80:6b:
                    70:d3:30:5a:60:f7:cc:39:16:7b:3e:26:b6:bd:92:
                    7b:9a:6a:cd:eb:77:b7:4d:8d:e2:80:a2:3a:ef:2f:
                    8f:27:2d:af:01:e4:a4:a9:fe:1c:4c:fa:d5:00:2a:
                    71:bb:6e:8e:67:d7:97:74:f5:3f:32:70:f2:cb:6f:
                    84:2b:d3:2f:1e:80:ed:e8:42:27:ca:ab:85:31:fb:
                    57:26:66:47:a8:40:38:7f:9e:24:fb:e8:64:e6:d0:
                    3e:52:24:12:b1:1c:5b:87:cb:a4:fe:f5:ae:df:dd:
                    ba:c6:0c:50:1e:75:93:66:41:01:1b:08:9e:7c:75:
                    b1:fe:50:ca:61:b2:15:da:8f:1b:e2:01:82:1d:9a:
                    13:8d:ce:43:3d:1c:51:cb:69:37:99:79:e6:cf:59:
                    52:cf:f9:a8:e0:c0:7f:f3:78:b4:7f:1e:90:85:75:
                    70:3b:e1:88:fa:c8:88:07:19:5c:73:b0:89:65:59:
                    9e:ba:33:d7:1c:c2:18:e4:fd:f4:5f:bf:50:93:2b:
                    e5:c7:cd:07:0f:64:8e:b4:54:ec:fb:a6:ec:89:f6:
                    91:63:f7:85:8e:48:54:28:f4:88:01:73:1d:11:2e:
                    76:e7:3d:3b:52:6e:ac:60:fb:5e:ed:ff:24:2e:de:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7E:A9:8A:B8:DA:EA:41:14:9E:D9:16:31:3E:36:A3:C2:E1:31:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca998017-6342-3bd8-b5af-2c3ba316b4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:d2:30:6b:bb:6d:6d:6e:9f:66:c9:22:94:22:bd:57:fd:
         d6:bc:30:3e:ef:9d:c1:ba:65:b1:73:ff:b4:17:45:08:3d:ed:
         df:d5:86:2d:9d:5b:b8:b6:fb:93:f1:a4:28:e1:57:8e:df:0f:
         cd:a9:79:b2:02:e7:25:7b:ac:f1:cf:d7:51:c1:b4:66:d4:ae:
         52:55:29:57:d8:62:73:02:99:64:d9:53:be:56:2f:fa:79:09:
         e1:8b:b7:bc:19:b9:00:0f:c6:32:37:97:d8:ff:5d:22:d9:2d:
         3f:aa:e1:49:0d:a7:73:30:1c:49:22:c9:45:de:96:26:5a:5f:
         52:db:7f:bc:ae:c6:13:66:fd:e5:5b:89:3e:13:68:b0:b6:3c:
         90:da:4f:f1:f4:11:d1:16:21:80:3f:f0:e7:4c:72:52:48:40:
         54:7a:8e:ed:8a:48:99:c7:88:10:20:ab:34:d2:6d:2e:3b:7e:
         ce:ef:55:0d:50:41:f9:6c:fc:0a:e4:94:66:2c:d4:bb:a0:f4:
         74:36:04:54:20:41:dc:17:91:19:a7:d4:f4:7d:2b:b6:02:c9:
         0d:a1:4c:86:27:77:34:d6:29:17:fa:22:d4:ca:09:01:1b:d0:
         d5:c5:80:a8:e6:6e:4b:9c:da:6c:b5:f7:7f:21:51:24:2b:c4:
         5a:c7:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 13:20:50 2024 by rpki-client on console-ams.rpki-client.org