Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa
File:                     77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa (raw, json)
Hash identifier:          mWctOJsnP9d82fkmdKJf/xXSppovBanoVkiKS6cRnO4=
Subject key identifier:   74:94:85:65:51:BB:A6:9B:18:B8:8F:D9:E9:70:90:A1:B9:69:15:FA
Certificate issuer:       /CN=1c6fc533-f46c-474e-9480-56c3b0fb1938
Certificate serial:       010D0C9F432858469C9F932D0B2ABEC02A3ECE10
Authority key identifier: 45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa
Signing time:             Sun 21 Jul 2024 13:00:36 +0000
ROA not before:           Sun 21 Jul 2024 13:00:36 +0000
ROA not after:            Sat 19 Oct 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        195.85.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9c:9f:93:2d:0b:2a:be:c0:2a:3e:ce:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6fc533-f46c-474e-9480-56c3b0fb1938
        Validity
            Not Before: Jul 21 13:00:36 2024 GMT
            Not After : Oct 19 13:00:36 2024 GMT
        Subject: CN=7f4610b1-11a5-4f60-a448-7943b5ea9594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cb:50:e7:4e:a6:0c:86:67:a7:37:33:00:60:
                    c4:55:59:e6:cf:2f:c1:0e:14:9e:13:01:c9:cd:53:
                    3f:31:3e:8b:d4:20:76:7d:bd:79:b7:1f:ca:15:4b:
                    91:09:ee:f9:a5:94:cb:1e:4c:6e:ed:02:8d:84:6b:
                    da:85:7f:8e:11:58:97:c9:a8:25:07:fd:07:a4:6d:
                    3b:d7:a8:92:42:19:5c:78:5a:19:f7:b2:ec:45:e1:
                    5e:6b:cd:e9:79:76:4e:11:fc:5c:c0:c1:25:ff:31:
                    3d:9a:e3:18:31:07:73:66:b1:02:2f:b6:85:87:41:
                    d1:cd:15:6b:9d:56:f7:d4:43:15:a1:1a:d2:80:a5:
                    20:31:4f:a2:ee:99:ba:75:09:ef:44:29:ba:73:7c:
                    aa:d6:2e:c3:3b:2b:d0:c5:c3:11:6d:32:c8:d9:a5:
                    a7:e9:c5:dd:38:fc:48:35:d8:02:f4:26:85:cb:5a:
                    68:71:51:92:b5:88:66:46:8d:a8:5f:d8:a1:7e:c7:
                    fa:11:8c:20:ce:af:3e:6e:6f:71:e3:58:1b:6c:91:
                    65:bb:1d:60:d8:69:ce:52:2b:9b:ef:db:24:a7:40:
                    e3:65:4d:12:4c:50:ff:67:13:46:91:dc:01:d5:f1:
                    51:be:a9:1b:df:9a:2f:3f:0f:9d:8b:bf:be:b8:5e:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:94:85:65:51:BB:A6:9B:18:B8:8F:D9:E9:70:90:A1:B9:69:15:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/77ffd4d2-faa9-3c8e-a5c0-c99699f833f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938/1c6fc533-f46c-474e-9480-56c3b0fb1938.crl

            X509v3 Authority Key Identifier:
                keyid:45:48:C6:E8:F8:ED:19:15:49:2A:5E:2C:E5:BE:FE:5E:11:2E:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1c6fc533-f46c-474e-9480-56c3b0fb1938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:00:e1:69:4a:5d:88:99:27:47:75:75:ca:40:88:78:24:27:
         ab:71:05:81:73:65:b3:9f:8b:30:de:d6:59:da:23:7e:da:67:
         8d:bd:3b:9a:e5:7e:ff:41:45:65:85:1a:bf:91:28:c9:ef:bb:
         fd:90:20:22:82:17:f1:a0:06:ce:95:80:16:2b:a1:c4:41:e2:
         da:4d:f2:ba:e5:d6:b9:d4:f9:a8:4b:92:83:da:72:5a:32:58:
         aa:91:51:80:3a:e6:fb:5f:e4:35:2f:a8:00:94:fb:37:54:de:
         ab:09:62:28:cb:6f:9f:e6:8d:9b:da:45:1a:64:b0:18:4e:3b:
         c3:67:8f:bb:4b:ab:4a:3c:7a:8e:33:95:b3:31:cd:59:e7:61:
         e2:d4:d3:fb:2c:21:0c:94:72:18:76:cf:5b:57:bf:1e:ce:85:
         92:47:14:87:4a:0b:7a:b9:31:a7:ec:e7:9b:3e:f4:93:4b:fd:
         1c:bb:45:e4:41:5e:1b:93:23:1f:1c:83:68:37:02:cd:1a:10:
         c8:98:df:b9:21:ca:4c:dc:4e:7d:d9:49:29:59:37:a8:07:cc:
         1d:aa:7a:8a:80:6f:09:7e:a1:4a:44:95:19:63:ad:6a:1d:c1:
         0f:49:34:2d:77:f1:ee:dd:53:e2:6d:ef:0e:eb:41:c0:91:15:
         11:92:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:18:20 2024 by rpki-client on console-ams.rpki-client.org