Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa
File:                     f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa (raw, json)
Hash identifier:          jcXURXHs55Wi4Sk+gYGeqIjm8Skywydbulk+VGwEG9s=
Subject key identifier:   28:7F:6D:53:EB:AD:F2:5B:B1:73:23:E4:2E:D7:6F:05:23:03:F3:92
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F432858457D1338E5DE90A97022F65F00
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     34774
IP address blocks:        199.64.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:38:e5:de:90:a9:70:22:f6:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=f7b38461-6eb6-4b59-8feb-f5461bb56529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c5:2e:e8:9d:12:73:aa:0c:1e:f9:8a:08:c3:
                    e3:5f:61:13:c3:1f:76:e6:49:9e:e6:d5:53:c5:f8:
                    54:7e:57:ca:1c:e7:dd:24:a4:4c:ee:f7:b8:c3:32:
                    cb:c1:1c:b5:a1:f2:74:1a:3e:f7:83:2a:98:1c:ae:
                    36:da:82:9d:7e:6c:9c:73:1f:eb:29:3b:dc:c9:9e:
                    60:db:5e:69:28:48:ad:2e:5e:0d:e0:de:44:e9:0f:
                    c8:43:a9:ce:0b:68:5a:a8:5d:4f:f8:c7:2e:ba:96:
                    d6:51:e4:70:1b:9a:46:47:2d:a6:0f:3c:3a:93:91:
                    62:8c:b7:8f:61:2d:a9:ea:1c:bc:d3:7f:f8:49:f1:
                    29:6a:5b:0a:86:83:6e:84:f2:93:e9:c8:ec:51:aa:
                    72:89:64:2e:2b:a7:e6:4e:20:aa:82:61:48:63:d5:
                    71:1a:bf:9c:ae:aa:19:a2:11:ca:a3:7f:2c:06:a1:
                    a6:0f:f1:6d:15:13:25:1b:e8:96:e7:6c:39:67:bd:
                    5e:fa:c2:a0:93:eb:6a:20:1d:de:48:76:dc:a7:df:
                    68:04:fa:64:b7:b1:f3:e1:cc:76:34:ea:b2:46:30:
                    a9:c7:55:dc:70:d7:87:6d:d2:b4:1c:55:57:d3:b9:
                    e3:74:cd:6a:6e:b1:ed:0f:f4:78:59:01:45:ef:38:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7F:6D:53:EB:AD:F2:5B:B1:73:23:E4:2E:D7:6F:05:23:03:F3:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/f12f44b5-1d80-3d4e-b7cc-190eb41fd0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8a:8a:0e:41:e1:3a:0f:c5:93:c6:f4:31:e6:ac:96:ff:c3:
         7a:6a:36:1c:4c:09:5d:16:16:56:f9:34:90:31:a3:4a:bc:ca:
         bb:eb:5b:89:bc:a3:cf:80:c5:94:4e:6a:72:ec:88:e8:d0:03:
         de:d7:49:fb:6b:2e:d9:a9:44:0a:01:75:7c:e8:89:c6:0c:75:
         68:d6:16:a4:77:e4:51:47:3d:81:90:3c:7e:49:fa:76:6d:67:
         c7:6b:82:98:3b:53:e9:4d:6c:d9:c3:7e:55:9f:09:94:38:0a:
         ef:b2:12:9d:d3:00:99:67:98:76:8b:56:fb:51:43:de:15:b1:
         cd:94:db:0a:1e:f2:46:94:2c:ed:0f:10:d6:62:c0:7f:c3:22:
         54:23:f3:04:fe:77:da:ed:bd:a9:32:1f:3c:32:f1:25:c6:f3:
         93:c0:b4:37:bd:1a:85:78:7f:5e:d1:6a:75:fc:67:b8:bf:bb:
         00:6c:6f:fe:ec:8b:02:28:b3:54:c9:b4:5a:3f:49:a3:3a:ca:
         0b:b4:2b:fb:84:7f:bf:29:35:cf:18:1d:05:98:1c:86:f0:e2:
         10:e4:aa:b9:8f:0b:df:86:07:10:3c:d6:12:85:8c:8f:40:5a:
         90:2c:33:ff:4b:fd:14:cb:f4:fc:b1:9a:40:42:8b:b6:12:86:
         1c:7c:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:12:29 2024 by rpki-client on console-ams.rpki-client.org