Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
File:                     2feb0cec-2470-3c1b-b3be-57e967538fd8.roa (raw, json)
Hash identifier:          WgvYfKBeXCbq/o4fo1HzzCr6/gGMEN727AFXsrP0HfU=
Subject key identifier:   22:E5:1C:2B:0C:17:82:66:11:3E:56:8C:86:1E:2E:AE:4F:40:92:0E
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB68FC9AA9628EAB9829900
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        23.88.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8f:c9:aa:96:28:ea:b9:82:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=f4ec6fca-cfde-4485-950c-5f9c49471c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:b1:ff:25:29:99:41:64:7f:75:dd:d8:ff:
                    7d:fc:c6:38:e3:e2:6a:28:7e:2d:aa:d8:4e:44:25:
                    dc:2c:25:9c:84:51:cd:d1:b6:e7:fd:27:28:d5:44:
                    a7:af:f5:4f:8f:b4:1d:b7:d1:9c:2b:b4:83:49:fc:
                    aa:26:a2:a0:ba:26:f2:af:6d:90:7f:44:37:ec:00:
                    43:70:ed:c0:77:3e:e8:f6:f3:11:90:cf:13:8e:ea:
                    37:d1:ee:52:c6:cd:a3:0d:29:bd:7d:c3:a9:a4:14:
                    aa:81:08:29:95:05:0c:c9:f7:b6:2b:6c:16:b9:2d:
                    73:45:41:08:58:dc:e0:66:04:77:28:cf:93:c6:e1:
                    be:2e:0d:86:59:97:11:26:69:1b:f9:d6:4d:1d:ed:
                    51:ae:f0:71:fa:f0:82:dc:04:b6:87:93:ba:aa:af:
                    8e:49:d4:e7:af:e4:42:19:c8:48:97:50:2a:f8:e2:
                    40:d8:ff:74:0f:ae:1a:52:6e:6a:61:53:40:c1:9e:
                    13:ab:73:c0:c2:32:ec:0d:2a:40:f1:57:b3:15:65:
                    58:ba:8e:f1:cb:a7:d2:86:57:fa:29:98:5e:72:aa:
                    64:16:90:f4:22:06:2e:44:f6:36:31:6a:4a:44:50:
                    97:79:be:69:6a:e1:0a:d5:22:c2:5a:56:b7:ad:b4:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E5:1C:2B:0C:17:82:66:11:3E:56:8C:86:1E:2E:AE:4F:40:92:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:6d:58:8e:52:bc:07:4a:6b:e0:6b:0b:7a:c6:dc:7e:54:
         4b:62:a1:fc:73:d5:6f:8a:ce:c3:e3:ae:92:eb:18:81:9f:b5:
         fd:72:87:01:41:0f:d2:13:7c:67:1b:19:24:a7:6f:b2:ae:29:
         6f:3d:7a:1b:be:c0:e4:4e:d1:13:b4:6a:27:f6:59:06:dd:2b:
         89:87:eb:a8:7c:f7:b1:6f:69:d4:91:95:a5:74:5b:66:33:97:
         9b:a1:f3:e2:b3:a3:2e:5c:e9:f4:39:ae:a9:ca:7d:03:ed:3d:
         71:37:9e:a0:a0:30:a0:ab:de:07:ca:d5:fe:70:b0:e5:b1:5c:
         90:e8:cc:78:45:38:1e:8d:e0:fd:ba:4e:a4:80:84:12:b6:89:
         ca:4e:89:a9:6b:a0:54:ad:5e:7e:fc:fc:06:aa:b2:aa:3a:5e:
         b8:13:58:c1:e8:02:a5:d0:52:35:8c:46:34:3b:ef:fd:c6:28:
         4e:a3:60:6a:7e:f9:b3:e2:9f:4f:52:87:cb:08:74:5b:37:03:
         07:62:3e:e2:a0:c7:89:1b:e2:6c:c1:47:04:bd:ec:39:7a:ce:
         e4:c0:33:0f:81:91:82:33:0f:01:3f:7d:8f:43:18:4c:e8:6b:
         7a:b2:c6:56:95:ec:2c:a5:dc:dd:d5:23:05:66:11:8e:21:59:
         9c:94:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:40 2024 by rpki-client on console-fra.rpki-client.org