Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b87e97fa-648a-3a69-be23-a1e4fa7aac2f.roa
File:                     b87e97fa-648a-3a69-be23-a1e4fa7aac2f.roa (raw, json)
Hash identifier:          TkN5N83NQ+eJI+uN0+96pY5obqBKMnNPfG/nx5b64x8=
Subject key identifier:   3E:5F:C5:7A:B6:02:82:41:43:CF:EA:20:59:D7:DF:57:96:F4:43:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC91E573223906126FC780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b87e97fa-648a-3a69-be23-a1e4fa7aac2f.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        73.88.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:91:e5:73:22:39:06:12:6f:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=3e5824c9-8365-4571-b7d0-e5ced606aa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:c3:c0:50:6b:07:88:23:21:77:99:ff:04:
                    38:af:1c:fb:40:aa:fd:2f:3b:91:8b:b7:fd:1c:56:
                    1d:42:6e:0c:fe:e1:4d:90:46:1c:57:7a:55:90:eb:
                    e7:e7:15:da:42:9e:c2:e7:e5:e4:a5:b2:b2:cd:cb:
                    8d:ca:d0:11:54:49:7d:59:e6:26:ac:88:62:e2:35:
                    4d:1e:f6:25:26:51:1e:d6:2f:23:ae:a8:38:0e:8a:
                    16:91:3d:0a:79:64:9d:0c:af:ff:92:fc:e1:83:39:
                    cf:fa:9a:e4:a6:64:b2:5d:b1:1b:e6:33:a5:b8:66:
                    d8:9a:8f:0c:4e:9b:fc:5e:c9:e8:4d:13:a8:4a:59:
                    9b:00:a0:81:92:79:de:12:93:ee:0d:72:dd:a0:f0:
                    c3:2e:33:c6:58:ed:91:fc:8b:62:3b:7e:a9:5e:e6:
                    3a:1b:2c:a6:cf:f2:1a:b1:9a:d3:f0:c3:b5:f8:66:
                    3d:32:c2:68:66:5c:61:dc:c6:f9:3b:b6:1e:c6:0f:
                    14:ee:d2:6f:6d:b0:55:9f:d1:b8:25:d1:8b:a8:fa:
                    93:c5:83:ef:e8:ca:40:dc:04:ba:e3:66:dc:00:0b:
                    c3:48:66:82:fa:c7:b7:56:19:a0:eb:cd:3a:96:0a:
                    35:11:c8:81:c3:dd:82:2e:ff:43:6e:de:4d:a3:13:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5F:C5:7A:B6:02:82:41:43:CF:EA:20:59:D7:DF:57:96:F4:43:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b87e97fa-648a-3a69-be23-a1e4fa7aac2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.88.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:0d:f0:8d:a8:06:b4:f4:53:c5:e7:c2:44:e0:db:24:b6:fd:
         47:c9:83:23:10:4c:43:b6:e0:f5:66:63:bf:5d:5d:35:e9:df:
         99:52:85:ac:9f:79:50:0a:a1:dd:ec:a6:ae:8d:89:13:ff:69:
         23:79:c6:c7:31:ac:be:21:57:e1:52:1e:7f:81:13:b1:8f:5f:
         e0:55:ef:52:b1:af:df:9a:1c:1e:25:af:bb:da:b9:cb:95:b3:
         61:8d:14:f3:f7:18:0b:1e:df:a9:71:45:df:60:78:9f:27:6c:
         a7:5c:d7:33:89:46:38:87:b3:2c:85:f3:19:cc:54:71:d0:c5:
         5d:9a:87:ee:c9:91:30:24:ef:20:5f:9d:73:c3:73:54:b4:06:
         c3:1b:d9:7b:05:2a:d6:1e:58:6a:d2:bc:40:bf:00:84:fe:ac:
         b6:f8:f9:03:47:67:25:c3:5d:e2:7f:47:86:95:49:2f:83:92:
         45:ad:f8:88:c2:54:3e:45:1e:d3:33:52:57:10:26:98:d8:7b:
         ef:b9:73:ce:f6:7c:1a:3d:ce:22:a0:dc:d2:79:cd:2e:46:83:
         ec:37:62:e1:1d:3e:3f:0e:5d:37:59:be:5c:6d:23:f9:3d:ca:
         7e:d9:fb:28:21:39:13:37:d8:8d:46:a6:f5:9f:62:a0:b8:be:
         ea:a7:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:55:07 2024 by rpki-client on console-fra.rpki-client.org