Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3b721b45-257e-3af6-b73c-7f674bf3e217.roa
File:                     3b721b45-257e-3af6-b73c-7f674bf3e217.roa (raw, json)
Hash identifier:          /CD9s3dKCfbYF6ezIctFJRLaGnT6l4hHmkiw4DQbvxQ=
Subject key identifier:   38:E4:C9:50:BE:A4:9B:E5:DE:A9:47:47:8C:57:E7:EB:27:07:34:14
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63C75AE3100F69AC996C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3b721b45-257e-3af6-b73c-7f674bf3e217.roa
Signing time:             Fri 12 Apr 2024 17:24:43 +0000
ROA not before:           Fri 12 Apr 2024 17:24:43 +0000
ROA not after:            Thu 11 Jul 2024 17:24:43 +0000
asID:                     62240
IP address blocks:        166.88.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3c:75:ae:31:00:f6:9a:c9:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:43 2024 GMT
            Not After : Jul 11 17:24:43 2024 GMT
        Subject: CN=819840de-c8f6-4862-b662-2ea592513a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:57:4a:b5:ee:c1:5e:e3:cb:24:1f:e9:c0:
                    5e:76:cd:8b:60:75:65:30:fb:a1:e3:37:25:cd:2a:
                    61:74:ab:8b:8c:12:9a:fa:f1:1f:76:db:ae:63:90:
                    02:32:b1:90:e8:7f:ef:99:5f:b6:a9:77:1b:06:ff:
                    09:7e:df:bd:1f:1c:c7:2f:be:93:74:cd:f1:c0:14:
                    39:e2:eb:12:97:21:5f:c7:f0:fe:03:dc:53:b3:49:
                    f4:da:6e:83:9b:19:60:9a:b2:ee:ae:7b:00:cb:ad:
                    6c:a3:ef:31:df:5e:7b:c9:11:be:3e:bb:7d:e8:92:
                    24:bc:75:6d:1b:fe:c8:37:f1:fd:65:c1:37:bb:36:
                    e9:c1:d4:f0:9e:d9:e4:0d:f4:6c:93:c2:ee:b2:a6:
                    0d:24:d1:4c:a5:c8:63:88:f3:9d:66:fb:02:dd:60:
                    05:e5:5f:15:65:20:7c:8a:79:fa:69:d5:a0:a1:83:
                    a4:09:6f:ee:76:a6:88:1b:7d:6b:0c:fd:67:ce:d2:
                    7b:ee:a8:f1:e8:b6:ae:21:62:c8:86:05:76:39:33:
                    da:b3:11:17:9a:95:49:3d:24:7d:2d:79:ef:08:79:
                    7b:55:dd:a3:f5:c4:4b:93:99:2e:5e:16:df:60:4a:
                    c6:5e:83:b8:09:04:3b:fd:ce:1e:ff:15:99:09:cf:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E4:C9:50:BE:A4:9B:E5:DE:A9:47:47:8C:57:E7:EB:27:07:34:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3b721b45-257e-3af6-b73c-7f674bf3e217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a3:3f:b0:24:34:d9:7c:18:64:73:05:1e:e6:f1:e4:ba:a5:
         23:89:72:3e:a6:d8:f4:f7:ae:ac:eb:83:b4:aa:29:91:1e:0b:
         c8:ce:e9:96:df:5a:f7:62:9a:7b:0c:43:9c:ff:0f:83:a9:ee:
         99:d6:d9:2b:44:e0:cf:07:7e:3b:d3:21:7e:a5:82:1d:6a:e9:
         5f:ff:f8:bb:63:c9:1e:db:fe:e5:29:b6:30:fd:a8:50:d3:64:
         9d:79:c9:c3:16:5d:2d:54:e4:2b:a9:61:b1:0b:a6:2e:da:cb:
         52:5d:1c:aa:e0:cf:67:15:86:f0:32:66:cb:40:31:53:2b:23:
         ba:4a:91:f3:a2:98:00:64:cb:85:0c:01:5b:ff:ee:a4:7f:11:
         46:5a:86:d7:01:c4:ff:f3:3b:3d:a9:1e:b7:b7:95:64:0a:db:
         83:0b:2c:f8:2b:4d:b1:ab:6e:a4:4a:53:75:30:bd:50:fc:14:
         b4:59:cf:ef:12:20:cc:0c:87:ea:ff:0f:24:77:0e:59:cd:b5:
         28:f0:1e:c6:5d:0d:8c:63:75:c9:a3:7b:95:df:f6:52:f7:3d:
         b8:ac:26:0d:28:41:1c:4a:e5:9d:cc:e9:81:d0:05:d7:f9:74:
         43:69:ae:52:d6:ed:13:85:3d:09:18:7f:12:aa:9c:9f:0a:17:
         0e:94:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:16:02 2024 by rpki-client on console-ams.rpki-client.org