Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa
File:                     7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa (raw, json)
Hash identifier:          kCHKYB8X2YlDEvhaooY0t917vdylGcSuD1sIkvnbQPc=
Subject key identifier:   E1:43:09:4E:0A:43:B2:99:D5:DD:C4:A1:FD:59:50:8F:F6:01:AB:BF
Certificate issuer:       /CN=a5e2d89d-6269-4405-9578-836517825b32
Certificate serial:       010D0C9F43285847D999F41779DE26102C0CFA60
Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     397293
IP address blocks:        208.77.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f4:17:79:de:26:10:2c:0c:fa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=4e63fa02-e8dd-4369-8e0a-92e286a1af0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d9:28:8b:78:f0:4f:15:84:8a:c3:4e:6a:5c:
                    f8:12:50:8f:f0:d2:71:19:46:79:09:ab:ab:d4:07:
                    5a:2c:55:73:e3:8c:bd:fe:24:42:f6:d9:c3:ba:8b:
                    da:ba:4a:2d:1c:e3:da:f4:9d:d9:6c:f1:8f:7d:53:
                    88:a4:1d:4d:df:df:a7:b0:20:1b:a8:6e:2a:2b:f0:
                    67:5a:dc:c0:ec:c8:1e:55:d7:5c:a3:8b:d4:4c:5c:
                    ff:a8:d2:1b:aa:64:5e:fa:c4:48:24:d7:28:37:15:
                    8f:c4:a1:07:15:b2:00:f2:77:f7:47:c7:2e:54:e2:
                    34:06:4a:8c:98:03:f5:3b:52:cb:74:c8:d6:bf:a1:
                    b9:d5:95:a5:36:4f:cd:9d:c3:e6:ab:2a:a7:74:1b:
                    81:3f:b0:e6:50:c1:66:5d:67:ac:11:57:2b:f1:5a:
                    9b:a8:27:cf:36:c5:dd:1a:35:b1:a8:2b:99:ff:ec:
                    64:95:6b:ad:cd:e5:5f:dc:02:62:a1:b8:63:8a:07:
                    0f:a3:bd:19:24:f3:3c:26:44:44:fc:4e:92:95:c0:
                    c0:ed:d5:14:86:33:2d:08:ec:4e:46:e6:af:5c:a6:
                    38:69:05:e2:87:16:03:bd:2c:2c:fc:20:e4:1d:38:
                    3c:cb:95:76:35:eb:a6:a9:7f:e8:50:7f:c1:cb:c1:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:43:09:4E:0A:43:B2:99:D5:DD:C4:A1:FD:59:50:8F:F6:01:AB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:47:64:6e:91:22:a4:b7:b1:f5:c4:44:63:fd:15:b3:22:64:
         3c:fe:9d:b3:ac:25:2e:0f:10:20:10:23:74:f1:94:67:45:8e:
         24:5b:57:27:f1:b2:04:2c:9e:54:7c:49:5d:2b:15:8c:be:24:
         8f:c2:31:94:f6:43:49:60:b2:34:ec:ed:c8:bd:e4:e1:41:0f:
         ff:08:13:1b:b8:4d:73:bf:3c:e5:09:92:ce:90:71:14:be:65:
         7d:9c:71:1f:cc:19:d9:ac:56:76:ce:9e:45:d1:3c:d8:12:b5:
         32:b2:bc:0d:b3:64:00:f6:fc:6c:ea:3a:24:41:8a:ba:ff:a9:
         53:85:1f:78:c2:4a:e1:85:15:18:94:fc:5f:7a:45:47:57:ca:
         6e:00:02:e2:bb:c3:43:c9:68:8c:d5:5b:2e:bd:ef:80:57:ca:
         23:8e:b1:71:43:0e:88:e5:88:23:4e:50:f6:d7:be:50:2b:4d:
         31:ac:a4:f9:f8:42:df:72:ec:30:87:d0:2b:ff:d6:c4:4c:3a:
         32:a4:55:63:e9:85:73:ea:58:8a:c3:96:85:3d:d6:fc:d2:39:
         da:c0:a8:2a:8a:3f:80:3a:d3:9c:81:13:80:ff:2d:de:1f:d2:
         4c:cb:18:80:76:ab:c3:8b:94:77:40:81:4f:81:97:be:b9:ee:
         2e:60:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:16 2024 by rpki-client on console-ams.rpki-client.org