Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa
File:                     69ca97ab-3c91-3275-8ade-932e76a09cd9.roa (raw, json)
Hash identifier:          JuOZXGMnLR8mlGjCNwPyf1q3ydENN2MuDRkjtI6y02o=
Subject key identifier:   7F:F0:38:A4:AC:4E:BB:5B:F0:D0:D1:73:7D:A0:DD:0F:8A:C2:9B:43
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858450E779E723C72CEF51A619A00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa
Signing time:             Thu 29 Feb 2024 22:08:25 +0000
ROA not before:           Thu 29 Feb 2024 22:08:25 +0000
ROA not after:            Wed 29 May 2024 21:08:25 +0000
asID:                     21530
IP address blocks:        170.186.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:77:9e:72:3c:72:ce:f5:1a:61:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Feb 29 22:08:25 2024 GMT
            Not After : May 29 21:08:25 2024 GMT
        Subject: CN=2571a97a-920f-4b0b-bf1f-b840b896d3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:2b:da:bc:2a:f8:d7:56:4f:c3:d6:a5:2e:
                    2c:98:d0:d0:7f:33:93:41:31:be:a3:7e:3f:c1:90:
                    f4:5a:f2:a4:77:4c:fb:21:08:b2:b3:bd:d8:09:3e:
                    1c:bc:58:e4:2d:db:46:21:a5:80:9b:f7:28:86:4d:
                    ac:10:82:b4:5c:90:8a:a2:fa:cb:ed:9a:6e:b1:25:
                    ad:ee:34:ba:80:73:fe:4f:d1:4b:17:32:9d:a3:9d:
                    e2:91:87:35:10:67:51:2d:32:1f:b5:2b:c1:cb:90:
                    8a:d0:10:42:c4:9f:62:68:d0:02:c7:fe:f4:04:10:
                    13:3b:66:dd:41:52:22:7d:84:c7:af:b7:c0:a8:7e:
                    8b:d8:92:34:70:0c:de:13:97:76:56:41:c9:77:ac:
                    59:63:05:5a:fc:fb:1c:54:62:e8:04:1a:14:a4:90:
                    0b:cd:69:da:83:30:7f:eb:47:33:93:f8:94:8d:65:
                    1b:1a:32:e0:4d:22:5c:7c:b4:1e:f4:01:07:bf:62:
                    ce:5c:8a:20:50:70:b9:10:8f:43:ba:ff:b9:a1:e7:
                    6f:b3:f3:92:f5:de:f8:a0:5d:eb:3b:45:87:ff:83:
                    8a:31:dc:86:79:1a:44:c0:4a:e1:ce:bd:d6:d1:74:
                    78:76:c7:99:1b:21:65:00:a5:61:d1:47:0b:2a:23:
                    0f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:38:A4:AC:4E:BB:5B:F0:D0:D1:73:7D:A0:DD:0F:8A:C2:9B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:61:88:fd:9f:f0:a2:e5:fb:3b:32:f8:b9:e3:31:16:d2:
         a4:c7:3c:17:7f:af:5c:89:e0:8d:ca:3d:35:25:ae:6e:dd:4b:
         08:b2:63:85:98:ac:63:0b:62:cd:17:fc:f4:c7:6c:e3:ec:91:
         3c:40:da:cb:d8:cc:d0:85:29:84:78:e2:40:1a:97:da:44:de:
         ed:3e:c9:83:64:1e:90:fa:53:88:af:af:9b:8a:a6:cf:ca:29:
         4a:a7:09:32:06:4f:8f:83:b8:55:b1:54:43:8a:cc:89:b3:7a:
         c4:af:70:8a:51:c0:f4:4a:7b:9d:84:4d:85:b2:c6:b9:37:47:
         db:48:4d:69:08:22:28:a2:4c:30:07:25:d5:f1:9d:87:13:6e:
         a6:80:6a:82:c5:ef:5c:6e:01:b3:8d:54:0e:65:54:e3:d0:c6:
         c0:88:17:a3:ed:48:9e:f8:68:0a:9f:1e:a7:26:8e:8c:ad:26:
         4c:93:c2:2a:88:83:3c:f1:fb:dc:c6:7c:0a:f7:6e:c3:c0:a5:
         ff:ef:7c:e2:4f:e7:21:aa:ef:50:f4:be:58:43:03:6b:43:ff:
         ed:c0:34:e7:fe:d4:b5:d4:53:ba:4f:94:25:5c:57:cc:b7:ff:
         a9:6a:55:4b:16:14:d4:71:b6:59:f8:62:f3:8d:41:ea:3b:93:
         65:53:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:41:24 2024 by rpki-client on console-ams.rpki-client.org