Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa
File:                     d98c5873-cc74-343d-8d38-917469d5fe81.roa (raw, json)
Hash identifier:          A5Uojsn0HNWbdjkR9P6JjDwOkxXVO3bCA8cPdMBg8Ms=
Subject key identifier:   A7:E3:0F:FF:34:84:B0:B1:68:AB:81:79:5D:2B:8A:9B:88:9F:8C:3B
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F358642FA56B7CA990D300
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        165.22.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:58:64:2f:a5:6b:7c:a9:90:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=38e816e0-11c1-45ef-be93-9dfdcadbd011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:84:fa:1a:be:33:07:ed:6a:62:bd:bb:8f:
                    6a:3f:56:2b:95:ab:a6:a7:f5:b0:b4:6a:f3:d2:4b:
                    d4:ae:93:1d:64:fb:3d:26:b3:bb:91:6b:7f:4c:58:
                    6a:1c:8b:91:06:f1:5d:26:e8:df:34:55:b0:ac:df:
                    cd:c8:d3:94:36:25:35:b9:03:77:5f:e6:4c:14:3d:
                    53:62:cc:60:48:23:cb:7e:9e:70:0e:4d:b1:72:e8:
                    23:e5:fa:fc:88:32:75:40:5c:73:ec:08:c2:1e:65:
                    42:d3:f7:7b:32:b2:92:d2:44:47:2c:d3:d7:4c:38:
                    e0:24:08:35:2e:22:ae:99:58:e8:ef:c4:51:d5:9e:
                    97:79:7f:7b:06:b8:57:df:98:17:f6:90:a2:f5:65:
                    48:73:ee:fd:ff:51:e8:bc:f4:e0:b1:5a:05:14:6c:
                    a8:0e:fe:8a:f2:6b:28:18:ee:fb:d2:50:7f:ac:d8:
                    d8:28:48:79:d3:87:43:97:0e:70:b1:ee:6b:a9:5f:
                    15:ff:f0:d1:c7:17:ac:34:c6:37:90:50:b7:82:d4:
                    d9:9b:43:59:69:29:32:fe:78:51:43:45:71:88:64:
                    ed:6a:ed:2b:de:f2:87:d9:b1:6a:5f:6c:a9:2e:9c:
                    ff:40:cc:b2:b2:6e:ed:bd:0f:25:f6:7e:3f:2f:73:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:0F:FF:34:84:B0:B1:68:AB:81:79:5D:2B:8A:9B:88:9F:8C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.22.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4f:98:62:e9:65:03:c0:96:b7:81:20:0f:e3:f3:e3:38:52:
         b9:2d:bf:ef:18:ef:cd:b4:02:37:65:fb:0b:86:08:aa:ad:c1:
         c9:49:72:95:68:5d:8f:f9:19:33:0b:74:62:cf:07:14:59:23:
         6d:85:1a:d3:54:b8:8b:76:d5:a7:89:09:b1:69:4f:b3:ef:8b:
         ba:f5:d5:29:c1:62:df:80:35:a3:b2:8f:b1:d0:8b:e2:20:fd:
         94:40:2c:d8:b7:fd:0e:33:48:80:8b:f7:6f:5d:0f:f2:81:c8:
         ac:c9:2f:ec:6f:3c:3e:96:dc:44:fb:6a:7d:86:fc:78:49:45:
         b8:25:68:03:e7:58:d8:4b:b3:a6:96:25:a8:32:21:f4:50:ab:
         72:6e:46:a6:a0:1f:db:90:f7:55:e4:4a:d2:d5:85:13:92:4a:
         59:bc:63:bd:7f:5b:f1:43:70:39:29:56:4d:a4:56:06:e2:30:
         7c:29:18:77:84:7f:35:dd:3b:16:b8:ed:62:5a:82:20:bd:2b:
         4d:79:59:da:ab:7c:fa:50:f5:9f:ab:d1:15:ba:dd:8b:13:98:
         db:aa:a6:f9:df:10:42:07:2e:f6:98:83:60:f2:b0:e1:b1:08:
         9b:64:7f:12:b0:a3:5c:0e:cc:13:fc:98:91:13:0a:95:68:42:
         bb:d1:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:40:53 2024 by rpki-client on console-fra.rpki-client.org