Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
File:                     9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa (raw, json)
Hash identifier:          npy/g0pJU1lITQXfNbSfnU2h6TZ+hsWNttoRLlocGJM=
Subject key identifier:   39:CF:28:F8:D8:F9:5C:2E:9A:0C:1B:A4:29:3B:84:46:33:1E:5F:49
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F432858450D8583114D2AF9A765ED3540
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     46841
IP address blocks:        199.87.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:83:11:4d:2a:f9:a7:65:ed:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=7e9a0256-99cc-4182-99b1-e6099eb25210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:b5:a1:6c:00:8b:0f:f4:cc:14:ae:bd:e1:
                    b1:e6:87:bd:7c:3f:d0:f4:7c:ed:c0:b8:f9:e0:61:
                    59:49:a9:bc:5e:80:6e:ee:3f:c0:bd:ba:0a:21:49:
                    d8:9a:b1:33:8f:09:28:7a:df:10:ad:98:ad:0e:ce:
                    9a:cd:21:bb:80:f9:6c:64:55:17:55:7a:2b:60:e8:
                    40:56:14:d4:bd:50:f3:0b:d8:7a:fb:7d:49:5e:71:
                    53:62:af:dd:03:f1:c1:00:05:d1:15:bc:8f:60:85:
                    60:23:b2:3b:74:7d:0d:6b:eb:eb:89:b3:80:be:67:
                    e6:d7:db:47:e7:42:0d:a5:04:0b:bd:1b:e7:c8:ca:
                    cd:1a:cf:62:ec:94:52:bf:a7:d3:76:e1:ed:80:33:
                    02:9a:51:9d:73:32:46:e2:2a:f7:c7:c8:28:30:2f:
                    fb:bd:72:87:c6:e7:a1:84:d8:37:c0:b8:de:93:10:
                    32:f0:43:54:eb:f0:52:52:49:11:65:a5:3d:91:7e:
                    24:e8:13:71:42:18:5c:3d:2e:a1:5d:cd:21:89:b3:
                    a5:2e:f7:b2:a1:75:30:af:08:93:b7:7d:d9:e0:02:
                    50:ec:8c:f2:85:c4:85:ea:1a:93:30:a3:a1:f9:2f:
                    87:af:92:a1:b5:bc:8a:b3:da:2d:47:c1:0c:78:05:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CF:28:F8:D8:F9:5C:2E:9A:0C:1B:A4:29:3B:84:46:33:1E:5F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:c4:27:18:49:60:4d:da:52:c7:c9:a7:17:81:1a:48:ae:
         ed:27:98:3b:9f:f9:33:8d:51:d2:da:58:75:9a:8a:dd:9e:66:
         25:f3:8f:19:66:98:14:c9:9b:12:11:e5:72:3c:f5:04:1e:06:
         bb:6c:1a:52:63:27:15:82:a3:80:04:c5:30:6a:b3:11:b1:01:
         6e:84:62:17:04:92:b2:63:a1:8c:72:ba:73:23:7c:45:6a:29:
         40:a3:1d:1f:4d:56:e6:e7:d0:d8:cd:b9:92:63:08:f4:e9:f1:
         44:84:4a:74:06:99:cb:83:66:e9:c2:66:6c:73:00:e4:29:15:
         7a:c8:99:61:29:e2:80:c2:89:da:b0:92:c7:d1:89:2e:15:ff:
         d6:a7:b8:cc:be:34:87:4e:1f:82:2f:e0:4b:cd:d4:c5:99:d5:
         bb:be:ec:14:11:34:3c:35:c3:21:6c:fd:1e:e8:07:aa:2b:03:
         2a:ad:ad:81:eb:16:8c:39:6f:79:3b:50:ab:62:34:ae:18:c8:
         54:67:46:9c:9e:7d:48:5f:f0:e2:2c:b2:80:42:af:a7:f0:f8:
         f7:01:0b:67:84:af:16:fc:e7:bf:93:f3:34:de:a7:24:ff:58:
         ea:13:61:2d:d0:d6:83:df:71:3a:93:15:9e:e2:fd:52:22:14:
         87:3e:aa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:39:04 2024 by rpki-client on console-fra.rpki-client.org