Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
File:                     542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json)
Hash identifier:          szuZuOo5RUQmWjBQcqmWYWn0QUYwSq4YIpQkFbNuF24=
Subject key identifier:   09:2A:39:55:3C:05:D6:92:0B:36:14:9C:FD:76:E8:4B:FD:AF:37:3C
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858450E783BEFE63AFB835288FE00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
Signing time:             Thu 29 Feb 2024 22:09:39 +0000
ROA not before:           Thu 29 Feb 2024 22:09:39 +0000
ROA not after:            Wed 29 May 2024 21:09:39 +0000
asID:                     21530
IP address blocks:        170.186.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:78:3b:ef:e6:3a:fb:83:52:88:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Feb 29 22:09:39 2024 GMT
            Not After : May 29 21:09:39 2024 GMT
        Subject: CN=8f38db64-1605-4ddc-b917-6a30fd5fe639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1d:34:3b:52:4d:9a:82:f8:e4:ad:4f:73:fb:
                    28:2c:cb:d6:f6:50:d0:25:79:33:2a:fb:7e:49:1b:
                    76:f3:5e:41:17:55:3f:e5:a8:38:8f:72:36:24:ae:
                    b1:c8:7f:fa:af:1a:c1:2d:5a:02:07:c3:8d:6c:2a:
                    97:9a:0a:66:80:ec:e3:48:55:0c:d7:a7:cf:ce:5a:
                    bb:8c:43:ba:13:e2:a8:c8:bc:2c:3d:70:a7:23:b4:
                    1d:2d:2b:2a:8b:dc:51:8f:cd:ec:78:56:20:cc:c2:
                    4d:44:40:ac:fd:5b:f8:70:cf:e5:8b:b4:6e:6f:79:
                    21:68:e4:b1:da:f7:d9:b8:d7:56:c6:78:d9:b9:a6:
                    03:cc:0f:2b:ea:e0:66:c7:ea:46:f0:11:5a:33:e3:
                    13:92:72:70:1f:96:db:e1:32:14:cc:1d:8c:19:c2:
                    a9:e9:da:7b:39:32:49:59:a9:9d:df:91:87:1e:e8:
                    a8:b0:93:be:08:f5:ec:bb:2f:d9:ac:d8:5d:c7:63:
                    67:df:a2:9f:0d:5d:db:7b:01:f9:2e:24:68:d0:71:
                    ad:f0:f4:3a:8f:31:3c:39:f7:f7:b3:82:86:c7:df:
                    75:17:52:c1:14:0c:ea:70:33:11:3e:a7:ee:66:e1:
                    5a:b2:d8:17:cf:da:54:93:08:ef:7b:a9:81:8c:df:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2A:39:55:3C:05:D6:92:0B:36:14:9C:FD:76:E8:4B:FD:AF:37:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:6a:25:58:40:ee:37:c6:ec:be:a6:c5:6e:73:d6:c2:f6:
         7c:dc:90:8f:3b:e6:6e:38:76:c7:7a:8b:98:16:34:53:a6:60:
         8a:3c:04:94:50:0f:3b:fb:61:f2:e9:55:3f:ab:48:52:bc:98:
         59:b7:14:52:36:db:34:e9:ca:c0:f9:6b:d1:26:68:19:b5:9d:
         91:72:34:24:9c:b0:42:45:41:67:30:3d:c2:de:02:9c:19:df:
         6c:13:87:51:e8:c1:fa:cc:e2:f1:cb:e7:1c:3f:84:32:d2:74:
         a0:c6:d8:71:81:7b:09:07:70:c7:e4:e4:b0:16:73:1c:c5:f8:
         82:8f:75:e7:20:6c:a0:4e:21:a1:81:c8:7e:a9:54:57:74:0b:
         2f:68:4d:d9:84:6e:7a:37:97:35:56:e3:97:6d:6d:f8:c5:19:
         00:f2:ef:2f:19:e4:95:c7:86:18:07:63:63:4a:8a:af:31:41:
         40:c3:d3:d1:d4:b3:ef:47:e2:25:5b:28:10:f4:fa:27:6e:4f:
         00:be:d2:3a:4d:e9:1e:ec:b2:31:5f:58:03:6e:20:df:ab:c2:
         0e:28:f6:04:4a:67:bc:1b:b8:07:e8:c3:4b:c3:27:31:a9:dd:
         a1:8a:54:41:b1:6d:48:be:63:50:f5:e4:87:5b:83:37:a6:76:
         10:81:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:58:12 2024 by rpki-client on console-fra.rpki-client.org