Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03400391-4907-3c96-bfc3-90ef6379a1a4.roa
File:                     03400391-4907-3c96-bfc3-90ef6379a1a4.roa (raw, json)
Hash identifier:          qQHJcmMB1E0xD5TIcJX201VNY++vmEBhweqP8Mn7ZTU=
Subject key identifier:   0C:B0:5E:90:62:0F:56:E4:F6:7A:CB:53:E8:8D:63:AC:70:F6:C6:31
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F895670AC6B6CBC395CC6880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03400391-4907-3c96-bfc3-90ef6379a1a4.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     22890
IP address blocks:        184.105.28.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:67:0a:c6:b6:cb:c3:95:cc:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=e5f6b378-c611-4d44-ba5b-29b05c9d44ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:3e:82:2a:cd:65:a1:22:77:e4:db:e5:cc:
                    ba:af:b1:f1:c0:5e:30:70:49:68:5e:19:65:dc:7c:
                    5d:91:18:4b:e0:85:0a:4f:d8:92:84:2c:4c:a9:c7:
                    02:ff:5a:7b:40:9f:1d:d3:2f:17:36:9f:f4:4a:2f:
                    f9:3f:cc:2c:34:7d:88:36:c3:11:57:e9:fc:95:c5:
                    25:7d:82:ed:5b:c3:49:86:c7:19:54:71:fa:05:e4:
                    49:13:2b:aa:1f:54:12:18:b3:45:d0:3f:1a:f8:f7:
                    08:74:32:44:91:30:9c:2e:52:f6:8b:f2:c2:4d:4e:
                    53:ed:9d:5a:ed:c5:57:b6:93:12:2b:cf:c1:ce:5e:
                    a5:ce:2a:48:e9:40:0b:2e:b6:ae:7f:28:29:3e:fb:
                    a7:ed:06:ff:d4:62:b2:2b:44:da:50:d2:d6:e2:75:
                    1f:10:51:b3:af:c8:de:20:8a:95:42:b3:44:80:1f:
                    c2:50:ff:f9:39:7b:96:ed:00:24:44:2e:f3:fb:f4:
                    55:5f:9d:e9:c7:d1:c7:fe:d6:c1:bf:4d:1b:2f:fe:
                    e0:d0:ac:2e:80:11:cf:9e:c6:ef:3e:d8:ff:ca:d2:
                    6a:16:9a:91:57:7e:6d:a1:f0:0c:08:d9:8d:f6:62:
                    9e:1f:eb:79:5a:57:10:c9:f1:be:01:7d:6d:57:c0:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B0:5E:90:62:0F:56:E4:F6:7A:CB:53:E8:8D:63:AC:70:F6:C6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/03400391-4907-3c96-bfc3-90ef6379a1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d1:35:42:da:b8:11:92:4a:20:15:1a:59:c5:8b:be:f6:6e:
         e1:eb:1f:bb:4c:03:0f:47:be:3f:7c:bc:a3:22:76:8d:48:bd:
         dd:9b:55:3f:c2:0d:22:4a:de:0f:b9:e3:6b:a7:3c:04:b8:3e:
         90:05:5d:67:83:7f:7c:5c:98:4b:53:39:05:10:e7:a6:9a:e8:
         a2:b1:bd:11:18:d8:f3:23:19:8f:3b:e6:4c:98:26:a7:ba:4b:
         3a:c7:82:07:6f:11:e0:2e:c5:84:3e:58:49:37:fb:09:95:e2:
         ea:84:6a:52:1e:6a:ff:4f:58:54:02:c0:95:bd:15:95:20:f2:
         fa:8a:f9:3b:2f:72:0c:32:b1:ed:33:2b:6e:1d:66:34:1b:71:
         aa:31:24:e0:90:54:5f:09:31:c6:d9:e1:dc:9a:b9:ac:26:18:
         80:36:ae:34:7e:62:7b:38:b4:02:64:c6:6f:90:41:d4:52:71:
         f6:df:08:5c:dc:b7:22:b9:76:8f:9e:39:da:02:e9:da:22:3a:
         00:96:a9:5c:b6:61:e5:c6:f2:aa:f6:4b:b8:78:a6:9c:2e:66:
         0c:9e:50:cf:51:6a:f4:81:f8:1e:59:d5:39:ab:2e:cc:e2:61:
         f0:9e:18:06:1d:61:25:30:7f:f3:8f:ca:47:fa:fc:4d:1b:0c:
         d1:c8:2b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:50:41 2024 by rpki-client on console-ams.rpki-client.org