Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa
File:                     2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa (raw, json)
Hash identifier:          O92EYqEUBa0ryafjZNZipLSL/tD0B8V5fjAy1I1ABvY=
Subject key identifier:   83:6A:42:97:A5:0B:C6:DD:F3:28:29:D4:D7:17:5D:23:C4:4D:A8:AA
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F611D02123A72ACB7530
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        23.88.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f6:11:d0:21:23:a7:2a:cb:75:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=6bf81556-931f-43b6-b915-e360ef1ca942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:80:f1:c4:a8:e7:6a:91:a3:3b:89:8f:48:
                    7b:34:a7:50:93:e9:b3:5f:1f:c8:14:f3:0f:e1:7b:
                    48:05:41:ca:8d:88:c0:ec:6f:c1:2d:ea:e9:0f:24:
                    1e:49:e3:d1:75:77:15:2b:a6:05:ac:fc:09:ed:69:
                    87:fd:a9:45:db:ba:83:c5:33:e6:47:84:68:b9:ac:
                    81:07:7f:b5:f5:f5:31:13:7c:83:c3:96:95:6a:e4:
                    d9:28:08:bd:43:73:a1:d8:89:e7:b2:ad:65:fc:ad:
                    d9:d7:87:db:4a:2a:b6:75:27:a1:d1:d7:23:7e:93:
                    93:31:31:72:b0:7d:79:d7:5f:71:97:e7:e1:5d:7f:
                    26:42:e5:5d:0a:5e:9e:ec:55:93:0a:c7:dd:86:ac:
                    e9:79:f4:7f:e7:82:76:b1:3b:d4:c0:83:ef:fa:f7:
                    3a:23:6a:bb:e7:cf:2f:34:f1:a0:cb:fa:5b:3e:84:
                    45:4d:61:10:41:bd:65:b1:09:15:1d:eb:98:ba:40:
                    10:50:54:fa:e9:a2:5c:00:d7:fa:56:2e:98:13:11:
                    f6:e4:b2:96:e6:2a:e7:3e:96:60:ae:a4:dc:94:fb:
                    c1:bd:ce:4b:5b:43:0a:99:30:3a:1d:a1:9b:12:eb:
                    79:e8:a7:62:47:24:dd:01:cd:be:75:ed:83:27:41:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:42:97:A5:0B:C6:DD:F3:28:29:D4:D7:17:5D:23:C4:4D:A8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:a5:7a:7e:88:ad:dd:0e:d1:32:25:e3:c4:4b:49:dd:50:2b:
         58:4d:c5:17:ff:6c:93:56:55:33:28:17:df:f1:c2:9c:8b:a8:
         9e:42:dd:93:ee:71:0a:f1:81:73:0a:cc:15:91:86:1c:ec:02:
         4e:6b:19:0f:f5:26:7c:50:a5:ff:2a:de:97:7a:c8:50:88:b1:
         03:6b:fc:b8:a9:99:90:e3:88:98:07:df:b2:51:ac:71:8c:4e:
         1a:10:ca:c4:05:79:ec:23:50:3c:0a:31:89:36:b4:fd:42:82:
         0c:ba:c7:1a:dc:08:06:90:f4:17:a5:4b:16:16:57:78:bf:a7:
         8a:26:3e:89:6b:83:68:7a:80:17:3a:2d:bc:5d:3d:c4:27:0c:
         61:f6:d2:7d:a3:f4:79:cf:a4:b8:41:8a:19:34:40:15:5f:89:
         8d:cf:5f:9b:22:de:bd:b7:9a:c6:b9:f4:dc:9d:42:63:bb:cd:
         57:a8:de:88:86:08:69:72:28:24:ef:99:8e:42:e3:ba:ac:53:
         f3:b9:2e:eb:39:18:a3:7d:36:5f:bd:71:b6:16:a9:ba:71:9a:
         17:49:f2:87:4b:c0:e6:50:47:b3:c4:86:18:24:e9:8f:11:02:
         5d:ba:11:a7:45:c1:e1:45:4b:b2:17:4a:ae:ee:f2:7c:99:23:
         42:0f:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org