Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/00b45802-90ee-3539-b452-e441e2fa5fa1.roa
File:                     00b45802-90ee-3539-b452-e441e2fa5fa1.roa (raw, json)
Hash identifier:          8NWYUZYvuBRuY5sG+vdP6SCmSTl/rrp/xg6zZo4pG1o=
Subject key identifier:   A8:A2:D6:2C:30:0D:7B:2F:74:10:0B:2E:5D:5B:78:E0:13:44:95:AF
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285845C5A8EF9C40D3B9E22F4853B0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/00b45802-90ee-3539-b452-e441e2fa5fa1.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     2495
IP address blocks:        198.248.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:ef:9c:40:d3:b9:e2:2f:48:53:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=35f00b0d-db3e-47e0-ab35-7a9f3a64104b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:e2:2a:31:99:5d:75:81:43:89:ad:7b:d1:
                    05:3b:80:7e:ff:f5:4f:d0:da:50:a9:cb:bf:27:05:
                    90:c2:35:3b:de:55:e8:16:54:cb:b6:2e:7d:fb:b5:
                    c7:01:2b:25:91:d0:83:a7:83:ac:c2:f8:04:53:ed:
                    77:ab:d9:f3:50:9d:17:93:a4:fb:95:59:31:0c:bc:
                    22:23:7c:8c:6c:b7:8f:c3:d6:d4:19:b0:a5:16:8f:
                    fc:93:29:1c:92:82:f4:10:91:b7:f1:f1:c5:66:2f:
                    58:2d:73:de:f6:fe:2f:34:7a:c2:2f:f5:5d:a4:c7:
                    a6:b7:11:9c:4f:72:6c:f1:52:2d:1e:7a:f0:16:49:
                    44:3e:cb:40:23:82:c9:d0:fe:f0:a0:9d:9d:81:07:
                    14:64:7a:d2:e1:6a:0c:c0:84:7b:e6:84:de:10:77:
                    26:8a:3d:e3:3a:e0:22:01:37:f9:5c:31:d1:2a:ad:
                    87:2d:34:1e:b1:f6:03:a0:17:1c:b9:48:fc:b1:46:
                    b8:7b:44:f8:9d:46:58:3d:b7:1a:e0:d4:b9:ea:fa:
                    27:34:ae:89:32:6a:0f:56:7f:33:15:af:72:a4:88:
                    fc:66:21:8c:7f:8a:bf:51:0a:8e:72:b1:cb:c2:7c:
                    ed:15:03:ca:2a:cf:38:d0:41:e6:56:2a:ff:00:33:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A2:D6:2C:30:0D:7B:2F:74:10:0B:2E:5D:5B:78:E0:13:44:95:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/00b45802-90ee-3539-b452-e441e2fa5fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:36:f5:b9:4c:e0:f1:2e:79:de:62:b9:e5:0a:75:24:9e:1d:
         55:cf:20:2f:e1:b1:3c:f3:e1:d1:8b:b3:ec:9a:cc:48:73:8f:
         a7:2b:5b:4c:aa:5b:f8:f2:30:b3:a6:5b:22:08:23:6b:ce:ee:
         74:f4:b4:37:0f:1e:c9:d9:e8:81:55:5d:8b:eb:ab:bc:c9:ff:
         69:45:fb:55:14:a8:ea:27:0a:56:42:1b:2b:fa:22:a3:ac:15:
         f9:cd:df:49:b2:43:be:1a:88:7a:7b:91:55:79:46:fa:5b:e5:
         38:7a:70:cd:b4:0c:38:b2:3c:36:86:9c:50:f3:df:c9:fb:53:
         82:de:95:91:f4:c0:5e:74:19:af:27:41:86:02:f0:50:21:56:
         80:0b:a9:61:62:30:46:1e:3f:5c:98:24:32:2c:68:4a:21:85:
         37:8f:6b:e9:ad:5c:b9:78:16:51:1d:c5:89:33:76:2c:33:ee:
         55:7b:e6:97:b6:ff:d9:61:90:05:13:79:a6:ab:49:33:83:e7:
         e3:f8:26:70:e5:92:d8:1c:f3:7b:80:1b:df:5c:2b:e5:92:e0:
         15:61:ee:3e:1f:93:1a:12:e7:af:59:d9:36:52:11:fa:84:03:
         6f:c2:b2:5a:58:8d:b4:b3:49:5d:af:3b:3e:5a:8d:bd:6a:cf:
         3b:3a:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 14:57:29 2024 by rpki-client on console-fra.rpki-client.org