Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa
File:                     2fef3d37-e795-39f5-b53a-c7e420227567.roa (raw, json)
Hash identifier:          xAcZL1fJTjS7twy0zjrLj7QfL8SkxUsyN85rC2mdO1E=
Subject key identifier:   8A:74:90:CA:DE:26:74:7D:08:F8:0C:4F:65:A8:0C:22:0C:92:EF:43
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F43285845AC88CF49375C080A31BCF980
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     7018
IP address blocks:        81.199.64.0/20 maxlen: 24
                          121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:cf:49:37:5c:08:0a:31:bc:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=0525642b-b4c7-4ba6-adf9-ad5bb5c32edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:64:e4:ae:dd:ce:9e:d2:44:c2:10:42:36:
                    50:6a:98:00:9c:b5:97:0c:86:0c:8c:c0:8b:c2:eb:
                    42:62:40:2e:1a:fe:03:10:38:3f:d7:38:c5:99:97:
                    f5:bd:0d:68:5c:76:68:47:ba:87:31:81:c4:70:c7:
                    21:74:72:2c:7a:d4:b3:c2:95:a4:fb:16:9d:c0:74:
                    e5:ef:1e:fc:e0:ea:5d:4b:c8:e8:fc:14:cf:3a:63:
                    22:fa:ec:03:e6:9a:46:e7:45:c8:d6:c6:6f:0b:95:
                    94:37:3f:f6:11:b0:45:d8:d7:64:f3:88:04:97:19:
                    32:8a:f2:7e:e1:42:7f:4e:e8:b1:56:04:13:01:3c:
                    4c:7e:e7:e4:9e:ea:f3:88:0e:c1:01:36:7f:03:7b:
                    a0:af:da:25:d7:69:96:33:2b:1b:7b:08:6f:1d:20:
                    c8:db:2f:6b:ad:e7:77:a2:a5:ad:9b:ec:c6:76:98:
                    5d:05:b2:69:12:38:35:e8:88:04:d1:cb:e7:46:2c:
                    b5:e3:99:39:f0:2e:79:34:55:2b:47:99:4b:05:5b:
                    75:21:de:9c:49:5f:16:11:fe:a6:b7:72:87:bd:0e:
                    ae:7e:45:34:7b:0a:17:5b:4e:0e:05:f7:3b:07:fd:
                    1c:9a:08:02:49:04:b1:7d:f4:1c:45:e2:5c:ce:a3:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:74:90:CA:DE:26:74:7D:08:F8:0C:4F:65:A8:0C:22:0C:92:EF:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.64.0/20
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:40:93:97:21:3a:96:15:91:08:8b:2f:58:52:7f:c7:0e:
         2b:ab:93:06:44:c3:85:4c:43:82:d1:ab:70:3f:df:39:ed:1c:
         de:4e:8a:12:1c:e5:0f:a3:3c:7d:2f:e8:83:b6:a9:77:4a:19:
         6e:6b:1c:bf:b9:57:1f:a8:f3:21:d0:12:17:f2:95:45:5f:35:
         6a:df:43:7e:63:67:4f:5f:ea:7f:be:be:bc:2f:b9:c1:b2:a1:
         e2:2a:6f:30:39:0e:9f:a1:7f:01:f9:5f:f6:35:37:0b:80:c5:
         1a:68:88:bc:29:ee:27:49:b8:ed:d6:8d:1c:8b:ff:64:e3:06:
         86:e4:c0:91:b4:23:09:e3:dd:2b:ff:70:a3:79:9e:63:b7:3b:
         d3:4f:68:9a:99:d7:c8:18:5a:5d:f8:82:b0:94:e2:53:ce:2b:
         1d:4a:f5:57:1f:b3:ff:2b:22:34:13:23:43:1a:d4:51:57:37:
         a4:a7:be:a4:51:2e:6f:8e:ef:eb:6c:df:57:e5:ec:ff:33:f7:
         d1:95:3c:96:07:af:22:63:13:9d:71:bb:37:94:55:97:05:ba:
         e0:e1:7b:51:62:dc:bf:5c:8a:f9:d5:96:65:6e:2d:ed:2f:ea:
         a0:ea:bf:d5:00:95:eb:26:b4:4a:61:0e:3a:d4:98:ed:dc:53:
         9a:1f:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:02:12 2024 by rpki-client on console-ams.rpki-client.org