Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/76c00e35-1135-3ba9-a677-0be9a89f5188.roa
File:                     76c00e35-1135-3ba9-a677-0be9a89f5188.roa (raw, json)
Hash identifier:          LchgOqns8tTNFR5o4Hx0GnVLXZTRhbkkAb3igTUdUvw=
Subject key identifier:   A0:52:9A:9E:00:AA:12:39:C6:C7:4E:55:D9:4E:91:E2:21:59:38:9F
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F43285844F19AAD9BB815369F183C9380
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/76c00e35-1135-3ba9-a677-0be9a89f5188.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     30456
IP address blocks:        195.88.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:ad:9b:b8:15:36:9f:18:3c:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=8e511ebb-bcaa-43f6-aa6f-cb3978e7f959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:7a:c1:7e:d5:62:4b:38:2a:5c:69:c8:19:
                    e4:9b:06:d9:ec:16:2d:cd:da:c0:be:9b:14:f5:b2:
                    73:85:23:22:32:f2:4a:f9:d9:9a:21:a9:82:24:66:
                    ab:98:a9:6b:07:f7:37:e5:5f:96:b9:6a:e3:33:1e:
                    2f:a7:f1:2b:2f:d1:ab:25:71:e1:67:7c:3f:af:01:
                    2f:2b:78:4d:c6:4d:cb:28:09:f6:71:8d:70:f1:4a:
                    df:45:66:44:e6:29:7c:4b:2f:78:5e:0f:b0:73:13:
                    8a:8c:c6:a8:bf:e0:97:7e:7a:73:71:38:45:20:c3:
                    41:f4:ee:62:91:1b:d7:9a:c0:1d:28:05:93:47:b8:
                    f3:0c:1f:4d:ed:8e:50:96:1e:2c:cb:f4:55:94:77:
                    d2:45:bc:1d:ed:14:68:0b:89:d2:66:0d:5e:50:d1:
                    70:a2:e2:a2:93:f2:ac:8c:5b:88:43:06:79:ef:07:
                    c1:64:20:44:89:57:7a:c9:4d:22:e7:a2:15:aa:69:
                    b6:83:c6:4e:22:d7:3a:c3:b4:85:69:b4:f4:6a:3f:
                    57:35:55:0c:d0:b2:99:d5:84:2b:29:92:dd:ff:9d:
                    3d:61:b7:54:65:c7:4c:a3:68:49:8d:5b:aa:3f:03:
                    a5:dd:b6:db:c9:b9:41:c2:f7:84:1b:79:64:ce:3c:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:52:9A:9E:00:AA:12:39:C6:C7:4E:55:D9:4E:91:E2:21:59:38:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/76c00e35-1135-3ba9-a677-0be9a89f5188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:87:50:50:c1:b4:c9:84:54:7f:c7:69:22:2a:75:af:b4:10:
         9a:ce:a2:f0:49:07:30:2d:e3:e1:bd:cd:c0:ae:78:d7:81:6e:
         27:48:8b:59:98:09:68:8e:13:1f:72:43:14:27:34:53:e9:b9:
         9d:31:6f:65:d2:52:69:9b:e3:fd:7a:60:22:67:5a:b8:9c:f4:
         11:c3:8c:c2:ed:b5:e0:63:41:58:fc:c7:0c:f5:ba:d0:e1:99:
         7d:00:9d:da:be:38:4f:6f:bb:de:8d:f7:7d:2e:9b:ba:22:53:
         14:69:4d:f7:6f:89:7f:20:af:cd:c4:85:c9:4d:c5:9e:37:80:
         5c:6e:31:17:69:95:93:62:df:9c:a2:dc:ee:c9:d0:a5:5a:3d:
         97:31:2a:55:4b:79:c4:93:0d:8f:79:0e:72:ec:11:d5:80:ff:
         e4:95:70:5c:b3:53:0a:56:71:5c:d9:18:0e:4f:34:0f:24:58:
         06:04:ce:9b:ca:12:cd:fc:6f:85:47:78:83:c2:6c:10:51:70:
         c0:70:3f:74:c6:fa:76:de:b7:c0:95:81:93:df:f5:13:0c:cc:
         94:aa:ed:a8:a2:21:a1:21:a7:21:be:0b:14:8a:d4:b4:ad:7e:
         fc:df:7f:2b:ac:bf:c0:95:d8:15:f5:61:d1:27:46:05:3f:61:
         86:00:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:41 2024 by rpki-client on console-fra.rpki-client.org