Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
File:                     5e0a4b4d-6867-3931-a668-268f7f2e4994.roa (raw, json)
Hash identifier:          KaFsC3e6NWHUVLNGH6PCNoKveetD0sPLucUzVTqwpwI=
Subject key identifier:   E0:3E:81:50:52:E3:6B:F6:69:CF:8B:3E:AD:14:6B:12:57:26:5B:13
Certificate issuer:       /CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72
Certificate serial:       010D0C9F4328584510502FA5BE618DD91118AB00
Authority key identifier: 67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        88.218.35.0/24 maxlen: 24
                          188.241.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:2f:a5:be:61:8d:d9:11:18:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=22757333-7a96-48b8-a059-6209f24e7612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:cd:01:6b:7d:41:15:ec:aa:66:ab:68:db:
                    67:90:9c:c0:87:44:ab:cf:5b:a1:4c:ed:40:10:b0:
                    31:c5:0b:ee:22:0f:95:71:27:7c:57:4e:46:24:ae:
                    4d:ae:77:bf:f8:ef:2c:b5:fc:83:43:81:08:26:ce:
                    0e:16:15:59:95:c8:bb:63:3a:18:27:db:30:eb:e6:
                    31:1d:31:26:e2:84:87:34:b0:cb:d3:3d:2f:33:00:
                    6e:0e:55:e1:24:f1:58:31:fd:7b:06:4c:44:f1:2c:
                    aa:ac:51:c6:32:bb:57:ea:2c:3f:ee:69:98:5d:3b:
                    a1:67:9c:61:5e:c4:e9:4e:58:04:92:a4:84:54:d7:
                    08:63:67:ef:95:40:2c:fb:80:5d:db:e4:17:ce:16:
                    21:67:13:07:68:87:ac:3e:7f:27:97:55:cc:be:c1:
                    11:3b:3f:87:dc:bb:fe:4c:29:f2:db:1a:f8:24:0f:
                    01:e6:6d:ab:d4:7a:b8:7d:4f:98:d1:84:ab:a0:b8:
                    54:c1:ac:22:ab:d8:6b:99:74:48:2e:a4:77:b6:06:
                    5f:84:3a:d2:f2:54:e8:f2:a5:de:05:5d:c6:e6:50:
                    8f:5a:38:4a:14:d7:a7:91:0e:6f:14:30:65:6b:85:
                    24:87:18:16:e6:22:e7:36:a3:96:33:b3:8a:43:91:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3E:81:50:52:E3:6B:F6:69:CF:8B:3E:AD:14:6B:12:57:26:5B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl

            X509v3 Authority Key Identifier:
                keyid:67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.35.0/24
                  188.241.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:db:f4:f7:b9:bc:89:ce:ad:76:6b:4b:e0:d0:04:f8:97:cb:
         2f:f1:e6:b7:82:3d:c7:ed:28:ee:66:11:71:ee:3b:1c:e5:73:
         49:74:77:a2:a8:a9:4b:19:cc:e8:2d:7d:b1:2a:09:3a:31:8f:
         87:bd:53:1e:e9:be:c5:d9:c1:fe:18:1e:29:87:19:31:ae:e1:
         49:94:32:7c:f4:be:17:21:67:bc:ef:a8:fb:00:e4:fb:8a:9e:
         d0:1b:1d:13:34:b9:84:7b:bd:f5:9a:d8:e5:0e:0a:0f:56:cb:
         84:4e:74:9d:70:c7:e1:cc:83:d4:43:72:50:38:ff:66:de:76:
         9b:6c:ee:cb:20:18:f3:7f:ae:42:41:0a:31:71:a6:5c:23:31:
         41:c5:71:e3:17:05:d9:c3:44:ae:63:0a:86:f7:07:3d:36:21:
         60:58:0c:a2:53:fc:8b:31:5c:0e:87:2b:76:09:5c:c5:da:d1:
         fc:97:f1:52:cd:b7:5e:2b:b0:7c:58:56:d5:86:d7:cd:27:b6:
         e3:67:48:f7:43:3f:7a:1b:71:03:f6:5a:af:dc:ee:4e:b2:92:
         c6:cb:81:2d:58:c5:07:cb:36:ce:a6:94:b3:74:6b:ac:eb:26:
         48:af:55:c0:29:19:42:d0:41:c6:27:07:b8:92:22:43:7d:b2:
         7b:10:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:58:12 2024 by rpki-client on console-fra.rpki-client.org