Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/430f5633-553f-37c1-963f-135058220cc2.roa
File:                     430f5633-553f-37c1-963f-135058220cc2.roa (raw, json)
Hash identifier:          ponwfguYN1IbntQusNx/EC7KFebvNF2w9VcIpGTUFeo=
Subject key identifier:   47:C3:07:AC:75:1C:3C:BC:39:3C:8F:ED:D6:F6:87:99:8B:77:4C:68
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285845C5A8F3A9DA13B38072422940
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/430f5633-553f-37c1-963f-135058220cc2.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     2495
IP address blocks:        198.248.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f3:a9:da:13:b3:80:72:42:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=c851b691-b50e-43ae-bc5c-24e48c655cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:f4:ca:9c:0b:c4:1f:38:07:fd:9c:39:e0:
                    9b:a9:ef:e8:09:19:35:a7:ef:6d:95:96:a8:44:61:
                    af:21:ad:b2:98:6d:19:75:c9:de:27:22:3c:d8:44:
                    7e:af:99:81:93:8c:79:ba:1e:2d:ba:45:68:f0:52:
                    b5:74:69:db:d2:a4:21:f9:6d:1a:fb:c9:44:d3:48:
                    5d:bc:05:4b:e4:f8:cc:56:fd:b4:3f:c8:c0:0a:c8:
                    20:80:5d:07:8a:09:9c:11:93:51:d6:a2:e9:58:c4:
                    4c:04:58:9a:44:7b:b9:30:13:00:24:70:cf:9e:59:
                    9c:56:18:f4:23:e5:09:4d:6c:85:c2:28:fd:95:56:
                    75:fa:9c:37:94:d6:a8:8e:38:a1:8c:7e:d4:dc:11:
                    ba:8c:8d:eb:5a:15:0d:88:70:12:4e:69:9d:ad:57:
                    24:e0:a6:42:37:ca:19:66:74:f6:bb:fe:73:27:74:
                    e1:52:a3:5a:ab:34:7b:b5:f7:41:bb:2f:c5:94:1c:
                    4b:9e:cb:50:c1:4c:a8:64:86:4a:3a:89:3c:f0:7a:
                    5c:82:3e:5f:3e:38:87:75:a8:20:bd:dc:ab:55:cd:
                    ad:bf:38:bc:63:49:0b:75:a2:c6:3b:1b:ba:15:1a:
                    e0:d5:d6:5b:e6:be:cb:a4:59:ae:0f:ae:ca:e4:01:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C3:07:AC:75:1C:3C:BC:39:3C:8F:ED:D6:F6:87:99:8B:77:4C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/430f5633-553f-37c1-963f-135058220cc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:38:a5:05:3d:5e:33:20:a7:9d:bd:5e:c3:02:73:10:5c:86:
         61:93:9e:67:06:fa:0f:78:8e:cf:67:66:29:93:6b:f5:81:e2:
         24:2b:9e:d3:1b:9f:6b:17:9f:cf:f0:1a:d2:53:a4:48:fe:2b:
         fb:f2:8b:ee:20:27:03:0e:ad:f4:0f:d4:84:52:63:44:7c:86:
         cf:0b:9e:fa:a2:cd:9d:f3:fc:a9:a8:66:1f:34:8c:ed:4b:80:
         e7:ce:76:72:28:dd:f8:e3:65:58:2c:6f:fe:09:03:a7:fb:8e:
         38:39:d1:b7:76:55:bc:fd:9a:75:30:f1:86:c9:17:35:a6:eb:
         08:89:12:76:ad:49:71:8b:d9:23:1b:4e:52:d1:3d:d1:d4:e5:
         69:e4:c5:28:5c:19:32:1f:b7:9a:e6:c5:2c:ec:34:14:92:ee:
         43:28:09:af:d1:47:64:d6:89:a5:67:3b:b4:aa:29:9c:4e:5f:
         18:2d:de:d2:15:0e:2e:2b:84:a1:10:97:c5:72:7a:e6:65:90:
         9d:b0:6f:91:dd:40:63:58:14:98:2c:da:99:b6:80:63:b5:78:
         ef:90:bd:82:46:b3:29:68:05:38:4b:6b:fc:a2:6a:08:3e:34:
         ea:a0:41:e6:ce:f3:ca:f5:96:39:9c:57:1f:a8:5c:e6:53:1a:
         f5:e7:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:52:51 2024 by rpki-client on console-fra.rpki-client.org