Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
File:                     88d13f0c-ccc2-38b5-b670-66ee16223370.roa (raw, json)
Hash identifier:          m7SWQ1/g/ieOFwgMJLrn/eNXeEQrcyL6vWVSxOT25+4=
Subject key identifier:   50:F1:07:47:69:05:34:80:66:A0:F8:FC:B2:4B:5D:6B:50:DD:56:25
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F43285845CE08F923E108D7742014F380
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     15257
IP address blocks:        173.195.233.0/24 maxlen: 24
                          173.195.234.0/24 maxlen: 24
                          173.195.235.0/24 maxlen: 24
                          173.195.237.0/24 maxlen: 24
                          173.195.238.0/24 maxlen: 24
                          173.195.239.0/24 maxlen: 24
                          173.195.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f9:23:e1:08:d7:74:20:14:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=439650d0-7127-4a24-af9b-348fb72efdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7a:45:20:11:9b:ab:67:04:66:1d:47:d2:fc:
                    41:2d:64:a8:d2:7a:62:c4:20:bf:13:24:ab:6f:d9:
                    6a:8b:50:b5:c3:c2:c7:2d:07:f2:71:cb:84:30:3d:
                    12:14:96:5e:73:a3:d7:9a:79:b2:50:1e:c6:ae:dc:
                    a6:1a:c1:6a:6a:80:91:d2:fc:63:55:db:d3:c5:2f:
                    39:9e:45:e5:32:92:aa:04:22:f8:33:62:74:8f:9b:
                    ab:6b:7f:5b:47:bb:05:4a:36:39:1e:47:e1:3e:3f:
                    90:48:e2:30:1f:58:ed:c5:be:2f:b6:77:85:8c:c4:
                    0f:46:b5:a6:36:5b:e9:83:1c:c4:33:d1:a1:b5:f2:
                    44:f0:00:a3:fd:40:b4:05:e3:b1:de:58:1c:ed:a6:
                    73:4c:92:44:5c:eb:94:ac:a2:9c:7f:60:61:e4:42:
                    54:d1:75:29:23:d5:25:18:c8:d7:bb:45:d5:8b:19:
                    e6:3e:44:a2:44:13:04:e5:a7:b6:5b:85:a7:83:5f:
                    c7:ed:2d:4e:1c:d9:76:a1:49:33:9c:94:9e:4b:04:
                    9b:10:de:52:7d:ac:57:73:84:94:46:05:dd:50:25:
                    61:36:da:15:1e:74:b4:e6:8b:20:f2:76:38:f1:70:
                    db:da:5a:6f:4f:83:7d:5f:26:89:d1:fa:0b:a2:a1:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F1:07:47:69:05:34:80:66:A0:F8:FC:B2:4B:5D:6B:50:DD:56:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/88d13f0c-ccc2-38b5-b670-66ee16223370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.233.0-173.195.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a8:06:98:ff:e7:d9:34:a8:bb:75:9e:6d:d8:f1:64:41:4c:
         bb:a7:66:cd:13:28:ac:60:6d:28:20:ce:fc:cb:34:7f:ba:82:
         58:95:24:f1:38:14:78:eb:15:b2:45:19:4a:4c:10:b3:79:cf:
         85:64:f7:3e:5b:97:25:5f:49:51:02:75:38:3b:43:1f:fb:76:
         99:43:28:c8:96:e2:01:88:b2:8d:16:83:ec:a9:ac:86:3d:9f:
         9a:40:9b:ef:62:1c:68:ae:9f:ca:d4:e3:96:92:94:d8:5d:5e:
         d3:5d:6d:40:9e:33:d9:8e:f1:bc:75:48:7b:93:0d:f4:9f:55:
         be:72:8f:45:6f:63:00:e7:24:32:f2:ed:3b:f8:b8:8c:15:b8:
         41:3b:8a:e2:dd:17:e7:76:a2:a3:62:96:46:29:80:72:8a:ba:
         c0:f8:c4:6a:dd:df:78:6e:0f:1c:28:dc:6a:45:60:f6:48:6f:
         c7:d3:ec:e4:41:ca:14:5d:b5:05:40:10:5a:92:7a:77:e8:d5:
         be:43:83:e1:6e:eb:72:21:b2:be:92:b0:1c:71:46:df:d2:25:
         ab:82:37:44:d0:f6:6c:a4:6c:a5:7e:65:af:8e:a5:0e:b1:f4:
         70:70:54:6b:39:e2:f7:95:86:25:31:21:fd:4d:80:36:c3:9a:
         7f:44:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:14 2024 by rpki-client on console-ams.rpki-client.org