Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85eb037c-acf7-3afd-a1ef-ef574abaec30.roa
File:                     85eb037c-acf7-3afd-a1ef-ef574abaec30.roa (raw, json)
Hash identifier:          +MluJ5Vs42vtox7jcZBDKdRxgAV4+x9UZ/OjIagly28=
Subject key identifier:   AF:F9:A6:E1:0C:AD:C5:C4:57:E1:64:A1:B0:E4:B1:42:07:E5:7F:0E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858478B51143B04196B7BAFCE3980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85eb037c-acf7-3afd-a1ef-ef574abaec30.roa
Signing time:             Tue 15 Oct 2024 01:00:35 +0000
ROA not before:           Tue 15 Oct 2024 01:00:35 +0000
ROA not after:            Mon 13 Jan 2025 02:00:35 +0000
asID:                     19446
IP address blocks:        67.227.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:51:14:3b:04:19:6b:7b:af:ce:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 15 01:00:35 2024 GMT
            Not After : Jan 13 02:00:35 2025 GMT
        Subject: CN=c92e8ef9-31fa-4155-8bdb-ce030b5b5434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:68:04:4a:73:1f:35:6a:c3:0c:b6:54:a3:09:
                    0a:60:95:8b:9f:79:30:24:29:a6:3e:b4:8f:a9:06:
                    9c:8c:b0:5c:5c:ef:f7:58:4a:cc:1c:c4:01:8b:78:
                    35:ac:e9:4c:3f:cb:4e:b0:39:a1:88:e5:12:5d:1b:
                    8c:59:57:31:fe:33:e3:c3:29:10:40:ef:59:79:86:
                    2c:bd:f6:63:8a:8c:8a:4f:79:0a:b8:cb:e9:f5:41:
                    40:a5:c9:25:3d:f4:6e:05:7d:cb:48:f3:5a:9e:0d:
                    1b:8d:cb:9d:42:1c:d5:0a:b2:e4:6f:73:cb:8c:cc:
                    4b:16:5a:12:f1:a8:7d:80:22:d0:e7:f9:42:fe:b3:
                    98:28:ee:4f:b3:a8:4e:1a:68:59:3c:9e:c0:c7:79:
                    f0:ca:af:91:02:10:33:02:c0:e6:28:cc:a1:c9:19:
                    82:b0:96:e5:ce:3a:2a:59:58:36:99:c1:36:f7:aa:
                    33:43:0f:40:29:2a:3b:36:3b:d8:4d:25:6d:cb:27:
                    e1:e6:44:c1:2d:11:1d:c6:49:7b:b8:bf:00:1e:7d:
                    3c:94:a0:78:37:d9:30:67:a5:e2:0c:da:ab:74:9f:
                    03:b8:c7:bd:c8:bc:62:e9:88:29:0f:9c:8f:6a:62:
                    b3:30:41:ff:2d:66:2f:b3:ab:07:ef:9e:ca:f3:1f:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F9:A6:E1:0C:AD:C5:C4:57:E1:64:A1:B0:E4:B1:42:07:E5:7F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85eb037c-acf7-3afd-a1ef-ef574abaec30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:01:61:e1:01:3d:29:a7:0f:72:c4:bb:07:fc:e3:27:2b:6b:
         cb:38:24:02:bf:b3:6f:72:8f:db:16:f4:58:19:ed:8a:6b:f6:
         9f:f9:25:4e:9a:01:9e:2a:eb:fe:b4:4f:b4:48:31:04:9f:df:
         31:b3:03:dd:51:87:5d:84:e4:45:6c:de:ac:99:cb:29:61:1d:
         c5:5f:a3:64:8d:fd:d6:5f:6c:54:47:73:0a:3a:0d:d2:a7:7c:
         e3:18:41:a2:0b:69:b8:fc:1d:d5:f7:5c:e9:26:54:77:de:d5:
         39:c8:a4:49:02:bb:96:7a:18:59:bb:97:18:13:5e:fc:c9:7c:
         b3:ff:d0:28:78:c2:83:85:7d:44:51:57:06:01:b4:50:ed:cf:
         60:ee:6f:7a:61:fa:0b:8f:db:b4:07:d4:8f:18:f3:52:2c:c6:
         ca:49:02:ae:f7:91:87:72:7e:f5:52:80:25:9e:eb:ea:6e:28:
         10:36:f2:60:72:70:b0:8f:cc:ca:dd:4f:18:fc:82:63:7b:7c:
         0c:7a:21:5a:e9:08:45:20:41:39:c3:e0:7c:8d:9b:1d:6a:91:
         e1:0d:46:00:3d:db:c4:9a:0b:c4:a4:33:05:1a:d6:be:fa:66:
         ef:73:3e:35:26:95:65:38:34:42:a2:1c:4a:53:fd:44:2c:a7:
         96:bf:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:12 2024 by rpki-client on console-ams.rpki-client.org