Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa
File:                     f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa (raw, json)
Hash identifier:          xc35v/da6Vpe/pN7Dr5ewv2uzGsYtQCkrHvSNUxi9+o=
Subject key identifier:   A2:2E:E4:AC:E9:2D:03:F8:51:32:F4:C7:F7:68:33:A5:BB:BB:96:52
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584757152A06531D7A864B4A6480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa
Signing time:             Thu 26 Sep 2024 07:57:55 +0000
ROA not before:           Thu 26 Sep 2024 07:57:55 +0000
ROA not after:            Wed 25 Dec 2024 08:57:55 +0000
asID:                     7018
IP address blocks:        67.216.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:15:2a:06:53:1d:7a:86:4b:4a:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 26 07:57:55 2024 GMT
            Not After : Dec 25 08:57:55 2024 GMT
        Subject: CN=2ae69ba0-dbac-4bda-9fde-5ffdcb086e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:b3:98:25:16:9c:52:43:49:40:1d:15:ec:
                    09:09:2a:19:c8:13:88:02:2e:4c:b6:28:43:b8:f3:
                    fe:3c:5e:c5:74:ef:06:fb:94:57:52:72:d5:66:87:
                    a1:41:11:5d:77:60:c6:04:23:8c:0c:b1:82:c5:82:
                    f5:d8:2d:4a:ec:1a:37:52:19:d0:da:3b:b7:ca:81:
                    48:5f:2c:66:63:42:a8:a4:b4:f7:65:f3:95:c6:0d:
                    b7:f2:b1:65:7d:b6:18:cc:f3:04:b2:92:0b:fa:d7:
                    5a:c2:6f:d0:e9:53:fc:89:ed:63:a7:64:37:8f:17:
                    37:d7:ac:c5:60:69:45:b2:d2:07:cf:3f:b2:be:52:
                    ad:1a:5a:ae:61:4b:29:17:f7:b3:50:37:29:10:01:
                    83:7f:d3:40:ea:ff:95:ea:41:4c:a4:16:43:72:f4:
                    db:4f:07:05:07:28:0b:c9:49:3d:29:eb:48:8d:87:
                    ca:aa:a9:5e:be:1e:82:eb:69:a5:2e:e8:00:0f:71:
                    7e:e7:13:3f:41:f8:7a:1a:38:f4:72:c4:94:73:4b:
                    53:5a:46:c5:5d:9e:4b:47:91:db:03:cc:89:b5:07:
                    c6:25:40:86:7c:23:39:64:d0:b4:0f:eb:de:17:13:
                    db:a0:88:a6:9a:75:39:ce:1c:27:fa:e9:ab:84:dc:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2E:E4:AC:E9:2D:03:F8:51:32:F4:C7:F7:68:33:A5:BB:BB:96:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f8e79cb8-e56d-33a2-9a00-d48435945dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:19:7b:8c:ba:7e:b8:9d:94:df:97:fc:85:36:6e:bd:07:ce:
         dd:41:e8:18:7a:1d:cb:55:46:8d:6d:8a:67:d8:03:ca:b1:98:
         bc:1c:2f:8d:bd:f1:b9:dc:e4:9b:d0:56:a3:d5:72:18:75:8e:
         ca:b0:b7:30:45:10:cc:c2:aa:4c:22:39:82:ad:26:8a:b4:66:
         de:90:70:83:26:b7:d4:e7:e8:0c:f5:96:dc:96:90:7e:9f:60:
         1d:32:9a:27:2a:6d:1b:bc:6c:16:56:6f:3b:70:8f:69:00:85:
         4b:f5:6c:f5:5c:cb:9d:05:6c:f1:77:20:74:e1:69:d6:85:56:
         0e:02:11:81:b7:34:55:24:23:94:d4:a8:ec:d0:65:61:01:dd:
         53:b5:93:23:7f:31:c3:95:47:40:f3:5f:25:d2:6d:f9:d5:77:
         fb:af:f7:d3:8d:1b:22:a0:e7:c0:c4:75:ff:d0:4f:75:74:36:
         be:ee:60:65:0b:c4:51:96:2b:eb:a7:4a:79:d7:76:d1:6e:20:
         45:c7:ca:2b:29:95:5b:6a:f3:4e:d8:ca:ce:81:22:96:87:92:
         65:76:b5:17:f0:b1:30:59:83:ea:be:26:64:e0:ee:7f:cb:b9:
         78:80:89:40:93:3c:cb:43:43:2e:45:2a:42:43:ea:ad:21:56:
         bc:ec:13:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:22 2024 by rpki-client on console-ams.rpki-client.org