Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa
File:                     e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa (raw, json)
Hash identifier:          HJr9w086ZPPsUP2HghVKeXZy6lyz+8udxnusBV4jM/o=
Subject key identifier:   73:9A:9D:97:C7:2D:59:BC:8B:86:B6:8D:BE:48:08:73:86:8A:B4:84
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F432858456C5307AE90867805CCB301E0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     42
IP address blocks:        208.67.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:07:ae:90:86:78:05:cc:b3:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=9ea4f4e0-ffda-4268-a4aa-cd8102127bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:c5:99:37:59:11:f4:c8:5b:02:47:4c:02:
                    b2:e1:73:58:db:c8:d4:44:10:4c:a4:03:cf:5e:4f:
                    79:44:56:f5:5e:47:32:71:22:bb:bb:6b:56:57:9e:
                    3a:94:61:65:87:13:0b:73:03:92:a0:35:48:9b:e3:
                    58:45:2e:f0:18:48:a3:a7:b4:2b:c5:9e:bd:23:76:
                    45:ac:a8:56:08:91:b8:c8:0e:65:36:bc:4f:59:15:
                    49:d3:de:a9:9b:09:ad:a6:45:85:4a:60:76:9d:62:
                    1c:e3:fa:9f:6e:f7:8b:66:e5:8b:3c:1d:9c:73:20:
                    10:9c:a0:1e:1c:49:c4:e0:19:c7:a1:92:00:07:c8:
                    0a:66:25:d0:b0:34:f1:04:d3:58:8d:53:cc:e4:9f:
                    a4:0e:10:e5:ed:90:42:0a:70:49:f6:16:fa:12:4e:
                    64:a9:c1:a6:e0:34:70:63:9e:0f:1f:17:1e:3f:4f:
                    79:5a:b9:f7:44:cd:9a:9e:1a:3d:5d:0e:65:c8:a9:
                    a3:7e:01:1f:83:63:d3:bd:2e:27:97:17:25:47:c8:
                    f2:ad:e1:3b:83:3e:4a:01:f8:9d:72:75:bb:0a:80:
                    ea:2a:39:81:1b:21:8a:59:3e:4f:c4:87:6e:f6:e9:
                    27:0b:79:1b:9f:29:39:57:6d:87:d6:68:93:fc:16:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9A:9D:97:C7:2D:59:BC:8B:86:B6:8D:BE:48:08:73:86:8A:B4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:23:95:5b:14:80:0a:b2:18:0a:89:0c:00:55:6c:4f:9b:
         45:2d:9a:ee:9a:69:d5:5b:17:37:fd:cc:d6:df:5e:6f:70:29:
         d6:52:ed:73:92:84:11:20:99:d8:90:a2:3a:28:ae:7f:35:eb:
         72:e0:0a:cf:3d:61:0d:08:8e:61:45:ef:1f:84:e0:aa:00:43:
         e9:7f:b3:9f:6d:3f:69:a1:6e:13:f3:c9:0e:d5:c0:e1:14:c5:
         1a:07:3e:61:7e:d8:dd:cb:55:7b:ea:ba:a4:b1:6d:d8:6d:ee:
         4a:fd:bc:ba:36:2f:66:6e:95:dc:b3:fa:ef:13:e4:e1:d0:64:
         92:a7:c6:0c:dc:0e:bf:ee:1b:36:77:98:d4:1d:87:70:84:9a:
         d5:d7:8a:07:a0:83:87:df:ea:0f:15:f7:7c:b1:95:ae:22:44:
         bb:08:e1:58:f4:2e:bf:d9:81:85:c1:64:34:84:fc:7d:45:a9:
         c1:6d:1f:86:83:bd:aa:3c:79:6e:b7:73:36:6a:3e:aa:69:f0:
         fa:d6:27:5d:46:5b:03:e6:d5:a8:03:05:58:d0:e9:7b:4e:43:
         e2:67:44:80:33:7f:84:72:31:e9:71:9c:92:b8:67:17:09:e5:
         a4:2b:ce:36:37:8f:de:f3:59:eb:9f:32:17:3d:d9:07:32:0e:
         9f:e2:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:32:59 2024 by rpki-client on console-fra.rpki-client.org