Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa
File:                     c84238dc-4927-30ce-80e8-d4213dd4be12.roa (raw, json)
Hash identifier:          x+pyRiXIKtRXRoOdzgNFLVmT1Z87YFd2NtfGOm1+42o=
Subject key identifier:   0E:08:37:B2:8B:BA:D2:96:55:51:88:1C:90:6F:04:B0:9A:11:38:CF
Certificate issuer:       /CN=fb8e9f00-13c9-406e-9c03-d71cd386c086
Certificate serial:       010D0C9F43285844FF901D6C122BD62B9A518A40
Authority key identifier: 88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        198.89.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:1d:6c:12:2b:d6:2b:9a:51:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8e9f00-13c9-406e-9c03-d71cd386c086
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=c10cc20a-97c1-483a-b23b-d5f66ad821c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e3:f9:cf:c0:46:6a:a7:1a:99:58:b0:fd:56:
                    7a:0b:dc:d4:95:50:47:1b:e4:f3:dc:1e:82:f8:1d:
                    c0:6f:53:fe:a7:6d:f9:65:d2:f1:cf:a7:65:3d:3b:
                    70:e1:d1:c0:d5:7d:58:0d:dd:b9:c1:4a:43:c7:33:
                    03:a4:76:b7:26:34:47:4b:94:e6:45:48:30:13:65:
                    e1:6c:c5:8c:63:51:2d:80:9a:27:b4:96:11:57:41:
                    d5:e8:d1:88:43:9b:1b:fc:7b:80:6a:c9:0f:dc:30:
                    eb:2d:36:76:ba:0a:04:9a:f5:e0:ed:38:df:76:cf:
                    97:38:7e:3f:e0:21:a0:85:60:2c:4b:12:ab:bf:b6:
                    db:69:08:40:3b:50:90:28:3a:3d:99:20:09:9b:0c:
                    6f:67:5c:af:46:51:59:91:06:a7:cf:ad:91:a0:a9:
                    ed:e9:80:e9:93:92:4d:e3:84:68:a2:be:d9:82:ef:
                    51:07:76:c1:28:0a:c7:09:1a:ad:85:2d:33:dc:4e:
                    c9:41:bd:5a:73:2a:36:cd:27:14:cd:68:48:7d:18:
                    7f:5e:37:90:fd:5d:6c:24:0b:a8:ab:e6:cf:25:68:
                    28:fa:60:e9:95:ab:69:79:63:a5:de:61:da:02:2e:
                    e8:11:9b:74:e3:2e:d7:42:99:27:9e:b3:d8:2b:ba:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:08:37:B2:8B:BA:D2:96:55:51:88:1C:90:6F:04:B0:9A:11:38:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl

            X509v3 Authority Key Identifier:
                keyid:88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:0b:fa:4f:1a:3f:d4:66:c2:e5:de:7b:d1:90:91:5e:95:
         68:81:b9:46:6f:e0:fa:47:22:5e:58:46:28:86:fb:23:88:1c:
         93:4f:75:89:f9:bf:b6:d4:94:4d:2b:a6:fc:08:97:1d:18:e4:
         18:e9:ef:73:45:cc:18:48:62:15:fb:2e:04:1a:06:56:8b:6e:
         39:94:35:d0:05:36:90:3f:e2:98:98:64:a4:ba:33:d4:76:ea:
         21:f0:b1:66:4e:e5:2e:5f:10:92:78:60:31:64:f2:55:ad:55:
         29:5b:77:00:13:0a:42:32:e3:f1:f8:fe:4d:14:fc:c8:9b:23:
         c1:65:84:17:01:ca:0c:b7:e4:5c:50:2d:1a:18:9b:ed:ce:62:
         43:01:04:d3:ee:57:bd:16:ce:ad:d4:f9:09:ac:d6:76:28:74:
         7f:c9:0d:bc:ae:12:93:a3:b1:9f:08:fb:c3:00:09:8f:2d:e7:
         da:60:79:22:d7:83:59:c7:73:00:d2:ad:b3:08:21:76:89:c9:
         a8:81:9a:ce:56:7e:d5:83:10:f6:2d:e3:64:36:d9:dc:b9:7c:
         ab:90:87:75:35:15:09:3a:2f:4c:a6:96:22:1c:03:f2:e8:06:
         7b:02:27:e5:c1:ec:83:15:ec:5b:25:22:0d:96:cd:6c:a2:dd:
         12:b1:b1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:06:28 2024 by rpki-client on console-ams.rpki-client.org