Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
File:                     b737c496-4672-34aa-b061-ed83ae9c485f.roa (raw, json)
Hash identifier:          UzZ8Lgz95hn18ZPJDbqzHvmO8rnvXyFQUAAmAt7WjN8=
Subject key identifier:   E7:C8:DF:EC:91:1C:FA:35:F7:39:47:B9:28:C3:51:71:29:FB:9A:0A
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F43285845B21E26A0E8853C673180E680
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        155.63.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:26:a0:e8:85:3c:67:31:80:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=cff65271-718d-4d94-ac21-ea1888284f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:49:8a:bd:f3:9d:ad:7a:40:91:6e:da:c1:6f:
                    c7:6e:46:53:58:e0:75:6a:2f:45:e3:8c:52:9d:f9:
                    cd:0e:a5:78:61:5e:dc:b3:a5:d7:e2:f6:ea:9e:c8:
                    61:3d:8b:1b:8c:18:0d:bd:20:49:6b:bc:d5:16:df:
                    ba:ad:04:2e:1f:66:7e:ab:ac:18:0b:f9:63:5a:94:
                    d8:de:40:d1:73:9f:30:aa:3a:db:fc:95:0e:10:53:
                    94:2d:50:0e:f8:90:06:53:2f:65:bb:63:44:6b:73:
                    8d:a7:7c:91:d5:be:4c:18:01:8b:21:a3:94:42:1a:
                    4a:84:99:22:c0:49:f2:0a:77:f2:60:98:24:76:16:
                    c7:95:9f:cf:55:38:63:3d:a5:36:2e:af:2a:fb:34:
                    5a:42:55:a4:23:96:8b:1d:cc:ae:1a:a4:7e:8f:da:
                    d6:54:92:7c:22:2d:bd:29:e2:c5:54:ae:a9:a2:33:
                    dd:49:3d:83:b6:46:3b:34:8d:dc:9b:b5:8f:23:4f:
                    e3:2a:16:c1:d6:a6:a3:b1:36:a3:f6:2c:76:42:43:
                    bf:d6:d6:c7:1c:71:30:d6:43:2e:d8:bb:d4:36:1b:
                    c8:49:50:18:40:d7:60:12:cc:51:72:7c:f0:4b:33:
                    b5:8c:02:e5:a3:58:ac:7c:bb:81:99:7b:68:90:d6:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C8:DF:EC:91:1C:FA:35:F7:39:47:B9:28:C3:51:71:29:FB:9A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/b737c496-4672-34aa-b061-ed83ae9c485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:f3:5c:37:3e:86:25:79:8a:8d:0b:56:05:f2:2c:88:1e:
         7c:e7:2f:2d:b7:7c:d1:03:34:d6:0c:08:85:14:5e:22:b0:ce:
         f2:8a:e9:42:63:1f:6a:20:20:ab:de:c2:ef:e0:58:71:81:67:
         97:05:f9:f8:9a:e6:a2:0e:1f:1e:2e:75:9d:79:f6:84:6c:f5:
         ff:0f:17:20:ad:d0:09:46:1e:42:2d:af:cc:a2:8f:8b:bb:56:
         3c:0a:f7:58:14:52:24:4a:08:40:dc:1a:dc:5a:11:42:62:52:
         f7:57:87:03:84:50:4d:a8:a7:98:78:04:b4:78:7f:59:c3:25:
         92:92:aa:7d:31:2c:9f:e6:63:f8:75:09:19:13:31:b0:e2:2c:
         e1:d3:fb:3d:f4:63:24:29:9d:23:18:9a:2f:a9:ac:96:68:61:
         13:dd:57:0e:d5:de:47:f8:23:ab:cd:3c:c7:2f:b6:ae:0c:d7:
         e9:6a:4c:34:00:78:6b:a4:c0:cc:a5:a0:e7:39:75:3d:f4:88:
         8b:e4:07:bd:7f:7a:2d:10:35:f5:0b:b3:46:97:1b:0a:23:61:
         60:36:c4:b2:eb:18:f0:26:d5:b0:8f:96:c9:6d:de:bf:81:8a:
         21:f5:46:8d:09:2d:0a:68:a8:20:7b:d0:c1:c3:84:10:7c:73:
         c1:c4:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:25 2024 by rpki-client on console-ams.rpki-client.org