Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
File:                     9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa (raw, json)
Hash identifier:          iMeqfdnil+d/PM1d8SrBI6DL7tCi3cORYCIlrilL/5c=
Subject key identifier:   D1:A5:A8:D4:7C:8C:0B:FB:7A:2B:02:4E:44:C6:52:F4:0A:49:A9:E9
Certificate issuer:       /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial:       010D0C9F43285845D33C86058A8F6AFFA296E800
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
Signing time:             Fri 10 May 2024 09:43:35 +0000
ROA not before:           Fri 10 May 2024 09:43:35 +0000
ROA not after:            Thu 08 Aug 2024 09:43:35 +0000
asID:                     16509
IP address blocks:        208.88.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:3c:86:05:8a:8f:6a:ff:a2:96:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
        Validity
            Not Before: May 10 09:43:35 2024 GMT
            Not After : Aug  8 09:43:35 2024 GMT
        Subject: CN=a0c5d7f4-a359-424c-b8e2-6867ab7d037e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:64:c1:77:33:5f:38:05:4e:6a:c0:7c:15:
                    c2:16:0a:a5:f3:02:db:ab:66:07:9e:14:05:04:93:
                    79:7d:9e:1f:14:9c:8e:4e:9e:65:d0:5e:f9:11:3f:
                    42:db:03:9b:46:5d:b8:7b:f3:ae:27:fa:63:56:9c:
                    a2:e4:e1:ba:51:46:f5:95:ff:67:ef:59:a8:2a:4b:
                    34:16:78:f7:70:9a:f9:e8:3f:e7:78:60:c9:94:b3:
                    df:94:13:59:df:7f:f5:c5:25:7f:5b:31:37:6e:aa:
                    6a:6c:10:f1:d8:95:63:75:03:c4:1f:96:74:31:94:
                    cb:39:c3:3c:d1:fe:87:24:e8:76:84:5e:b4:6d:f8:
                    15:c4:ca:fc:3a:0c:0e:d7:9c:2d:5d:cb:31:7a:dc:
                    28:b5:26:2e:8e:f3:0c:7d:5c:b1:0a:af:92:a0:ff:
                    b3:85:58:48:30:a7:41:8c:66:b1:2c:bc:cc:41:9c:
                    5a:c7:90:11:7c:a9:03:4b:ef:1d:4a:a7:3a:1a:4d:
                    e7:a0:c0:04:09:6a:79:b5:6d:f8:d6:71:75:c2:62:
                    d5:e3:e2:9d:85:e5:79:3f:1f:24:3e:fa:82:2c:d3:
                    04:30:c9:c8:d9:e2:48:1c:d3:05:1b:b1:a5:c8:74:
                    ca:c9:eb:94:9f:e0:67:35:0d:3b:15:8f:c9:be:c1:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A5:A8:D4:7C:8C:0B:FB:7A:2B:02:4E:44:C6:52:F4:0A:49:A9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b4:67:d4:77:45:73:1d:57:90:2f:16:53:a6:43:1c:e9:a3:
         46:07:50:7c:7a:e6:44:b0:89:0f:99:6a:8d:f2:ff:e0:61:0a:
         17:a1:77:3a:7e:80:a1:fb:29:4d:d2:57:04:2d:48:1d:75:be:
         83:3b:cc:bb:30:00:b1:36:d7:78:57:58:d1:3a:2e:bd:fd:c3:
         dd:78:d8:81:f2:d3:b1:82:fd:28:da:65:2a:c9:60:dd:aa:a7:
         f8:56:25:03:dc:e7:9f:f3:18:56:ff:6c:0f:e5:ce:c6:d2:07:
         c5:04:3a:f9:44:09:6c:ed:1c:2a:7e:19:9c:67:74:af:b0:11:
         04:90:3f:60:4c:c5:b2:9e:28:03:32:a3:ad:84:f4:83:49:28:
         5b:62:29:7c:0a:31:e2:f8:60:c9:17:4f:85:f1:39:6e:bb:4c:
         13:9e:7d:61:bc:63:6a:99:e1:11:1c:be:a8:be:f1:27:68:47:
         85:5e:74:28:a5:1e:31:73:c5:4b:7e:72:f1:ee:db:00:5d:01:
         c0:8c:09:1c:ae:fd:bb:1a:d9:8c:e0:ef:5b:5f:ed:49:ec:78:
         3d:fa:de:4c:5d:6d:87:a1:d8:25:9f:e5:f8:0d:99:81:1c:14:
         9d:30:ed:f5:7a:53:1d:0b:c8:d3:89:a4:8e:de:82:fa:d2:06:
         17:ed:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:51:15 2024 by rpki-client on console-fra.rpki-client.org