Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
File:                     c4a6b7c2-8475-3612-9c69-66526f25323b.roa (raw, json)
Hash identifier:          sr4/27rX41rfhYGPrG9ibNwhgDgTSUgpKsnl6Ir7EDw=
Subject key identifier:   FF:1B:32:B9:47:97:55:9F:F8:13:4A:11:A5:45:88:D2:F8:50:E8:2E
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584538AD4880AA86200E2E3C0F80
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     11273
IP address blocks:        204.124.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:48:80:aa:86:20:0e:2e:3c:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=bb45095c-303e-4123-8833-3e15eb56adff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:34:ac:df:af:20:a3:78:dc:39:7e:f3:35:
                    a6:e2:82:7d:90:22:e2:24:22:0e:7d:b7:0a:be:ea:
                    65:0c:b7:56:e4:68:ad:a8:ec:2c:d6:8f:8b:c9:d4:
                    08:be:d8:e2:a3:08:cd:22:9b:3c:36:4e:78:6d:3b:
                    03:48:4d:c8:74:f0:26:4a:91:7e:47:f7:65:70:3b:
                    96:48:49:d7:78:2e:eb:5e:c0:c2:10:d1:02:3a:82:
                    34:35:ce:b6:c0:3d:33:d6:fe:06:bb:5a:b4:f5:3d:
                    3e:b3:a3:25:9b:07:34:48:78:e0:4d:00:2d:77:37:
                    40:52:e3:84:90:4c:1d:ca:43:c1:e8:bc:77:71:7c:
                    40:4f:3f:93:16:b0:95:71:24:fc:8a:74:c2:79:f2:
                    2f:f4:50:bc:0c:6c:fb:5a:30:6b:ee:48:c4:6d:d1:
                    3b:cf:e5:2e:b0:17:7a:0e:7e:54:13:f2:dc:fa:fb:
                    2f:10:8a:58:e7:53:f5:21:b4:86:08:b2:b3:65:10:
                    df:68:7f:4b:6d:3b:62:7b:a2:b0:54:df:a3:40:d3:
                    93:e4:a0:62:89:d4:b6:04:5a:01:12:85:48:2b:cb:
                    91:49:94:83:3e:15:7a:cb:3e:0d:e6:04:d9:28:00:
                    83:81:61:48:e7:6e:af:f4:79:cb:79:8a:af:f0:cb:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1B:32:B9:47:97:55:9F:F8:13:4A:11:A5:45:88:D2:F8:50:E8:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5a:d4:8b:2e:13:f7:7c:97:26:78:2e:16:42:5b:b6:47:f8:
         ab:28:d1:37:98:4d:04:75:6b:64:71:a4:e1:6b:6e:13:a5:7e:
         9a:a5:de:20:ce:ed:30:61:28:5a:ed:d1:23:bd:b2:d3:7c:eb:
         bf:74:2d:9d:fb:a1:b8:05:fa:7c:7d:0a:65:16:6a:6e:d2:21:
         9f:8b:68:34:aa:43:a0:44:e2:ef:98:58:10:72:0d:d2:48:42:
         4e:08:81:53:cb:83:2d:ea:9e:49:0d:c4:9e:54:60:4f:36:f1:
         5a:d3:6c:1f:32:46:3e:1d:60:dc:81:23:a0:9c:fc:6e:13:35:
         14:0a:77:7e:06:69:03:a1:7f:b2:20:11:2e:f8:f8:5b:46:b8:
         90:2a:7f:18:6b:c9:8a:3d:08:22:13:15:f9:7c:09:37:d5:ca:
         d0:f2:98:15:18:8f:52:70:b2:34:8f:69:f3:57:16:16:26:13:
         20:b6:08:10:c0:d9:06:a1:64:a1:7b:ca:8e:fe:f3:a3:39:78:
         e2:a2:65:37:05:1f:08:85:c2:b0:f9:99:cf:b7:85:6f:9b:14:
         65:a0:5f:56:bc:20:40:03:42:33:b9:21:30:5f:cb:7e:f8:cc:
         64:db:ef:c2:f1:a0:cc:f8:5c:fb:b2:30:00:7b:9b:f3:df:47:
         10:17:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:21:40 2024 by rpki-client on console-ams.rpki-client.org