Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/882c0e66-adb0-39cd-a89b-c1c5b92d4a45.roa
File:                     882c0e66-adb0-39cd-a89b-c1c5b92d4a45.roa (raw, json)
Hash identifier:          oD37CeVguTTDplMvw29Gl1ijlNAo2yWv01XnzsmKIZU=
Subject key identifier:   9D:70:DA:6E:66:8B:E5:D9:63:56:82:A9:82:9A:D8:C7:4F:1C:32:21
Certificate issuer:       /CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Certificate serial:       010D0C9F432858456C530D511A6B89BB484F9E80
Authority key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/882c0e66-adb0-39cd-a89b-c1c5b92d4a45.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     2635
IP address blocks:        87.250.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0d:51:1a:6b:89:bb:48:4f:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=946f7e7a-400a-4443-9862-9cba688c0be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ab:f8:24:39:d9:13:76:0b:75:7b:20:f5:58:
                    81:3a:63:d0:6c:1c:95:f3:1a:71:b8:6d:b0:77:ba:
                    b2:57:d3:47:c5:80:88:73:4f:bb:69:d1:17:77:42:
                    39:80:a0:1c:48:22:72:18:9e:bd:ed:b5:45:33:d9:
                    88:19:30:1a:3a:a4:33:2c:49:73:b6:68:a0:d8:4f:
                    e9:94:2a:a2:b6:73:81:fb:64:49:30:26:f2:b3:aa:
                    ac:2b:5b:2d:18:a7:6f:08:eb:9a:81:21:66:fd:ef:
                    69:ee:9d:b1:16:45:bd:82:52:29:2c:1f:37:5c:79:
                    fe:fd:69:c2:6e:9c:6e:6d:af:12:0a:09:c6:b7:5b:
                    cc:c6:38:b6:ed:cc:c6:a2:30:98:1d:aa:97:5b:df:
                    d7:dc:52:27:f1:61:cf:96:18:cd:47:32:54:3c:68:
                    31:17:ef:df:80:aa:79:33:ae:94:6d:be:35:1a:01:
                    1f:66:83:59:fa:41:d0:f1:86:9f:d8:42:9a:e8:a4:
                    81:1e:37:25:f3:9f:b5:50:89:52:ea:44:a3:df:85:
                    3c:81:32:78:5b:c1:0b:f3:56:8f:f2:01:4c:e3:f3:
                    d6:6a:60:8d:ca:0c:57:9f:fc:a4:d5:18:ff:cb:80:
                    1c:78:4d:0f:5d:db:26:cc:35:50:84:1a:64:82:fb:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:70:DA:6E:66:8B:E5:D9:63:56:82:A9:82:9A:D8:C7:4F:1C:32:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/882c0e66-adb0-39cd-a89b-c1c5b92d4a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl

            X509v3 Authority Key Identifier:
                keyid:8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.250.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:f5:c1:02:b7:a9:d7:2b:84:aa:43:97:62:37:a8:25:cb:
         ac:e8:31:dd:69:57:90:50:c1:c3:42:74:1b:98:09:89:16:19:
         02:db:d7:33:b8:5a:93:68:c7:d2:16:c1:82:03:ab:78:d0:5e:
         19:af:d0:fe:78:ec:ad:7c:f1:b1:21:95:23:36:ae:64:59:02:
         1f:bc:d7:32:d9:9c:28:79:42:bb:28:de:cf:10:82:ad:ec:8d:
         27:0d:36:d9:d7:05:5b:f8:d6:78:f6:5e:2b:00:e3:c3:87:3f:
         f5:f5:fa:0a:18:67:d7:ad:84:47:13:e9:00:b6:b2:ae:9c:4d:
         cf:18:50:c7:dd:3f:98:7b:10:bd:44:67:a3:c9:4f:9b:60:1f:
         01:3e:d8:b5:6f:82:ae:56:d4:28:75:a9:23:8e:f1:d2:c2:76:
         27:fd:c6:aa:b1:d6:c0:20:92:d1:4b:32:33:ae:45:ff:77:90:
         25:f5:b4:b2:e6:76:0d:8c:10:7f:3e:b4:f9:6e:01:a3:b8:fe:
         5a:db:01:30:50:37:2e:17:14:64:b4:25:a4:57:88:bc:40:c8:
         b8:1e:0b:91:ed:ab:91:ea:5b:f2:bd:72:c3:e1:c3:74:19:27:
         74:96:3f:fc:94:80:5d:ad:45:ac:05:67:f0:f8:ba:8a:80:60:
         8b:d4:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:17:21 2024 by rpki-client on console-ams.rpki-client.org