Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa
File:                     28a41872-63b1-3476-b351-97f772fb1f96.roa (raw, json)
Hash identifier:          6JalbD6+9Io/R/QYRV2SAsnO3hNqkrOLp+rEZtAeO8Y=
Subject key identifier:   45:BE:50:6C:BA:5D:FB:DD:92:25:FA:6C:D3:0E:A0:0B:D4:CC:62:0B
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285845BA7E33959F5924E7A398F780
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     398712
IP address blocks:        23.227.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:33:95:9f:59:24:e7:a3:98:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=60612765-4904-47fb-8a08-907d20050acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a4:fb:b4:5c:b0:a3:ac:98:6d:66:fc:b9:d9:
                    3b:0d:84:a1:71:82:3c:d9:b6:07:b8:07:a3:0d:c8:
                    2b:25:f7:d9:15:30:4a:7d:5f:51:0d:a4:a2:06:0d:
                    07:cb:5c:13:58:9e:0b:a1:12:e7:63:e2:d2:73:d9:
                    76:b5:f4:40:22:a9:58:a2:3f:15:26:da:8f:fc:41:
                    5f:be:49:93:66:54:d9:d9:76:66:f2:f3:19:45:2c:
                    97:99:96:9f:af:a6:9b:f3:5a:11:e5:88:df:42:9c:
                    08:a1:83:ba:b1:38:c7:bd:43:bf:99:38:a9:82:b0:
                    6b:f1:61:ff:01:1d:75:41:2b:a7:4b:c7:c5:d2:c7:
                    e1:75:68:47:eb:86:4c:a8:ea:5b:61:72:17:ef:20:
                    0a:26:a6:fb:e0:07:6d:46:e2:ce:a9:08:9b:66:ce:
                    61:71:7d:b6:6e:5e:e4:58:52:df:c8:6f:63:b2:ab:
                    1e:35:c0:a3:e3:a2:91:21:f7:b8:85:ae:d5:78:28:
                    07:71:6c:cc:a9:43:fc:80:a3:06:43:9e:f8:f2:48:
                    59:42:03:56:35:96:aa:64:4b:7f:53:65:79:f8:db:
                    15:13:80:4b:00:6d:84:a2:e7:6e:bd:03:e3:e1:b6:
                    66:50:31:86:7c:f8:9c:7e:11:1e:3e:57:30:92:35:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:50:6C:BA:5D:FB:DD:92:25:FA:6C:D3:0E:A0:0B:D4:CC:62:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:39:c3:32:a4:be:98:9f:98:86:29:d2:d5:e1:73:57:21:d0:
         a0:0f:37:3b:1b:bf:7b:22:40:0e:4c:d1:be:ff:17:19:6f:b1:
         8c:14:c3:ff:7b:0d:71:9b:f8:a5:c9:4f:2c:be:a7:10:ef:81:
         58:4e:43:0d:9d:02:5c:f4:74:59:e2:96:69:82:e7:8e:fe:39:
         24:4c:2d:12:60:cc:80:db:a9:9b:36:bc:cf:e1:f9:56:28:41:
         37:89:f3:9f:af:e3:3b:9e:7c:4d:69:36:ea:df:14:41:d8:b1:
         2a:42:7b:c1:f3:1f:3a:75:e4:4e:fe:75:52:90:e6:9d:66:19:
         7b:92:56:b2:d2:09:0d:29:71:5b:79:aa:91:cb:e8:5d:aa:96:
         d6:83:4f:86:ab:1b:47:a0:6a:d8:34:37:35:06:9b:cf:26:c1:
         29:f3:50:7e:01:54:68:b8:c2:b9:89:6f:32:86:6a:2f:c5:a6:
         c3:36:b4:e8:33:93:40:be:2e:81:70:e8:cd:82:a1:33:fa:5e:
         e8:d8:e1:44:bf:8b:62:22:73:fe:39:3a:93:9f:ab:d4:99:12:
         a8:60:5c:8f:dd:0c:d8:fb:c0:30:09:6d:98:5e:a5:f2:15:a0:
         5f:63:68:1e:e2:7e:58:8e:b1:23:75:be:fc:1d:13:41:b7:b5:
         5d:3a:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 19:54:57 2024 by rpki-client on console-ams.rpki-client.org