Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/1f15278b-547e-3c4b-a81e-77386c4d0852.roa
File:                     1f15278b-547e-3c4b-a81e-77386c4d0852.roa (raw, json)
Hash identifier:          ggrwKNSJ0Vu5pxHiWdHn87aUYeW+G2hy52tsAuXhBpo=
Subject key identifier:   5C:47:9F:1C:CA:0B:AF:A4:46:AA:8C:E5:B3:DD:46:AB:F9:CA:59:E0
Certificate issuer:       /CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Certificate serial:       010D0C9F43285845777DB81A7EE2EF28AABF2E8A
Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/1f15278b-547e-3c4b-a81e-77386c4d0852.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     40355
IP address blocks:        199.244.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:b8:1a:7e:e2:ef:28:aa:bf:2e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=ec194ab7-0764-498a-85c8-20580ba154a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:c7:43:a1:bf:8e:6f:bc:95:db:35:e0:7a:
                    06:8b:73:fb:7c:08:68:6b:4b:d8:ea:ba:87:fd:1b:
                    bd:38:b8:d3:7d:c1:65:b0:ba:14:10:8d:c6:2d:75:
                    79:70:fd:39:74:bc:28:6e:ef:4b:3b:d6:7b:44:f8:
                    9b:57:67:c1:fe:75:b3:56:39:01:ca:57:fd:2e:be:
                    90:b4:d4:4b:31:45:53:3d:a2:78:19:9e:ed:54:46:
                    e6:e0:53:c9:f2:72:0b:20:2e:60:f2:3f:e4:2a:bc:
                    58:1e:44:68:32:1e:80:61:f6:8b:9c:b6:29:9d:63:
                    61:f5:de:dc:2f:1f:1a:b9:b2:71:ff:d6:a1:24:c3:
                    6a:d5:38:e1:3b:de:54:25:2d:80:7c:82:f4:1f:91:
                    e4:de:8c:eb:b3:cb:31:e3:55:0c:aa:21:4c:c0:d3:
                    98:39:3f:1d:0a:71:a2:ef:2d:e6:ed:41:d4:ca:e5:
                    de:30:da:d3:ce:d7:7c:dd:7a:eb:82:63:03:84:dc:
                    f4:dc:ef:42:c8:cf:40:89:71:de:93:57:f7:e4:e1:
                    a7:85:76:bb:bd:83:e2:dd:05:4e:02:08:58:46:69:
                    36:3f:c6:62:9e:15:65:0a:8b:a9:83:77:b7:54:1f:
                    a1:8a:23:89:ac:2a:2a:c9:53:e4:79:e2:74:ae:28:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:47:9F:1C:CA:0B:AF:A4:46:AA:8C:E5:B3:DD:46:AB:F9:CA:59:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/1f15278b-547e-3c4b-a81e-77386c4d0852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl

            X509v3 Authority Key Identifier:
                keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:81:8f:17:eb:58:f6:5b:99:ac:8a:dc:08:2b:38:f2:da:2f:
         89:b9:43:ac:df:8c:99:22:c2:9a:4c:6b:44:c2:f4:39:80:43:
         90:e8:94:c7:04:bf:ec:e5:bf:74:2a:35:1c:73:17:32:f1:61:
         eb:8f:de:28:5b:9a:84:94:68:92:f9:76:34:a3:d0:15:ba:c5:
         ea:57:96:58:0b:4b:86:22:22:96:19:e7:fc:5f:f5:30:24:19:
         e3:4b:6c:02:b7:88:fd:23:af:bc:f3:a5:40:de:4e:9a:3d:a7:
         4f:da:85:da:e5:19:97:a8:41:6d:fa:48:01:a5:ce:8e:a0:20:
         ab:29:75:88:d5:84:bb:82:ff:65:75:e7:25:48:54:78:66:50:
         f7:bb:2b:2c:e6:f6:f9:a5:5f:32:0d:0e:6c:bc:ac:53:19:4a:
         eb:e8:bd:a3:39:a1:ee:28:ef:5b:66:46:14:72:ad:c9:9d:b7:
         52:18:28:d3:55:a3:67:81:82:cd:a6:27:3c:7d:7c:90:1c:9c:
         e8:b0:0d:51:1a:9e:6a:c6:84:48:fb:d0:ef:50:01:b9:47:1c:
         04:04:80:15:4c:28:0c:f5:32:fb:c0:fd:ca:fb:d5:56:ee:36:
         61:56:d3:ce:57:9e:0c:ad:1b:c4:fc:85:f5:79:e7:09:9f:75:
         66:13:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 01:22:00 2024 by rpki-client on console-ams.rpki-client.org