Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
File:                     5e0a4b4d-6867-3931-a668-268f7f2e4994.roa (raw, json)
Hash identifier:          Re+MbXXfSBiFI2rK+88wq1Osdkoa6ZXyv4sScKMkT5I=
Subject key identifier:   B5:9F:06:8E:4A:8F:26:04:A1:75:B0:09:7E:5B:D8:C8:51:86:67:46
Certificate issuer:       /CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72
Certificate serial:       010D0C9F43285847AE36BDED8EF4DCC5749AAD00
Authority key identifier: 67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        88.218.35.0/24 maxlen: 24
                          188.241.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:bd:ed:8e:f4:dc:c5:74:9a:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=432a4166-3f02-49b3-8311-7448a8f831a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:56:cb:30:59:60:53:9f:7c:c0:ed:70:7f:ac:
                    5d:1d:f6:20:25:32:91:72:d3:3c:bf:04:fc:fd:e6:
                    35:10:3c:2c:eb:32:59:24:6d:2d:89:e4:e6:e8:d1:
                    67:36:d8:df:d4:2a:1b:4e:21:64:0e:39:e0:28:ee:
                    17:44:3c:58:2e:0f:35:41:85:91:8a:cb:9e:22:17:
                    62:8d:2b:1d:26:1f:55:4d:8e:4c:31:41:f8:26:37:
                    68:32:7a:23:f8:32:b6:da:c6:44:9a:2a:37:42:ec:
                    e5:72:30:82:ea:ee:ac:9e:ce:ee:87:00:76:21:d7:
                    14:5e:c4:d5:32:9f:44:af:37:ef:90:60:cd:cf:22:
                    6e:73:c4:ea:74:32:22:c4:d9:4f:e6:b1:52:cb:5c:
                    45:c3:3b:86:45:3d:3a:84:63:ae:e2:c6:cf:7e:c2:
                    2e:54:f8:54:3f:17:1e:2f:95:63:dd:13:c6:2e:5b:
                    74:d1:53:47:89:b6:ee:81:45:fa:72:91:b9:cf:7c:
                    1c:7b:16:a2:bf:ee:2a:f4:77:9c:04:a6:12:45:14:
                    59:3f:24:d8:0e:a0:bb:a7:e1:ff:88:21:7b:3d:b6:
                    4f:0b:82:01:ad:9a:9b:7d:50:a1:e8:ca:db:81:6b:
                    00:81:86:18:e9:df:0d:02:c5:a0:db:54:46:6a:a1:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9F:06:8E:4A:8F:26:04:A1:75:B0:09:7E:5B:D8:C8:51:86:67:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl

            X509v3 Authority Key Identifier:
                keyid:67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.35.0/24
                  188.241.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b8:5a:d8:b6:06:d0:65:e3:47:b5:18:bf:8b:9b:f5:b1:9b:
         a8:68:52:62:0d:cf:8c:dd:23:f9:c1:02:3d:1c:27:36:21:35:
         44:ab:17:07:1b:33:89:d7:51:81:8e:a3:18:8f:81:cb:11:16:
         bd:1e:1d:2a:97:2a:7e:8e:93:2e:8a:65:62:59:9d:48:52:58:
         d9:fa:5c:e3:a4:73:66:ca:52:c7:39:4b:28:60:20:30:8a:a2:
         ac:0e:ca:1a:79:af:38:85:8f:d8:d2:36:41:0e:b7:77:57:5b:
         d1:86:a4:1b:e3:ce:e1:98:31:0f:24:9e:26:0f:45:52:69:63:
         1c:f5:58:83:d8:20:19:21:6d:89:b8:b8:66:c7:1f:c1:ad:8f:
         9a:bc:99:14:e8:c1:de:c0:42:bc:08:2a:6e:61:84:c9:4b:6c:
         e3:8d:df:9b:50:d4:be:2c:4b:23:ed:a5:fd:42:18:ab:96:ef:
         6d:a2:cc:bb:96:08:1a:df:43:fc:53:ce:ef:89:5f:ab:aa:0a:
         1a:99:60:3f:85:b2:19:70:be:41:57:c7:86:63:d9:7d:58:65:
         fa:c0:4a:be:7c:b4:e7:04:c3:88:e3:0a:11:76:90:b3:76:fc:
         fa:41:40:a0:14:b0:dd:27:ad:10:92:60:87:90:03:e1:08:5a:
         dc:24:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:07 2024 by rpki-client on console-ams.rpki-client.org