Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
File:                     553b08e2-7500-3d55-b607-b218b8a593e2.roa (raw, json)
Hash identifier:          L6Y7eeB1x6HTnE0COUnUJtJ15AoR7veugJ+9n3f+qzE=
Subject key identifier:   E1:39:12:89:BC:EB:24:64:C2:AB:43:9A:DA:20:DF:5E:FC:72:3B:E4
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F6021F4F4628DE4E3F80
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        23.88.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f6:02:1f:4f:46:28:de:4e:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=b198def9-5ca0-46a6-a74b-ed2433c9044e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:96:e8:b1:0d:b0:45:14:23:46:1c:af:1f:86:
                    01:66:d3:d7:3e:01:e9:c4:a4:c1:4f:e4:1b:89:7e:
                    d7:2b:3e:b0:0c:17:6e:06:19:9f:d4:73:73:e1:bb:
                    68:95:71:dc:e3:41:01:b1:0f:9f:c5:9e:1a:8b:47:
                    6b:4e:fb:35:74:e0:3b:40:45:9c:38:e4:d7:d4:37:
                    05:96:a0:9e:3f:60:38:76:b9:4e:cc:07:07:02:9d:
                    c5:e0:56:33:d9:ee:22:72:6a:1e:c2:cb:ed:0a:93:
                    87:21:ef:25:07:03:fc:ea:0d:4a:77:9e:a8:2e:c3:
                    2a:e6:62:f0:91:72:30:a0:56:a3:86:85:9f:dc:e8:
                    35:a6:46:7b:29:a0:9b:92:21:60:22:bb:77:da:c4:
                    2c:db:44:8c:61:a4:eb:c3:c3:b0:bd:f4:59:ba:0a:
                    6e:af:c6:b3:0a:7a:b7:98:e4:cc:43:26:0a:94:6e:
                    c2:e1:b1:5d:1e:0b:c3:54:8f:7f:99:a9:5c:a7:36:
                    3a:da:98:65:8a:4c:0d:55:92:e4:6a:f9:bf:51:ec:
                    3f:ff:bc:e3:9e:90:76:ff:8e:b2:74:71:9c:0b:20:
                    ab:f5:3e:80:05:c0:18:9b:f9:b3:09:de:95:82:1e:
                    cf:10:41:64:46:fc:9b:51:73:5b:f7:52:75:75:47:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:12:89:BC:EB:24:64:C2:AB:43:9A:DA:20:DF:5E:FC:72:3B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:97:96:60:37:b1:47:0b:3b:1c:92:95:64:b0:9f:b7:b0:
         b5:50:1f:5d:4f:ce:08:08:e3:c4:90:ca:9f:c4:df:67:3d:7c:
         06:8a:04:ca:75:bc:69:a4:48:5d:0d:dc:32:1d:73:02:7d:7a:
         65:3b:da:fc:79:33:92:a0:b7:18:fd:55:b8:8c:06:e1:af:05:
         a3:3a:c6:96:44:d7:f1:c1:91:e4:0a:21:19:b3:a6:d2:f7:b2:
         e3:6e:0d:27:90:f2:90:6a:5e:f8:ef:2a:1a:75:11:96:77:55:
         a5:59:7c:04:bb:35:32:68:26:be:c0:80:b3:ba:1d:81:44:ab:
         aa:15:b7:41:e7:76:b8:b3:5f:92:34:72:d4:71:2d:31:9a:11:
         5e:ee:12:7d:4f:20:8c:27:83:17:7f:dc:52:f3:fb:2d:91:25:
         b5:61:ab:6f:02:86:1f:b2:80:9e:8c:95:4a:38:a5:03:86:cf:
         20:ae:e9:df:b8:0e:d6:80:98:d6:69:72:2d:ba:49:80:05:fa:
         b6:bb:6d:65:f1:6e:4a:fe:56:48:be:4d:94:2e:d9:bb:b6:b3:
         02:06:59:2a:bf:ab:44:30:f5:8f:9e:97:e2:3c:04:1b:3e:40:
         66:aa:5f:55:39:b4:d4:d8:4c:f0:be:88:7e:29:7f:af:43:36:
         8e:97:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:03:24 2024 by rpki-client on console-fra.rpki-client.org