Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/88e6957f-64d0-389f-bd52-5325b53c0682.roa
File:                     88e6957f-64d0-389f-bd52-5325b53c0682.roa (raw, json)
Hash identifier:          vCQu3tnrIqe/Fn4hvFQLNsb+bgxFI3O/6Q7ftHgBuCU=
Subject key identifier:   E5:72:E0:52:A2:81:AE:0A:F3:7B:F1:06:26:B3:3B:3E:77:7E:02:01
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285846F5984B9DA283FEFB8633A5D8
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/88e6957f-64d0-389f-bd52-5325b53c0682.roa
Signing time:             Thu 22 Aug 2024 09:52:55 +0000
ROA not before:           Thu 22 Aug 2024 09:52:55 +0000
ROA not after:            Wed 20 Nov 2024 10:52:55 +0000
asID:                     174
IP address blocks:        50.7.22.0/23 maxlen: 23
                          50.7.240.0/23 maxlen: 23
                          66.90.102.0/24 maxlen: 24
                          67.159.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f5:98:4b:9d:a2:83:fe:fb:86:33:a5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 22 09:52:55 2024 GMT
            Not After : Nov 20 10:52:55 2024 GMT
        Subject: CN=1c7c7348-e5cb-40b0-931d-1f57c85df480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:23:3f:2d:6e:a7:d6:4d:7c:df:b3:a6:00:
                    c4:23:c6:f6:c8:34:0b:b2:a3:8c:af:37:73:02:2b:
                    d2:01:1e:13:5f:b9:a4:83:0c:65:be:4a:e3:70:03:
                    35:fa:2e:6e:46:5b:5c:f4:bf:70:43:ee:0c:70:8d:
                    c0:fb:99:fa:8b:9d:85:31:f7:91:76:2d:46:0d:23:
                    c3:3f:19:73:fd:f0:af:1d:24:aa:72:7e:1e:78:50:
                    79:53:5b:c0:96:7d:ee:ee:ac:16:65:77:65:a3:53:
                    55:27:25:1f:ee:19:96:23:d6:42:08:73:b6:49:23:
                    5b:93:e3:60:fa:cf:ee:d9:16:02:52:6b:64:8a:24:
                    b0:33:1d:02:8f:1e:f4:7d:7c:55:20:8f:fb:91:3e:
                    f9:70:02:41:23:42:ff:4a:44:64:1c:d3:f1:d9:3b:
                    b0:ff:9c:99:9f:18:86:58:c3:8a:9f:b7:22:9f:04:
                    14:60:ac:38:6b:aa:10:f6:d6:1b:4b:5d:26:34:f6:
                    59:0c:49:59:1c:00:45:c3:87:25:63:42:3e:13:88:
                    99:33:24:7b:2f:45:98:4b:41:a5:94:6a:4d:93:20:
                    0f:32:2e:39:f1:5a:79:e7:19:e8:8b:8a:cd:f1:c2:
                    b6:ce:0c:10:88:a6:72:82:54:f3:0c:93:f1:7e:99:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:72:E0:52:A2:81:AE:0A:F3:7B:F1:06:26:B3:3B:3E:77:7E:02:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/88e6957f-64d0-389f-bd52-5325b53c0682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.22.0/23
                  50.7.240.0/23
                  66.90.102.0/24
                  67.159.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:16:b4:16:a9:7b:23:f7:89:f9:19:ca:1d:17:dc:90:b7:
         db:61:5b:95:b0:e0:f3:b8:52:65:ef:db:35:e3:2e:42:60:95:
         cc:44:42:b3:ba:76:9f:ef:d8:b3:30:9a:45:43:44:26:a4:40:
         d6:b1:b1:93:33:92:fa:3a:54:6d:33:a5:d1:0c:f2:da:83:2b:
         4c:37:ff:34:ed:41:4e:a3:0c:23:5e:3c:f6:7a:25:7c:d4:91:
         3e:1f:f3:44:84:96:9b:f3:0a:f1:30:61:82:d7:11:77:48:e3:
         23:bc:47:4e:af:ce:17:01:90:83:be:88:f3:53:8d:5e:c3:81:
         87:8a:07:14:87:69:e5:44:4e:bb:b2:6b:bd:e7:8c:d8:01:8e:
         5c:5e:31:67:2f:d1:86:cb:35:13:51:5a:fc:95:aa:09:15:c0:
         c0:60:09:4c:3d:6d:63:f7:76:59:7d:de:bb:89:80:8a:af:9c:
         01:b4:cb:7e:76:34:7b:bc:5c:1d:85:69:48:33:7d:ed:03:c0:
         1a:0d:35:6a:74:f3:e2:2b:f4:14:c6:6f:4b:a9:c6:48:30:01:
         a3:c0:2c:79:bc:0e:9d:d1:e4:f7:2e:26:bd:2a:a5:53:33:50:
         b3:5d:7e:c7:f1:2e:8c:75:7d:dd:e8:39:05:f6:31:98:31:11:
         89:f6:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:24:47 2024 by rpki-client on console-fra.rpki-client.org