Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/e2134ca9-7b3b-37d8-9878-86d135ffbfbc.roa
File:                     e2134ca9-7b3b-37d8-9878-86d135ffbfbc.roa (raw, json)
Hash identifier:          iGLFxjMT2RP8yHp60ppKsPFBU0qUErTcOS5m4F4Cqfo=
Subject key identifier:   D2:D3:84:5C:09:BC:C7:AC:8C:B2:CD:CA:14:DC:E4:51:DA:7A:2A:D4
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584538AD48DAA9D1462B521DF6C0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/e2134ca9-7b3b-37d8-9878-86d135ffbfbc.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     11273
IP address blocks:        166.73.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:48:da:a9:d1:46:2b:52:1d:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=c4a7551b-a09a-4c03-847c-349e0c81a54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:dc:f3:41:1b:cb:a2:0a:3d:1f:a1:bd:35:
                    47:60:93:c0:02:a2:08:bc:09:3d:fd:3d:b9:f3:d9:
                    0c:df:05:ab:77:84:78:95:70:f5:26:76:3e:1e:3b:
                    04:de:8d:83:37:e6:67:f1:90:b5:2d:4c:bd:01:a7:
                    f8:73:30:db:6f:8a:68:e4:8b:26:34:c0:bc:31:a7:
                    b3:0f:fa:d3:40:d4:0e:e2:b4:98:cd:c7:6a:03:88:
                    a6:83:12:44:94:e1:87:02:7b:b1:3c:05:3b:2f:23:
                    41:7c:d1:bc:9c:d0:02:1a:0f:81:dc:4d:d5:a4:19:
                    98:90:60:2c:40:9a:f6:c3:bd:39:36:07:65:cc:aa:
                    93:f4:8b:1b:b6:3b:f8:77:b4:53:8a:cc:00:d4:36:
                    c9:b3:d7:e3:90:6c:29:0d:0c:66:68:f0:51:19:0d:
                    60:47:b7:24:e8:c8:e5:f6:0e:59:42:e8:a0:83:2f:
                    17:b2:82:a4:41:0f:8f:cf:3d:39:b1:60:58:5c:a9:
                    3f:67:68:dd:66:85:1f:4c:25:23:e0:d3:20:47:6a:
                    7b:0f:79:57:92:b5:40:f2:b4:52:63:81:3f:6b:63:
                    1b:95:4b:8e:ec:94:97:c9:fe:48:bd:ee:c3:4d:2b:
                    c4:6e:0f:18:90:5d:b1:38:51:70:bc:a5:2e:39:80:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D3:84:5C:09:BC:C7:AC:8C:B2:CD:CA:14:DC:E4:51:DA:7A:2A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/e2134ca9-7b3b-37d8-9878-86d135ffbfbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e8:e2:c4:3f:20:78:02:29:04:b8:d6:10:7d:80:ff:0c:b9:
         3c:76:23:fb:98:6d:c6:41:a1:9f:a9:ce:3c:65:42:13:64:b4:
         1c:0a:46:d2:0a:9d:41:21:5b:a4:23:c7:45:41:69:d2:72:bf:
         af:40:ae:ba:53:58:fb:5e:92:b3:be:f6:50:dd:8d:2e:48:f4:
         bb:c3:c5:09:8a:95:03:cf:bc:9d:e4:58:5c:dd:17:f7:e4:10:
         53:19:8b:bb:da:5f:06:27:c4:34:86:d1:98:50:36:b3:12:b6:
         ee:1d:1f:9f:65:99:6f:38:78:b6:3c:06:b3:69:dd:91:9a:f3:
         d7:b7:78:f0:3a:63:cf:a4:a5:12:4e:c6:dd:b7:aa:76:a1:eb:
         bd:2e:3e:0f:df:7b:e4:90:d5:27:6a:14:a4:30:19:02:ee:19:
         bd:c6:0b:07:68:73:24:a2:c8:14:de:c2:ce:84:e0:b4:33:ca:
         c5:20:00:21:80:1f:d1:62:1a:5a:ac:fa:1e:ba:1a:6e:9f:48:
         af:16:f7:53:13:c0:50:13:3e:9a:de:84:31:2a:c5:f5:79:80:
         a0:80:bd:7c:bc:f0:ae:46:91:fb:ed:d4:76:e5:55:93:70:c5:
         6d:ef:d1:22:cd:67:a7:c1:f5:d0:1e:3a:a0:36:bb:40:33:43:
         0a:54:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:39:07 2024 by rpki-client on console-ams.rpki-client.org