Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa
File:                     88b62d1b-fd35-3bab-87bd-ea41e242c121.roa (raw, json)
Hash identifier:          wzyhhWCRfKQCCs3nejuUZYcOViNHqm/XKuiYUnt/FDk=
Subject key identifier:   F2:AF:71:BE:3D:20:9A:DC:9D:28:36:41:80:8C:CB:EB:1F:D4:66:F2
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584509557157D709AC0AD224CCC0
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     5769
IP address blocks:        24.37.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:71:57:d7:09:ac:0a:d2:24:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=fbbaa225-bc29-444f-8830-d8580a8ba808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:c0:36:df:e1:4c:e1:46:c0:19:c4:ae:af:
                    b4:7f:cf:a4:eb:ff:fd:b8:dd:fe:58:95:d5:28:5c:
                    f7:04:b3:09:18:0d:b7:b6:20:8d:94:fe:bd:29:ab:
                    85:c3:de:e1:91:d4:3f:c9:b3:b8:50:37:17:da:5f:
                    cc:b4:09:72:b0:81:6b:f4:b1:29:a9:2f:0b:11:71:
                    47:3c:10:e2:a1:f5:79:b9:f2:c1:4c:a0:d4:33:0b:
                    cd:2e:67:33:8a:f5:fe:9b:b3:7f:01:b9:60:e2:54:
                    69:2c:f4:41:eb:d3:70:3f:9a:7e:3b:ba:9d:ba:69:
                    5b:04:a4:17:3c:45:c0:15:64:88:17:9b:f2:13:82:
                    2a:28:66:50:1c:2a:f3:98:3c:71:36:ed:23:e5:91:
                    08:e9:8d:a3:06:c7:4e:40:eb:a9:a0:c6:16:49:e3:
                    9a:57:da:5f:a7:22:d8:00:ea:ad:5d:ad:02:d2:64:
                    3b:f9:de:fb:4c:48:8c:8f:f0:dd:82:0f:f4:a3:82:
                    18:8f:47:4a:5e:25:a8:13:6d:de:1a:f3:2d:f7:8e:
                    81:07:d2:98:90:7e:3e:5d:5e:74:2c:f6:21:d7:78:
                    ef:37:9c:bf:fc:1a:72:99:3f:30:eb:2f:da:44:48:
                    64:d1:f1:5f:04:f4:c9:9c:d8:24:d7:8f:64:0a:2f:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AF:71:BE:3D:20:9A:DC:9D:28:36:41:80:8C:CB:EB:1F:D4:66:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.37.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:02:17:6c:39:85:dc:8a:ac:7b:2d:9f:3b:32:21:1d:c5:14:
         59:89:9a:c1:34:2b:2e:3f:bc:34:4a:c2:3c:4b:39:37:ab:35:
         64:d4:5f:d1:3e:49:d0:b8:c0:eb:89:a4:f1:e1:f7:7b:ea:04:
         fd:02:0a:2e:59:5b:c5:e5:65:ab:41:8e:c7:f6:05:53:74:16:
         19:84:10:87:e9:a6:e6:41:4c:f1:77:4f:be:85:67:9c:f4:69:
         cc:1f:7a:fb:be:f8:a6:36:7d:18:0d:04:d4:06:eb:d8:e0:4b:
         87:95:6d:45:04:98:8b:23:71:80:aa:af:0d:ce:ed:30:3b:3d:
         0a:68:76:99:90:82:c4:30:d2:d1:71:e8:08:6b:8b:7f:8a:9c:
         cf:69:71:59:cc:33:75:18:67:a6:24:aa:35:ee:e0:09:d2:10:
         6d:c0:2e:b0:b8:14:e2:07:45:71:06:04:9b:92:d7:94:c1:fa:
         fe:36:48:5f:08:31:37:ca:af:a3:74:36:cb:21:08:55:b5:e9:
         7f:3a:dc:eb:02:8a:eb:df:6f:bf:1f:2b:a7:1a:96:ec:8e:83:
         71:31:03:06:e1:4b:e7:e5:89:af:2b:f7:67:63:a5:c6:31:55:
         50:e5:7c:5b:08:77:94:84:da:6e:2e:09:5d:e2:f5:ed:82:41:
         01:12:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:57 2024 by rpki-client on console-fra.rpki-client.org