Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/12ff5e27-9eab-3cce-bff7-88150fab9f1f.roa
File:                     12ff5e27-9eab-3cce-bff7-88150fab9f1f.roa (raw, json)
Hash identifier:          XnqZrvi8aRaTQdbZbo7a7fd0yKsgnZ3ox1Nv/EOQ/FY=
Subject key identifier:   E1:0F:C8:33:9D:EA:F9:9B:82:BA:40:7A:E6:5E:7B:78:93:5A:0D:D3
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F43285845728C330396D45B749838B500
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/12ff5e27-9eab-3cce-bff7-88150fab9f1f.roa
Signing time:             Fri 05 Apr 2024 18:30:43 +0000
ROA not before:           Fri 05 Apr 2024 18:30:43 +0000
ROA not after:            Thu 04 Jul 2024 18:30:43 +0000
asID:                     21775
IP address blocks:        199.15.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:8c:33:03:96:d4:5b:74:98:38:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Apr  5 18:30:43 2024 GMT
            Not After : Jul  4 18:30:43 2024 GMT
        Subject: CN=fc0dba5d-a45e-4b40-be20-a43f2c565364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:1b:d3:47:7e:25:2d:ce:0b:34:17:a8:96:
                    77:5b:d4:e8:1d:29:3c:d9:e3:fb:31:44:1a:23:20:
                    25:7e:9d:48:29:c3:91:d8:5d:a2:8c:d0:b8:ce:49:
                    6b:ab:a4:d9:27:b6:7e:04:ac:ba:77:cd:d2:41:2c:
                    fc:39:a6:8d:4e:43:36:1f:e5:f1:06:68:28:ce:f4:
                    34:53:ed:46:27:46:c4:1a:f6:3f:7e:c6:14:ba:5d:
                    cf:80:e5:62:fe:b0:34:ae:c8:68:e5:0b:3f:2d:52:
                    80:f0:49:ba:b8:8a:90:aa:f9:01:2e:de:af:56:0e:
                    1a:1d:b5:40:1a:fb:4c:f3:e3:96:ad:45:2e:39:e5:
                    44:43:1f:8f:38:0f:41:b3:2a:fb:4f:4e:2a:cb:0d:
                    8f:07:b4:a4:83:3c:0f:f8:85:5e:51:71:9e:44:a8:
                    e3:c9:bd:0f:f2:ad:19:68:ee:1c:2c:40:05:ad:32:
                    0b:88:0d:85:7b:0b:b7:a9:cb:3b:99:e0:79:54:43:
                    a7:20:e1:79:10:52:91:6f:56:db:19:4c:30:0c:6e:
                    83:bc:48:20:33:89:97:0f:22:b1:f3:cf:8e:e1:15:
                    4b:c6:29:d8:0d:c0:c4:fe:6b:18:a5:d1:f0:d6:7f:
                    72:67:23:b7:93:08:a5:09:43:a7:bb:cd:ab:9d:f5:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0F:C8:33:9D:EA:F9:9B:82:BA:40:7A:E6:5E:7B:78:93:5A:0D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/12ff5e27-9eab-3cce-bff7-88150fab9f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:78:ef:02:73:b6:81:03:60:f5:4d:34:a8:12:6d:ab:25:10:
         b6:f0:f2:62:72:e1:01:48:5b:f3:25:b5:d1:78:db:ea:47:4b:
         fa:9a:75:ff:b6:a2:ec:d6:b9:4f:9b:d6:49:cb:0a:e8:c2:9b:
         c1:fa:73:dd:1a:93:0d:76:96:9f:1f:4a:1d:66:1d:9a:d6:a0:
         9e:26:fb:b1:e5:fa:1b:ac:87:3e:54:fe:d8:e3:34:94:d6:3d:
         9c:9c:fe:49:48:01:7f:d2:ab:8b:8b:05:35:55:32:21:18:24:
         0b:05:18:f6:50:8a:8b:81:7e:01:ff:4d:8f:9b:38:19:69:16:
         7c:83:d8:26:d1:45:1c:32:5a:c8:cb:8e:dc:8f:88:63:50:c5:
         e1:82:49:59:cd:24:9b:20:bd:2f:d7:65:c2:b4:d0:7c:d8:46:
         dd:1b:3d:35:e8:37:81:f9:c6:a4:d9:4f:39:fd:5d:cb:3f:e8:
         2c:b1:cf:de:0c:b4:9a:1a:01:29:21:08:36:9d:dc:60:bc:0d:
         8c:66:34:60:01:7a:2c:bb:f8:34:b0:2c:73:71:89:7e:06:e2:
         f8:59:e3:41:3b:17:fa:15:1b:b5:df:17:60:2d:82:20:1f:6f:
         b6:2f:92:b4:f0:72:64:53:a1:9a:1b:bd:27:34:11:58:59:70:
         cc:ad:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:24:41 2024 by rpki-client on console-ams.rpki-client.org