Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88d01080-d45c-348f-a4f7-6a7bc8e813cc.roa
File:                     88d01080-d45c-348f-a4f7-6a7bc8e813cc.roa (raw, json)
Hash identifier:          pvcOXmBJZf3D0qlG/K0YwWU1KVul9LN0P/mHU5oYwXs=
Subject key identifier:   B5:89:84:3F:93:F4:3B:C8:D0:51:A5:48:C2:B9:7A:1E:BC:8A:2D:4E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845658FEE1E8CCA8256A37F2280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88d01080-d45c-348f-a4f7-6a7bc8e813cc.roa
Signing time:             Mon 01 Apr 2024 02:52:43 +0000
ROA not before:           Mon 01 Apr 2024 02:52:43 +0000
ROA not after:            Sun 30 Jun 2024 02:52:43 +0000
asID:                     834
IP address blocks:        174.140.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:8f:ee:1e:8c:ca:82:56:a3:7f:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  1 02:52:43 2024 GMT
            Not After : Jun 30 02:52:43 2024 GMT
        Subject: CN=07894094-2e22-454a-9e47-3fc6adec2500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:34:cf:b3:eb:09:f7:19:ae:f8:c2:b1:73:
                    f9:8e:77:12:2a:21:49:a4:75:99:9f:d0:9b:a7:e6:
                    5f:ac:ba:73:2d:21:ef:c3:44:86:27:1d:29:a1:ec:
                    94:cc:29:0c:a1:87:dc:c8:dd:cd:94:c3:ce:c3:fd:
                    06:ce:99:21:f2:c7:c5:cc:06:bd:1d:ac:1a:1e:1a:
                    1b:a9:51:e0:0d:f7:31:c3:4b:19:0b:59:49:18:30:
                    80:f4:a2:73:3d:81:66:15:69:1d:f3:ef:95:17:69:
                    25:93:91:d4:92:52:95:2a:24:7b:4d:3b:f8:3e:34:
                    de:2d:25:d7:b3:47:ec:76:6d:0e:31:fa:54:4e:35:
                    18:27:01:a5:be:c9:31:fa:bb:a0:40:4b:d3:06:14:
                    61:a7:a5:49:06:5b:7e:1e:a9:cb:bc:89:7b:60:2c:
                    08:1c:15:cf:55:df:81:f9:5f:5c:d0:d1:c1:81:09:
                    fc:c5:3c:cf:28:a2:c9:be:3a:13:97:b3:d3:2e:fe:
                    5a:20:cf:60:f6:94:66:8f:2d:1d:5c:d1:97:a7:17:
                    d5:7a:fd:59:63:2d:7e:41:42:44:b3:c9:08:8e:be:
                    05:26:e9:6c:d8:5c:36:cb:ea:de:f3:95:94:49:41:
                    64:21:2d:04:b5:e6:22:ce:d4:06:2c:ee:80:a4:be:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:89:84:3F:93:F4:3B:C8:D0:51:A5:48:C2:B9:7A:1E:BC:8A:2D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88d01080-d45c-348f-a4f7-6a7bc8e813cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ce:73:7a:aa:4e:bd:57:5e:43:a0:e0:53:e4:64:a3:44:fb:
         a9:54:72:7e:c9:1f:cf:c9:8a:bf:38:44:bf:b7:d8:9f:f1:03:
         9d:ec:3b:a5:c9:e1:ae:c6:9e:5f:db:a0:7a:21:c3:65:bf:3c:
         38:31:4c:0f:1a:da:d6:f4:64:24:67:82:b9:e0:04:e2:9c:4b:
         0b:fe:2b:5a:ad:1f:f3:3b:15:fa:71:3f:66:65:c5:46:b8:f4:
         fa:0b:69:88:f8:44:64:0c:26:f4:38:ec:8d:b2:15:50:3b:16:
         cf:89:75:33:2f:01:f1:95:37:5e:c3:f4:41:01:45:7e:31:11:
         b6:50:61:bc:d0:0d:01:82:3c:b2:d0:4d:ed:fc:a4:e3:f7:67:
         b2:3d:71:cb:d5:45:4f:a3:b2:d5:8d:dc:0c:0d:6c:e1:97:6f:
         9f:aa:56:1c:04:6a:35:28:74:77:d9:4a:ae:a2:8f:cb:5f:e6:
         90:06:0e:71:fc:91:1c:18:6a:07:e2:07:f4:4e:68:22:15:6b:
         e2:3b:8e:61:35:8c:b7:d5:ad:7c:8c:cc:00:42:17:d0:9a:3f:
         21:11:20:00:f5:d7:bf:81:ea:94:38:aa:01:a0:2d:75:76:12:
         10:5a:0d:65:dc:06:c1:62:0a:e9:88:11:58:a6:0f:be:37:33:
         76:23:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:39 2024 by rpki-client on console-ams.rpki-client.org