Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/774e2fb2-70d6-3e4a-93d8-7df58a7c6191.roa
File:                     774e2fb2-70d6-3e4a-93d8-7df58a7c6191.roa (raw, json)
Hash identifier:          FK4Jht8fWwLo6HfTrW85EOVWEp8tO+IIeXKwd4ioobQ=
Subject key identifier:   39:F4:CD:42:83:56:FD:66:CF:4F:49:36:24:21:40:E3:64:05:E2:68
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F64192D72B3CCFDDE709A8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/774e2fb2-70d6-3e4a-93d8-7df58a7c6191.roa
Signing time:             Fri 12 Apr 2024 17:24:46 +0000
ROA not before:           Fri 12 Apr 2024 17:24:46 +0000
ROA not after:            Thu 11 Jul 2024 17:24:46 +0000
asID:                     204957
IP address blocks:        166.88.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:41:92:d7:2b:3c:cf:dd:e7:09:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:46 2024 GMT
            Not After : Jul 11 17:24:46 2024 GMT
        Subject: CN=da336667-5506-4c6a-8e1b-44238a3c6706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:2c:20:b8:18:e6:c5:6d:44:29:cd:59:13:
                    14:57:71:10:e1:bc:c6:7d:02:e6:c7:c4:7d:bf:9e:
                    18:64:11:51:63:55:66:7e:d6:c1:21:cd:4b:5d:20:
                    dc:22:91:59:aa:11:57:bb:56:a3:0b:26:cd:af:ca:
                    a8:4b:d9:db:b2:ed:43:3e:4a:fc:05:82:9b:41:16:
                    27:43:39:14:ce:8f:85:e1:a7:8b:3f:0c:51:83:7a:
                    78:29:73:c6:f8:c3:b6:1f:64:bf:6e:26:a1:46:f2:
                    ce:4d:9e:88:9b:de:2b:ff:72:51:b0:ec:e0:71:6a:
                    85:9e:7d:7e:b4:f9:66:ce:4f:29:21:d8:80:05:9f:
                    8a:0c:69:83:41:eb:1e:c3:5f:c8:32:6c:82:df:cb:
                    05:20:c1:3f:1e:61:8d:83:1a:19:43:2d:69:a1:ab:
                    a7:e0:ec:ac:9e:55:d5:74:94:ca:dc:46:40:9c:92:
                    b8:4e:2b:9d:f4:a8:4d:89:12:db:62:cf:80:ce:5d:
                    e1:ce:93:02:d1:01:c6:ac:a9:05:1c:50:7a:27:95:
                    fc:1f:a7:88:b4:cb:d8:0c:69:0c:60:45:3e:b6:0e:
                    57:f8:5d:c2:04:64:c8:6a:84:06:94:14:f8:ac:83:
                    69:f0:bf:87:70:c9:e2:28:1c:7d:2d:b2:b8:1a:c9:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F4:CD:42:83:56:FD:66:CF:4F:49:36:24:21:40:E3:64:05:E2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/774e2fb2-70d6-3e4a-93d8-7df58a7c6191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:42:d3:55:f9:dd:6b:20:10:c7:1e:9c:42:cf:0f:af:9d:
         25:9b:3c:04:e2:17:8a:e5:d0:ad:ae:a8:22:5a:29:0c:19:20:
         15:19:3e:94:16:e0:dd:7b:ba:c0:c4:4d:f2:db:d7:fa:50:8a:
         79:92:78:bc:14:4d:51:6e:db:54:92:9c:7f:a6:83:c6:d9:e8:
         a9:be:97:76:9e:ab:7e:74:63:39:62:d5:fc:7c:cf:45:01:94:
         0c:94:a5:ac:b0:c7:f6:6e:36:e8:e4:c6:a3:a9:7d:88:5b:fb:
         eb:8d:26:74:34:5e:2b:6f:22:93:1d:01:4e:13:82:65:bc:05:
         fc:80:88:8d:33:58:c6:70:6e:a3:aa:0b:15:8e:2e:06:40:04:
         61:65:21:f0:84:65:45:8e:84:cf:29:ba:de:1c:53:6f:a9:12:
         d3:c6:e8:8b:f9:d2:97:b3:ce:30:1b:a3:5d:21:7b:71:79:1a:
         d5:94:3c:05:32:df:2b:be:ba:12:f8:e9:04:87:fe:bf:91:13:
         4b:65:a8:61:99:62:d5:5a:df:db:c9:df:10:2d:49:14:92:b1:
         0c:81:c6:a0:c9:dd:51:52:95:48:c9:24:2d:ba:dd:b8:86:29:
         1e:3a:3d:e7:dd:aa:01:f6:e9:8f:94:0e:ce:ec:ba:45:18:7a:
         a2:ce:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:42 2024 by rpki-client on console-fra.rpki-client.org