Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa
File:                     d804a065-83d8-315c-862b-f13fb15f699a.roa (raw, json)
Hash identifier:          cdDw9ackCLik1hL3aUyh6NVc7AshPSnCJP4We//uQ9E=
Subject key identifier:   20:6F:91:01:74:3F:CC:8D:51:C1:43:E6:73:73:31:A5:43:58:9B:A7
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F35DF4DA5362709E3B4B80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        165.232.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:5d:f4:da:53:62:70:9e:3b:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=3e882aed-331a-46ee-9200-97ffbba29839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:de:16:27:fe:41:5e:8c:c3:f7:91:1f:d6:
                    a3:21:8b:1e:16:3a:6f:4d:49:41:8c:de:13:a1:93:
                    f1:28:72:49:41:91:9c:d0:1b:9e:05:58:99:14:8c:
                    6d:6e:37:61:4d:ea:0f:99:41:cb:92:77:6c:b4:28:
                    4e:af:a4:c7:76:e8:d2:09:1f:d0:0a:a0:2e:9d:0e:
                    a1:9e:2c:11:41:fd:b9:5f:ec:0d:6e:1d:52:66:65:
                    83:72:a7:87:b8:c0:f3:d0:8a:01:78:84:dd:0c:89:
                    0f:51:74:63:8e:f8:0f:23:b0:5f:b7:1f:59:5d:ec:
                    01:be:89:80:11:01:55:92:7f:0d:aa:4e:da:84:97:
                    77:71:ee:10:f1:b6:3c:5e:f0:93:6b:2b:10:48:b1:
                    c2:87:f7:99:e1:ee:02:88:ad:a8:35:d1:5e:a4:38:
                    d2:1e:ba:63:89:c9:86:5d:5e:16:01:b0:b5:39:04:
                    8f:73:c2:ff:01:e6:ae:7a:fd:56:8a:7a:4b:f8:b0:
                    64:81:08:15:22:c1:46:1c:b5:91:f0:a9:88:48:a8:
                    eb:ea:a1:cc:fd:68:90:c1:55:01:7c:15:ba:f1:2d:
                    52:35:23:7c:95:6a:e7:eb:78:7b:ac:27:80:9d:ea:
                    55:aa:57:1d:db:0c:4c:15:ae:cf:d5:34:7f:0a:e8:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:91:01:74:3F:CC:8D:51:C1:43:E6:73:73:31:A5:43:58:9B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d804a065-83d8-315c-862b-f13fb15f699a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.232.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:04:6e:1e:38:a6:cf:fa:a6:d0:7f:20:9f:a6:3b:c6:c1:
         e2:a9:f2:a3:ff:c9:f0:26:62:f8:98:4a:1d:1b:94:86:a0:c8:
         4f:91:04:8b:de:93:96:e0:91:c8:25:d5:bf:b7:b7:11:68:e8:
         db:c6:07:f8:20:9b:72:7c:34:19:12:42:ef:c0:04:71:2e:61:
         4d:c5:59:4c:ff:41:d8:b3:2e:77:6f:88:4e:66:75:21:a0:9b:
         f8:4d:8b:0c:a3:e1:84:6d:3d:6d:f3:fa:95:7d:d5:3b:6c:91:
         be:64:d4:60:92:f6:a8:d4:eb:94:a2:f6:a5:ba:02:52:82:78:
         1f:f9:10:a2:2a:5c:b3:71:fd:71:be:f3:84:a1:65:d7:03:f3:
         9c:f7:1e:e4:8e:d9:b8:79:8f:4a:68:dc:db:d8:f5:d1:a4:96:
         8b:24:66:33:7d:16:e1:b9:d8:6f:a1:00:44:8c:b3:ae:81:1d:
         3a:41:13:bc:80:bb:fb:45:54:05:bc:48:55:99:f2:22:73:d2:
         2f:3f:bf:cd:a7:a0:4f:18:29:1a:33:d0:a1:4b:7b:a9:00:0b:
         c2:58:1a:9c:d4:82:c7:0c:1b:9e:d2:08:f0:be:ed:27:2a:bd:
         d6:39:96:42:fe:11:89:9c:1a:78:26:24:7c:e3:3d:aa:03:18:
         9d:24:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 00:35:02 2024 by rpki-client on console-fra.rpki-client.org