Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/9c29496d-88cd-3a41-8339-8242decddb5d.roa
File:                     9c29496d-88cd-3a41-8339-8242decddb5d.roa (raw, json)
Hash identifier:          yXGjsursmkqdLo/v2lqVjljksJ67QxkqW/sAoRMKunY=
Subject key identifier:   21:03:36:2C:A3:84:52:2D:17:94:AB:36:2C:5E:F6:2B:13:B3:17:6B
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F432858457DB63BEB893DC0F17C5AD500
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/9c29496d-88cd-3a41-8339-8242decddb5d.roa
Signing time:             Tue 09 Apr 2024 18:29:18 +0000
ROA not before:           Tue 09 Apr 2024 18:29:18 +0000
ROA not after:            Mon 08 Jul 2024 18:29:18 +0000
asID:                     397477
IP address blocks:        23.226.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:b6:3b:eb:89:3d:c0:f1:7c:5a:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Apr  9 18:29:18 2024 GMT
            Not After : Jul  8 18:29:18 2024 GMT
        Subject: CN=b0f3a9a6-4d20-4fbe-9dd6-c8d612f9c1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:45:ba:d4:7f:25:2e:28:9d:f5:83:32:3d:
                    4a:e4:81:2a:09:5f:00:b1:1f:bf:ee:01:a8:53:26:
                    93:81:b7:2a:f8:a7:de:e5:5f:34:a4:3f:e7:9f:ec:
                    9e:60:f7:1d:ad:a9:70:36:36:b9:83:42:3d:5c:02:
                    6a:0b:0e:81:af:d5:48:f7:98:01:6c:65:e9:c9:4f:
                    76:9c:10:c2:8e:40:b8:31:ee:92:d3:2c:d3:58:bf:
                    73:43:2d:20:bd:0c:80:ea:8a:20:97:88:08:56:b4:
                    70:c6:42:ed:31:4d:32:b3:8d:93:37:d7:aa:be:55:
                    ad:a0:f0:7c:d2:d8:41:0e:c3:43:e5:c4:06:c9:57:
                    dc:f8:8c:86:3a:43:05:5b:39:6f:ad:29:49:39:0b:
                    c4:5d:04:43:5a:4c:cb:a6:e7:eb:e1:f8:b4:4a:88:
                    bf:b1:3f:33:99:26:16:8d:69:b5:40:26:7a:d6:c7:
                    18:f9:d9:26:1a:4c:82:a3:bb:af:a7:7f:6f:16:2f:
                    c0:9f:27:01:b4:71:a6:e2:ac:26:c0:e7:58:07:75:
                    dc:1c:a3:4f:93:40:0e:c6:7d:0c:7f:be:58:88:9b:
                    21:a9:b5:53:a4:84:6c:cb:9e:2c:7c:41:20:1c:da:
                    9d:f2:04:8b:22:0e:30:c2:2d:7c:c3:3b:71:21:30:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:03:36:2C:A3:84:52:2D:17:94:AB:36:2C:5E:F6:2B:13:B3:17:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/9c29496d-88cd-3a41-8339-8242decddb5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:13:26:15:f6:bd:26:63:34:f9:70:62:d8:48:56:47:9a:8c:
         e1:1d:99:50:c0:61:50:e0:07:84:dc:46:a9:ab:5c:5d:fa:dc:
         58:a9:56:31:bc:dd:65:aa:cc:de:26:9e:72:b5:06:64:79:07:
         cf:41:6d:8a:0c:39:64:66:ad:0f:44:29:93:18:50:ab:56:4e:
         82:c2:05:25:a0:6e:d1:95:43:83:72:12:14:3b:3e:2e:ec:f9:
         4b:88:43:41:15:d7:58:0e:f2:58:93:aa:34:70:c0:40:6a:e1:
         5f:8d:30:3a:90:a5:b7:14:02:e4:42:7c:5c:4b:98:b9:77:2c:
         2c:9e:56:0b:ef:30:e5:d0:74:bb:2c:2b:a9:b4:c2:2f:27:19:
         43:e3:dc:5e:40:b1:1a:15:08:c5:f8:30:11:10:93:20:61:6c:
         bd:c2:fd:1d:7d:b4:22:6c:61:a5:08:63:2a:f1:02:9a:58:fc:
         18:68:19:43:0d:e0:40:99:3e:0c:37:f6:5a:1d:0c:ff:5c:ca:
         0d:09:00:77:73:ae:e6:82:d2:5b:26:51:66:b0:6d:eb:c7:31:
         14:8b:19:17:7b:95:8e:cc:05:51:01:97:a1:16:59:f8:39:85:
         fe:29:76:2c:6f:51:57:88:b3:23:23:a6:a1:3a:11:aa:f4:56:
         1c:d6:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:58:38 2024 by rpki-client on console-ams.rpki-client.org