Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa
File:                     4abcb4fa-f6d5-3038-aab9-f1da35524331.roa (raw, json)
Hash identifier:          faxjBwyfF8KfJ470OHvRKkhvW//vRxvozJ4ce/pmEs4=
Subject key identifier:   8B:1A:A8:F7:CA:38:66:8D:49:BE:E0:70:A5:A3:E9:CF:57:F7:81:FE
Certificate issuer:       /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Certificate serial:       010D0C9F43285845C8738E08C5496D9446A13C00
Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     20119
IP address blocks:        144.208.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:8e:08:c5:49:6d:94:46:a1:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=1d5a5d2f-187f-41ac-b27a-3ebf0b4d78cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:53:54:5c:7f:2f:04:25:83:49:c9:d3:a7:
                    41:32:9a:90:cc:ac:e4:eb:73:7a:d2:02:de:7e:ce:
                    0a:ca:35:c4:7c:a6:99:4e:04:4e:7d:d3:73:8a:d8:
                    7c:29:2e:a2:c6:b8:0e:44:16:08:e2:c1:06:42:3c:
                    d7:b4:ea:a3:49:2a:e5:a2:65:ff:73:97:41:e8:de:
                    bd:28:74:61:29:a4:ed:31:b6:d5:ef:2f:0e:95:9b:
                    e6:55:17:1e:2c:78:60:4e:b9:bb:53:24:2d:22:4e:
                    7b:55:0b:fd:e2:d1:37:be:8a:4c:6a:c9:63:c9:f8:
                    e6:d2:c0:a3:ab:1d:16:e8:6b:5a:ae:9c:5a:6c:f7:
                    3d:8b:e5:b2:0f:f4:a7:ac:ac:5c:fd:2e:a5:f0:1d:
                    b6:c7:3a:f9:99:77:c1:24:67:32:de:8f:84:67:1a:
                    ed:3d:05:1c:3d:9a:59:ad:16:62:56:70:8f:3b:2f:
                    cc:7d:8f:01:68:a8:87:7b:ac:2f:67:a5:ab:3b:32:
                    bf:5b:03:c8:0f:12:80:cf:84:95:d3:af:af:57:3b:
                    aa:18:73:44:36:cc:34:a7:65:99:08:dd:c1:2e:43:
                    86:de:3d:1e:af:73:65:7f:f4:99:25:1d:0a:81:da:
                    7e:d9:c7:1b:f0:37:39:45:2b:b2:5a:b8:89:d5:ce:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1A:A8:F7:CA:38:66:8D:49:BE:E0:70:A5:A3:E9:CF:57:F7:81:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl

            X509v3 Authority Key Identifier:
                keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:14:2f:12:0a:9f:10:00:f6:fc:f2:1f:3f:59:f2:f5:b9:
         9d:6f:5a:45:8f:33:79:19:20:c8:fe:08:42:d3:83:5b:0f:7d:
         8f:5f:57:4f:48:1a:2b:23:00:0a:f7:9f:9d:df:a8:4f:16:6d:
         8a:59:2e:c3:ce:09:9a:3e:aa:27:2a:86:50:f2:72:ef:f1:61:
         5d:a9:0e:95:d3:f8:c6:27:4c:df:59:19:b3:97:65:36:fd:b1:
         e5:15:d4:88:ea:43:80:87:a5:44:80:13:77:bc:2d:f0:90:d5:
         2d:2a:57:f2:5d:4d:91:c8:d1:20:e1:94:15:9a:d8:95:31:40:
         1c:65:9b:76:e3:0a:1f:3c:83:c2:80:f0:d3:70:51:5d:02:f5:
         ff:e1:0f:b2:7c:82:2f:85:3e:2f:9c:77:60:7e:c1:1c:8a:d4:
         2c:f8:8d:cb:11:9c:6b:85:33:0d:2a:fc:e6:f3:26:f1:93:f1:
         c3:ee:ef:9a:5b:92:e6:4d:92:c2:de:86:4c:4e:e9:21:d6:b1:
         35:be:aa:ab:3a:3a:af:00:90:72:79:81:58:92:6c:b1:95:64:
         fb:85:b5:cd:62:7b:17:c9:19:fb:83:69:d1:cc:37:17:66:49:
         5c:a5:49:bc:54:b3:20:c1:3f:4e:cb:61:11:16:0f:70:71:f4:
         98:5b:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 01:24:18 2024 by rpki-client on console-fra.rpki-client.org