Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
File:                     59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa (raw, json)
Hash identifier:          BWutXG3+hEgHpTPw1KQqBZ6Px33u3uk9ADe1jWWMAiI=
Subject key identifier:   E0:3F:A8:BE:31:19:6B:5D:2E:B5:88:53:23:73:5C:15:1C:69:D4:D3
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858450E78CC5F010D6C09CB3DE380
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
Signing time:             Thu 29 Feb 2024 22:10:47 +0000
ROA not before:           Thu 29 Feb 2024 22:10:47 +0000
ROA not after:            Wed 29 May 2024 21:10:47 +0000
asID:                     22142
IP address blocks:        170.186.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:78:cc:5f:01:0d:6c:09:cb:3d:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Feb 29 22:10:47 2024 GMT
            Not After : May 29 21:10:47 2024 GMT
        Subject: CN=61c07e73-c140-4ea0-9514-07121adcccfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:68:89:48:c2:53:56:80:31:52:a0:67:8d:
                    7b:60:8d:17:5d:74:42:70:1d:6c:5e:c6:a7:a8:84:
                    d4:ca:4f:7e:4b:97:22:e4:fa:d5:e8:00:a7:76:6a:
                    60:66:74:24:99:a2:f9:4e:c6:ad:72:ca:28:f6:f4:
                    22:29:b9:ab:12:91:2d:9a:03:6b:37:88:86:bb:1c:
                    01:3c:e3:56:59:13:78:4a:8f:b8:b7:7a:0f:b3:dc:
                    74:59:3f:d6:4c:83:9d:4b:b7:b9:a1:10:29:8b:58:
                    ee:77:b0:89:1a:23:aa:03:a0:e0:d8:ff:75:e2:5e:
                    1e:1b:c1:06:de:ae:d7:09:9f:9d:48:71:25:53:50:
                    08:d0:c5:c3:53:6d:b8:cd:9d:17:f6:b1:e1:1c:67:
                    8e:5d:1f:99:a0:00:29:9b:5a:8c:41:48:d4:94:86:
                    60:97:71:db:6c:bf:1f:28:d7:b2:92:98:33:03:e6:
                    36:ba:bf:df:69:a8:d8:af:86:fa:5c:f4:d8:eb:c5:
                    25:95:74:39:2b:64:d6:05:f6:ec:c4:e9:5a:c6:f6:
                    c1:30:09:37:6b:61:f4:3f:f7:1d:22:2a:37:e6:aa:
                    61:8f:d2:53:d6:d6:31:03:54:17:b9:9c:49:cf:6a:
                    ae:b1:f1:5c:e6:a9:ab:a2:f4:03:d2:2b:fd:38:6f:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3F:A8:BE:31:19:6B:5D:2E:B5:88:53:23:73:5C:15:1C:69:D4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:06:ee:00:ce:80:4f:0d:cc:a7:a9:b5:46:ad:4f:fa:ab:7d:
         f6:89:83:26:3e:1e:c9:0a:91:1d:ca:4d:d5:91:62:39:ff:0a:
         83:39:0f:cb:49:64:40:1b:39:81:dd:57:e2:3d:6e:4a:82:a0:
         16:e0:f2:77:9f:11:0c:19:a8:c0:fa:51:f6:6a:d5:03:bb:41:
         c8:56:ee:53:fe:04:f8:24:07:c5:08:74:5e:69:85:cb:73:96:
         f9:a4:16:f7:26:7d:33:79:02:40:dc:b4:2e:5b:1e:55:38:9c:
         96:8d:51:40:c0:8e:f9:70:85:13:4b:93:fb:56:35:71:f2:b9:
         43:31:08:48:3d:a8:8b:2a:4e:3a:cf:d5:b3:31:25:b4:46:72:
         7c:d1:fd:16:92:f7:ba:61:04:31:25:6f:4f:ee:99:7d:cb:28:
         2e:71:b4:77:fd:f9:36:79:11:7b:b5:75:0e:c2:e0:3c:60:55:
         a6:4a:cb:b2:e5:af:bd:85:f0:a8:b0:25:07:71:8d:7b:53:5a:
         51:71:df:ba:41:c9:20:f5:88:94:4e:7e:07:1a:25:e9:ea:c2:
         a5:c6:bb:61:5a:14:a8:69:69:66:c4:42:88:d2:b7:1c:7d:2c:
         08:6e:24:85:a0:52:6f:e6:e4:ea:6f:57:3e:8f:27:b8:8f:04:
         5d:83:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:07:01 2024 by rpki-client on console-ams.rpki-client.org