Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa
File:                     8e12930e-504a-3f50-8b98-113950f808f7.roa (raw, json)
Hash identifier:          rgOHnvdfIwNHZlt4+RjnC/+pPUY2hkRr/iAZ0Lzz7LM=
Subject key identifier:   88:9A:92:5C:C5:95:A8:5A:31:40:D5:C0:9D:1A:BF:55:5C:AE:2C:14
Certificate issuer:       /CN=d7df35c8-e79b-433a-a950-6df11849bfd3
Certificate serial:       010D0C9F43285845B3836B6E6A228A7E6646CB84
Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     88
IP address blocks:        204.153.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:6b:6e:6a:22:8a:7e:66:46:cb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=8750d0f6-0210-49fa-bd40-a83658d6a5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:cd:c2:55:bd:da:79:8a:f7:3f:dc:08:c6:
                    53:b6:bd:a6:70:5e:f7:fd:66:2c:a1:13:d3:43:5f:
                    fa:8a:09:9e:b7:1f:43:b0:72:47:c5:38:39:b3:8d:
                    9e:c7:dd:bd:23:46:3a:aa:67:dd:3a:68:2a:7c:00:
                    6e:98:8b:ca:e8:ac:b1:2b:fe:b8:52:e8:54:ed:ef:
                    0e:d3:54:f4:7d:8b:56:ad:3f:e3:b3:1c:47:87:fd:
                    e4:b2:df:88:54:8b:00:ce:09:0e:69:6f:b1:5f:91:
                    b5:ad:fb:ea:68:fe:95:24:e1:84:db:ac:8d:79:27:
                    6f:5e:76:3f:6c:aa:e2:c1:48:fd:1c:3f:37:69:d4:
                    19:33:cc:99:10:a6:bc:e1:c3:5d:74:c4:5f:7c:fe:
                    7b:11:da:a9:9f:ce:9e:ae:a4:cb:b8:f9:0f:fd:ab:
                    37:36:fe:6d:47:0e:d7:12:ca:7c:65:3e:e7:55:35:
                    93:3a:c7:03:53:1e:72:32:0d:0c:c3:6a:ba:df:15:
                    3c:07:91:4a:bb:d9:8e:79:eb:b2:4f:9d:8c:93:01:
                    2e:0f:63:76:61:57:66:c7:3a:28:34:ce:d8:b9:5f:
                    d0:f3:89:62:8e:59:42:fd:e5:0c:23:a2:63:e2:88:
                    73:fe:a7:e6:bf:a9:6b:fc:df:14:2f:9a:c4:88:f4:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9A:92:5C:C5:95:A8:5A:31:40:D5:C0:9D:1A:BF:55:5C:AE:2C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/8e12930e-504a-3f50-8b98-113950f808f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl

            X509v3 Authority Key Identifier:
                keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:9f:89:8d:7f:4b:a7:51:2c:74:27:a5:ec:61:f0:3f:96:
         8d:20:31:95:a0:b8:60:83:60:4b:49:6d:85:e4:1b:81:71:db:
         86:84:d3:cb:96:df:1a:0a:ac:20:ea:cd:4c:03:6d:86:29:0f:
         07:f8:a1:2f:c0:a3:98:9b:7c:68:8c:a2:04:85:a7:62:49:f1:
         56:d3:cf:cc:20:72:02:6c:f1:b1:11:bb:0b:ae:95:c3:ce:fc:
         71:89:10:cd:ae:b7:41:ad:b5:5a:9d:52:f7:c1:01:3d:4e:4e:
         f8:69:23:62:b1:87:4f:ca:fc:be:3b:4c:93:ff:bf:a8:37:b0:
         6a:86:0e:7e:00:d2:52:4b:d2:7b:05:e6:35:47:91:55:20:61:
         65:6f:5b:27:67:30:64:00:ad:f8:7e:ca:21:81:3f:6f:47:b9:
         fc:b0:f6:a2:91:d9:29:37:0c:30:95:99:b5:c0:48:fd:51:ee:
         f2:a5:df:0d:ae:e2:b8:f8:39:54:5e:34:33:06:e8:16:48:f9:
         7e:4a:8a:20:57:cd:2b:bd:06:01:43:a9:de:ae:1d:ad:dc:65:
         7d:e8:69:0a:9b:36:de:c9:35:32:a6:76:51:5b:ab:c2:c2:3a:
         26:14:4d:02:90:46:27:54:f9:af:3f:9d:22:89:ab:19:db:0e:
         e2:36:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:15 2024 by rpki-client on console-ams.rpki-client.org