Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bbfed676-88c1-3941-8f6b-adaae3f41d24.roa
File:                     bbfed676-88c1-3941-8f6b-adaae3f41d24.roa (raw, json)
Hash identifier:          JWl0ZE4AskmWyb938rj9NEF3obDYHYf7sDD+hsOLEQs=
Subject key identifier:   4F:90:F5:50:89:D1:DF:F9:2B:D0:C2:22:87:C5:03:BD:9F:4F:33:5E
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285844F035437CB9870DE446728B20
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bbfed676-88c1-3941-8f6b-adaae3f41d24.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     32780
IP address blocks:        209.126.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:43:7c:b9:87:0d:e4:46:72:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=46df333f-2c78-4815-b0d5-04f99976cdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:dc:89:b2:d4:1e:76:03:d6:cb:b3:c2:fe:
                    36:58:33:b4:00:d5:10:82:62:15:b2:16:34:de:e6:
                    ff:c2:71:b5:b8:9c:12:11:a1:d1:9a:89:8c:e0:16:
                    93:03:a9:cc:a9:1e:51:64:1a:67:7f:7a:19:40:f3:
                    fb:7a:f7:ff:e1:de:e9:eb:5c:c4:8c:4e:d9:ff:65:
                    3d:d6:ec:93:2d:20:36:49:44:a3:3e:f4:55:e2:68:
                    2f:cc:ff:82:0e:ab:1c:69:a0:db:f2:03:39:1f:a8:
                    f0:2b:69:c0:1e:30:30:71:9b:76:c3:ef:0f:36:f9:
                    35:da:6f:e7:83:87:86:ec:98:94:c2:57:c7:d4:10:
                    46:ad:68:fb:3c:7f:21:f0:96:38:3a:63:ff:ae:0e:
                    25:89:b4:73:44:87:b8:be:49:86:a3:4b:68:ad:47:
                    73:00:57:04:d8:a4:36:6a:d9:25:7e:ea:a3:88:35:
                    c6:c4:6e:9f:fb:76:fd:47:e5:22:b5:e8:03:32:5f:
                    c7:06:ce:87:d8:17:e3:d4:60:ba:47:ad:0a:0d:b9:
                    e0:40:9d:13:83:54:f2:e3:e3:9f:73:3b:18:7e:fb:
                    f0:a7:0c:ef:b1:57:62:7b:69:b1:70:f5:1c:f0:31:
                    f5:c9:e5:44:f3:69:c3:21:13:d9:56:cb:63:1e:ae:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:90:F5:50:89:D1:DF:F9:2B:D0:C2:22:87:C5:03:BD:9F:4F:33:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bbfed676-88c1-3941-8f6b-adaae3f41d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:17:bc:8d:83:05:c5:64:31:dd:e8:5b:cd:d5:61:9d:67:
         36:09:37:88:8b:c2:e1:b0:cb:d6:0a:6f:12:d5:87:6f:be:ac:
         d9:e5:78:68:85:d3:ba:b1:12:57:cc:0a:4e:92:dc:56:c7:dd:
         3e:8b:77:68:53:7a:50:68:e4:19:cc:b8:76:cd:e3:5f:4e:36:
         2c:79:32:27:54:d0:c4:8f:57:cd:d5:28:de:8c:b9:a0:e5:6d:
         d4:74:76:6a:95:61:df:c3:2e:1d:c7:f2:ba:d8:06:14:01:79:
         32:05:d2:54:86:22:d8:1a:7b:0a:5c:6a:e7:ed:71:9f:3d:a1:
         83:34:71:74:ec:f5:f3:49:ca:35:55:f1:d3:5a:3a:b8:20:5d:
         de:36:f8:bb:ba:3d:d4:03:4f:39:cb:59:3b:40:04:e9:e3:06:
         0b:f4:56:91:27:87:e4:34:46:22:d6:81:4d:c7:ca:26:b3:81:
         27:15:f7:d3:bb:c1:00:57:18:15:ec:70:1d:a7:a0:10:e1:03:
         c0:5e:2e:f3:39:4f:70:50:f6:87:c1:27:f7:a0:7a:6d:7e:f0:
         d1:ab:82:1a:24:8e:de:08:d6:b0:9e:21:78:1a:db:71:e6:c8:
         31:b1:b0:79:d3:64:45:86:26:dc:c4:36:73:85:c6:42:34:9b:
         43:17:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:03 2024 by rpki-client on console-ams.rpki-client.org