Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa
File:                     3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json)
Hash identifier:          FZmwYDtX7LHj05yChhujFgK0YhyF/xQkW23mMDBDjmA=
Subject key identifier:   EF:08:AB:D2:B5:D4:4C:76:AA:A8:F5:DA:D8:36:05:B5:20:9A:02:53
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858455A2D829EB0620AB957E9ECC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     397422
IP address blocks:        208.56.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:82:9e:b0:62:0a:b9:57:e9:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=b59a6baf-41a6-4fdd-982e-254c1728b60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:41:d2:16:74:ad:c8:6e:f9:11:79:17:16:
                    e1:58:02:c8:2f:db:1f:13:80:60:ba:7f:13:b6:ff:
                    96:9c:5c:e9:fe:29:8e:10:bc:31:b9:2c:3c:2c:e9:
                    cc:71:31:9e:9f:53:a2:af:ff:3b:40:c9:75:9d:77:
                    5a:95:0b:56:d6:80:0c:3d:24:9a:01:08:55:7a:54:
                    81:e4:11:4a:6f:16:81:2a:2a:a6:b2:be:d6:46:79:
                    3a:47:02:bf:6b:89:64:46:d8:51:10:c9:d6:75:f5:
                    bb:4d:06:46:f0:af:03:22:fc:4e:e9:4f:d5:db:d8:
                    67:65:76:0d:fe:0f:43:da:90:96:4f:92:b4:bc:7c:
                    df:26:13:8c:92:e0:75:3b:59:dc:79:d2:4e:91:d0:
                    88:8c:38:a0:1f:b7:33:4e:d9:c2:81:46:22:38:cc:
                    05:3f:2b:50:df:da:36:6d:52:6d:6e:2a:bd:4b:cc:
                    e1:dd:95:54:7b:b9:17:79:84:0e:19:ff:4d:ac:c1:
                    26:0b:d2:c4:36:52:b1:8c:a6:d0:11:67:63:74:9b:
                    b9:75:d6:ab:e8:3a:41:e0:b2:38:4a:2d:c0:59:50:
                    a0:0d:70:f2:dc:a7:e5:df:c9:e3:e2:02:33:8f:30:
                    c3:ba:6e:7c:5d:98:6e:c5:c4:81:64:aa:37:27:f0:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:08:AB:D2:B5:D4:4C:76:AA:A8:F5:DA:D8:36:05:B5:20:9A:02:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a2:f3:e8:3b:d9:d9:3c:7b:97:c4:db:36:5a:95:88:45:bd:
         81:c7:b3:b7:46:b5:1a:e3:b2:8a:ed:75:e1:6c:df:38:5b:fe:
         e0:71:35:81:55:96:2d:d2:b1:fd:0d:44:64:d3:a4:af:c8:83:
         3b:45:53:ac:7a:a6:76:b6:ac:81:4a:16:02:e8:09:3a:b9:6e:
         75:cf:08:d9:66:e6:ee:07:9a:34:42:8e:b3:f9:14:b4:10:24:
         31:c3:d2:30:8c:63:a9:16:21:5a:7c:2c:b5:c9:de:dc:92:d6:
         14:2f:3e:b2:85:51:1c:c5:a1:54:9f:6a:37:86:19:3a:3c:2b:
         da:f9:dd:e2:a0:5a:ed:cf:c4:d2:3e:a1:a3:fc:67:fe:15:83:
         a7:de:2e:4f:15:c4:76:44:a8:82:e6:07:60:87:8a:c1:37:3b:
         bf:4a:81:68:9d:b9:4f:53:83:82:40:d4:4c:87:e9:10:ac:d0:
         2c:e9:11:12:9a:f6:2f:1d:81:6a:ba:3c:f9:2c:4e:36:00:ce:
         e9:19:31:0c:8e:b1:61:99:4c:cd:1a:50:19:95:37:be:a5:fa:
         df:05:c2:4b:b2:23:5b:41:b3:02:7c:1e:54:dc:83:fe:3f:82:
         eb:f1:47:d5:9a:c8:52:b2:70:cc:94:24:73:78:f2:a4:70:55:
         f0:57:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:45 2024 by rpki-client on console-fra.rpki-client.org