Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa
File:                     ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa (raw, json)
Hash identifier:          ZRh4IWmdNM7ut7bFjHuGiCZ1SM1tYN/BDMU8UDVae3Y=
Subject key identifier:   1D:7C:5E:50:0D:7B:56:C7:38:0B:74:7E:10:8E:FC:5A:F1:7E:D2:8F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584558C84564D2D7FA1B4295CB80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     64267
IP address blocks:        192.171.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:45:64:d2:d7:fa:1b:42:95:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=af9cc343-82a3-46a2-a2bc-f2eacbd2e61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:e6:29:22:59:4d:4f:24:74:5d:7a:3f:64:
                    ad:d8:21:25:f5:f0:59:a8:b1:9f:17:98:f8:9e:bb:
                    fd:a8:bf:a3:9c:2e:db:88:53:ef:0d:e5:4d:c4:cf:
                    bc:ed:6e:59:86:8c:32:f5:1c:45:b2:e4:44:02:93:
                    46:dc:4d:56:f5:5e:79:2a:cc:a9:7c:35:6a:60:5b:
                    7d:8a:16:aa:b2:ab:94:57:17:f3:bd:f3:00:a4:95:
                    bf:87:5c:e6:18:16:bf:8c:bd:10:ca:99:28:19:43:
                    ed:f1:b6:3c:de:6c:cc:d9:ce:ee:9a:7c:4a:f3:ed:
                    eb:fb:a5:1d:f2:1e:26:65:2f:aa:97:69:25:c6:3f:
                    a8:7f:4d:81:94:2e:7a:0c:28:45:ca:81:d1:61:f3:
                    25:33:a2:1d:a6:a2:a7:8c:02:09:93:eb:93:61:0c:
                    73:00:dd:84:c6:c6:e8:12:a0:cb:9f:f0:83:50:ad:
                    0c:02:c4:3c:50:b0:22:86:7e:a2:44:63:e3:f8:24:
                    21:38:b5:3a:06:6f:32:78:a5:bc:73:a9:d5:e7:47:
                    31:01:7b:79:1e:ac:04:33:34:f7:29:b4:de:a5:d8:
                    8a:00:ad:e1:3d:1b:25:0a:ee:62:e8:1a:fe:73:ba:
                    71:bb:fa:47:6f:30:46:77:4a:0e:be:72:78:95:e5:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7C:5E:50:0D:7B:56:C7:38:0B:74:7E:10:8E:FC:5A:F1:7E:D2:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef8f11fe-0cf6-36d3-83c2-e2eae10d6090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b4:00:44:cd:27:89:b2:75:b6:80:71:05:3f:60:46:75:d7:
         fb:1d:63:11:fc:39:3e:b6:9a:3e:42:d8:3d:9f:dc:91:a4:ba:
         0b:11:73:59:f4:f6:ac:3c:ee:56:6c:3b:c8:7e:49:4d:ca:5a:
         d8:af:27:73:8a:b7:9c:61:98:e2:ca:b1:2b:22:f1:c2:da:2a:
         88:be:78:9a:a0:b3:c4:9f:71:2d:80:a7:11:b9:85:8d:6f:8d:
         74:c1:4e:6b:27:91:05:64:d9:2b:94:0a:b3:33:41:3e:88:ed:
         bc:a2:af:31:d6:88:1f:71:ac:99:2d:73:1d:6d:35:ea:f8:b1:
         4d:67:6a:f1:52:76:ad:61:3a:2d:4c:bf:b2:b3:1d:a3:30:81:
         b4:b4:00:ea:00:4f:04:86:aa:66:7e:01:9f:b6:db:b3:98:ca:
         be:56:8f:31:5a:a7:72:e9:d1:69:f5:a6:30:94:ad:98:db:fb:
         7e:69:a0:55:da:ff:02:95:c3:2e:23:ca:96:d0:be:ad:69:86:
         4d:86:00:fd:2c:3e:ab:cb:34:9c:37:70:8e:68:42:bc:49:ba:
         fc:1b:5f:04:93:4b:bc:89:35:46:55:86:10:8d:cd:11:eb:e2:
         d0:e0:8e:ba:1b:ec:54:d4:a4:3b:67:1b:5b:5f:bf:68:96:b7:
         d9:7c:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:49:31 2024 by rpki-client on console-ams.rpki-client.org