Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa
File:                     8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa (raw, json)
Hash identifier:          Xx3KrssfJ1HubI5r2Fb87amWonzcabEVxbjYXlszRmo=
Subject key identifier:   0B:90:89:B0:0F:47:C9:A1:68:A4:8E:A7:42:F5:26:01:A7:FD:EC:00
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285845A428B466895C6C963DD09C80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     3561
IP address blocks:        216.88.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:b4:66:89:5c:6c:96:3d:d0:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=120010d9-f51d-4548-b433-fc02dcc08dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:23:85:e0:2d:74:58:7f:19:4f:20:70:ac:
                    d8:c1:14:79:b2:3f:48:8f:9d:85:a6:20:c8:75:a8:
                    6c:1b:e2:3d:b0:6e:d6:eb:0d:29:a5:fb:08:eb:41:
                    31:7f:81:8b:7d:77:ed:2f:b9:0c:d2:24:f0:fb:1f:
                    c1:9f:4c:f4:72:d6:29:37:eb:9e:0b:0d:bc:9d:ea:
                    aa:e6:1e:1c:bc:a5:93:b0:5f:34:2e:7e:86:a2:69:
                    26:f7:75:ff:35:4a:6d:3f:20:cb:3c:f3:38:0a:1c:
                    4f:75:d6:65:72:24:ef:ef:9d:ca:59:dd:ad:44:ff:
                    e3:6e:60:28:27:9e:a2:64:c3:62:59:eb:5b:07:16:
                    89:31:3f:29:e6:de:de:4e:9e:63:98:c5:be:4f:ec:
                    a7:5a:51:ec:60:4d:61:ea:e4:f4:89:f3:e7:20:e0:
                    d1:44:54:98:c5:7c:23:d5:67:5c:9d:0d:55:60:86:
                    a7:b8:7a:5b:ea:29:f5:7b:43:12:0f:0d:e6:e7:df:
                    ed:18:38:47:cf:1a:20:a4:f5:86:1e:0b:f8:78:b1:
                    bd:7c:eb:86:01:ba:55:4b:61:fe:97:67:39:91:f6:
                    0d:7d:d7:f3:06:d6:ba:c9:89:74:da:40:80:61:77:
                    64:1b:cd:89:3d:76:12:cd:28:bb:88:c4:a8:ec:26:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:89:B0:0F:47:C9:A1:68:A4:8E:A7:42:F5:26:01:A7:FD:EC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.88.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7a:db:3d:fc:0e:a2:28:ca:71:59:27:07:65:e0:b2:ca:c0:
         f4:00:01:ea:da:54:1a:66:95:a0:e0:1f:e8:7e:8e:40:eb:79:
         2e:6d:ae:6d:d6:4e:05:94:b5:e4:1b:be:83:03:6c:8f:0d:da:
         d1:2d:0d:7f:c7:fb:00:f7:fb:eb:d5:59:4a:75:37:91:7d:4d:
         c4:76:37:3c:24:48:52:61:f1:ca:43:49:27:4f:95:a4:5b:77:
         59:47:2a:3f:76:bd:39:0c:9d:c3:2d:9f:cf:1d:cd:b5:d4:70:
         9f:05:44:2c:ba:ef:7f:8d:7c:f7:bf:ae:92:2e:01:7a:32:b7:
         2c:bb:39:21:21:f6:1d:12:b5:cf:43:b8:ac:7f:3d:0a:dd:29:
         67:96:cc:c7:4b:c7:7b:5e:b1:e6:e1:24:01:ff:b4:7f:47:64:
         ff:3f:13:e2:58:f7:0f:16:09:82:d9:cf:a8:18:5e:c8:15:b7:
         eb:e4:3e:33:42:26:fe:da:40:63:3a:d9:3a:52:4b:6b:87:73:
         51:29:2f:d9:77:0f:c5:2a:f5:f8:f1:4e:d5:72:81:cc:22:de:
         d2:e8:0b:f8:d9:07:aa:a3:1b:69:a5:1f:41:be:6c:e8:f6:61:
         d1:4a:ce:35:35:ae:01:f5:7d:9c:e8:9e:05:cb:81:15:42:31:
         1e:21:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:41:26 2024 by rpki-client on console-fra.rpki-client.org