Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ff0184b6-347a-3ad3-bdae-b382e8244d58.roa
File:                     ff0184b6-347a-3ad3-bdae-b382e8244d58.roa (raw, json)
Hash identifier:          AnRCUiNCE1sFNP84454XmzK+Fwihn74JLlky7k7tnkw=
Subject key identifier:   2D:62:D5:E4:35:62:31:1B:B9:62:05:09:C0:0A:FD:D0:26:93:1D:12
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D823B3FCA5295EC2809C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ff0184b6-347a-3ad3-bdae-b382e8244d58.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     64267
IP address blocks:        152.44.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:82:3b:3f:ca:52:95:ec:28:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=64c5cd46-e6f3-4c76-9c20-a4235bc5a881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:2b:4f:f2:b7:58:0f:95:4c:62:8e:4b:ef:
                    76:8b:95:76:d0:96:5e:39:24:66:41:1c:b8:b3:c9:
                    da:45:63:cc:8f:ec:f1:8d:62:46:f7:0a:2c:46:81:
                    c1:6a:d4:e2:47:44:6c:e1:f8:7d:68:0e:11:5e:9d:
                    db:83:1f:3c:27:93:52:0e:31:05:aa:86:7b:88:db:
                    fa:82:72:ff:fb:3c:f5:cf:33:b2:26:ba:90:f0:59:
                    29:74:54:e7:4f:d7:6f:12:76:0b:84:be:e7:a6:3a:
                    c3:34:34:48:e5:2d:76:be:f6:63:7a:36:c0:d6:3a:
                    f4:fc:44:d7:f0:69:8b:83:08:01:aa:4d:51:cd:5d:
                    7d:c1:1c:1e:61:b1:6a:64:71:4a:f0:ba:16:54:c1:
                    38:e8:f8:42:66:4d:c0:48:85:7d:fd:92:e5:35:f1:
                    43:8d:95:06:52:8a:e2:14:2e:e4:ac:cd:4c:d7:93:
                    fa:ae:9a:40:e7:aa:ec:8d:6a:3c:96:46:41:c8:28:
                    07:d4:88:89:a2:27:48:b2:c2:48:ff:03:4e:67:df:
                    40:88:1f:ef:a8:13:16:28:95:ec:1d:48:d1:d6:44:
                    f4:c4:4a:7e:cd:6b:9c:e4:a3:5d:e8:18:17:9d:19:
                    8f:75:ce:34:66:96:d9:05:78:da:cf:96:2e:72:89:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:D5:E4:35:62:31:1B:B9:62:05:09:C0:0A:FD:D0:26:93:1D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ff0184b6-347a-3ad3-bdae-b382e8244d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:e1:eb:6d:02:eb:e2:e8:f5:3a:e3:ca:7b:ff:85:7a:ab:
         03:01:25:03:26:6b:21:c3:9b:d9:48:24:39:1d:ec:eb:f8:93:
         55:03:09:1e:d9:d2:3b:e5:08:77:1d:9f:75:c5:02:6c:de:24:
         ed:50:0e:aa:ac:76:46:ba:48:42:02:f3:b6:8c:32:27:8f:57:
         c7:83:e3:53:de:28:5d:33:67:62:ee:a9:ce:f6:b4:dd:79:41:
         13:48:41:f6:f9:b5:60:ca:79:60:fd:88:d9:05:21:22:c5:01:
         21:49:d1:6f:63:e9:ea:9e:9b:90:cd:48:ac:91:5b:4a:c8:ec:
         7f:89:73:5c:68:07:cf:e7:2e:dd:22:46:b4:4d:4c:64:74:52:
         b1:86:45:fb:41:c6:bd:27:78:a8:7b:68:88:65:4b:0d:03:f9:
         41:2e:66:01:d0:cf:e8:86:bd:57:72:9b:f2:56:f1:3a:56:6a:
         66:28:1b:95:d4:6b:3d:25:35:f1:9d:51:84:7d:51:75:3f:d6:
         0a:4d:68:4d:00:8b:0d:7e:65:ef:3a:07:2a:d7:21:30:56:cc:
         43:66:2b:e8:0d:39:32:7c:c0:d7:a8:58:e2:da:35:95:c0:0f:
         a2:d0:ce:f4:9f:c2:75:65:56:61:00:b2:36:ff:b3:be:48:25:
         48:58:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:32:26 2024 by rpki-client on console-ams.rpki-client.org