Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cbe9320a-fa0d-3c07-9246-24f8bf33e13d.roa
File:                     cbe9320a-fa0d-3c07-9246-24f8bf33e13d.roa (raw, json)
Hash identifier:          oTaYOOovizPgwLx9eH6J++FGsZvC6d/eSP4cFjE7OAk=
Subject key identifier:   88:62:98:C8:5C:A9:80:FF:99:C9:75:DB:6B:04:4C:74:8F:08:05:5E
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F35893DFF1256D4E5BE5C0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cbe9320a-fa0d-3c07-9246-24f8bf33e13d.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        161.35.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:58:93:df:f1:25:6d:4e:5b:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=faf194cd-4ba0-450d-983d-fdfa195d3dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:d3:92:9f:d6:bf:03:cb:5a:8d:d3:2d:35:
                    b9:f6:62:b9:53:2a:8d:36:11:0f:3d:96:af:45:03:
                    65:07:d1:c4:66:23:af:28:40:7c:0f:6c:fb:df:11:
                    95:48:4d:1e:da:16:5e:7d:b3:19:93:29:a6:09:f4:
                    bd:62:d4:5b:1b:c3:cf:2a:31:88:e5:a1:21:86:f0:
                    f5:69:a4:12:97:13:e2:2f:9b:91:36:d0:a2:eb:56:
                    00:17:6b:e6:f3:e1:d3:af:c8:a7:21:a6:75:3d:06:
                    d7:91:44:e1:f6:81:81:3f:0a:b8:1c:d0:7d:8c:2d:
                    1b:68:7e:2c:b9:7c:bd:3c:f5:98:62:3a:2c:d6:04:
                    b9:71:c8:f6:cc:1e:9e:d3:23:50:0a:c9:f9:d6:93:
                    47:0d:da:9f:4e:71:aa:ce:a2:d6:d9:0d:92:a8:09:
                    20:b2:43:32:9e:0c:79:1e:18:6a:68:ba:76:d3:ac:
                    da:a4:a8:5b:60:fc:66:3b:0b:0b:7d:a3:a5:0f:c4:
                    9f:52:2c:ee:14:a2:39:9f:b9:5e:bd:55:2d:00:7e:
                    50:1b:14:58:1a:6b:f8:86:49:1a:30:91:ed:1c:03:
                    67:b3:2d:7d:90:0d:6a:d9:02:71:c8:e0:d6:2c:a8:
                    02:75:e9:9d:38:62:49:5e:d4:f1:d5:06:22:92:4b:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:62:98:C8:5C:A9:80:FF:99:C9:75:DB:6B:04:4C:74:8F:08:05:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cbe9320a-fa0d-3c07-9246-24f8bf33e13d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:86:be:00:e5:51:11:8f:9b:68:22:ee:cd:34:4e:70:b0:
         cc:53:8e:80:5d:61:89:b0:c7:80:19:fd:15:f4:98:c0:06:bc:
         7f:15:e7:0b:0d:ab:1c:e0:9a:df:d5:8d:f5:ca:53:02:47:19:
         bf:b1:48:43:e2:92:12:c4:97:41:ea:18:3e:8e:29:cb:d1:63:
         61:c7:7e:9f:3f:92:dc:96:27:46:fd:83:94:44:30:ef:35:32:
         4e:a4:24:5e:e1:e0:56:aa:d9:05:19:94:9f:18:23:97:ba:0a:
         a8:39:cd:c5:48:32:5e:27:d0:be:60:8e:75:77:75:5a:b2:25:
         ec:a4:c2:18:bf:de:ec:95:00:c8:83:65:20:e8:6c:d6:b5:45:
         72:74:ab:75:1e:8d:bc:38:3e:6f:a2:c9:03:1b:33:f4:56:46:
         2e:92:ee:e1:c3:73:00:74:e3:37:f9:e0:64:6a:12:51:d2:47:
         1e:28:f0:05:90:47:b1:ca:e0:dd:06:1e:ce:56:a3:85:8a:09:
         b5:3a:d6:d5:82:7f:e2:49:8f:26:df:6c:60:88:c2:38:ce:18:
         f9:31:76:8e:76:e1:ce:e2:ea:c2:ce:76:dd:6c:cb:c3:3b:fd:
         0d:78:15:2c:77:d3:4d:2f:f8:3e:96:20:d4:8b:5e:dd:36:84:
         6a:b7:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:23:28 2024 by rpki-client on console-fra.rpki-client.org