Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8758b092-0c2f-3a8e-9cd7-bf903ba75a5a.roa
File:                     8758b092-0c2f-3a8e-9cd7-bf903ba75a5a.roa (raw, json)
Hash identifier:          UAegtDrVumIOYIxSPTdslCSaS/shP8CKMTF4KtSR91c=
Subject key identifier:   5C:CB:E8:95:1C:F7:4C:CF:73:31:73:60:EA:1F:96:1F:86:D7:06:3E
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285846662F2911068609617A2C48E0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8758b092-0c2f-3a8e-9cd7-bf903ba75a5a.roa
Signing time:             Tue 02 Jul 2024 01:00:24 +0000
ROA not before:           Tue 02 Jul 2024 01:00:24 +0000
ROA not after:            Mon 30 Sep 2024 01:00:24 +0000
asID:                     14956
IP address blocks:        167.88.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:66:2f:29:11:06:86:09:61:7a:2c:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul  2 01:00:24 2024 GMT
            Not After : Sep 30 01:00:24 2024 GMT
        Subject: CN=f424c673-6bfd-456c-9033-1c4e3d4e2e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c2:b3:cc:c6:38:92:b5:66:f5:5c:e2:69:4a:
                    29:fb:8f:6b:5f:19:dc:68:f8:bc:94:96:a8:34:7d:
                    5b:9d:3d:8c:eb:7d:4e:5a:95:30:6e:0f:69:7f:14:
                    f8:3f:76:de:f1:14:4c:de:4c:ab:51:b7:79:22:8f:
                    5e:f7:c1:fa:1d:5a:c7:cf:a9:7d:c5:6d:16:a8:3d:
                    fc:47:45:74:dc:b8:e5:1d:60:9e:c2:d7:d2:a0:ba:
                    41:84:11:5d:3f:9c:b6:68:65:d7:01:27:59:a3:56:
                    96:99:c5:20:70:9b:28:d1:9e:ba:9e:53:71:0e:78:
                    6d:50:14:c2:34:09:03:c2:27:c4:b1:9f:ed:39:e0:
                    d2:1c:6e:f7:75:ac:9e:d1:19:cb:3a:63:c5:77:83:
                    9b:51:20:99:31:4a:f6:92:94:0c:14:cb:4d:a8:ad:
                    c2:ca:d1:f7:42:24:5b:47:f7:ae:56:b7:bc:3a:24:
                    b9:1d:01:9f:d0:5b:da:61:63:df:02:69:9f:3e:4a:
                    89:c7:06:15:0b:0e:fc:16:d7:30:84:3f:a7:12:19:
                    43:73:28:6d:31:ae:8b:5b:9f:3c:30:07:15:cf:ad:
                    6c:b7:44:c3:5f:f1:04:97:ba:11:e7:96:45:df:a1:
                    62:8a:74:81:5c:07:d6:09:4d:5b:38:70:44:f7:ab:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CB:E8:95:1C:F7:4C:CF:73:31:73:60:EA:1F:96:1F:86:D7:06:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8758b092-0c2f-3a8e-9cd7-bf903ba75a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:20:b1:08:c1:13:36:63:b0:01:88:fb:6d:16:19:70:66:b1:
         c3:05:19:3b:e1:50:8b:41:09:87:64:55:13:0f:16:54:1f:89:
         44:e6:f7:20:aa:9b:f3:76:78:80:d2:2a:bc:e6:d9:67:9f:d4:
         72:99:55:84:79:45:72:b1:66:66:39:5b:ec:30:48:bf:80:20:
         b4:56:6f:4e:55:8f:87:16:3d:03:e9:72:5e:c6:a8:34:68:5c:
         92:1a:5b:11:54:3e:a5:b8:8c:06:cc:a6:86:05:46:41:48:88:
         87:16:8d:70:5c:f3:1c:ef:aa:bd:1b:8f:b3:36:d8:76:21:97:
         02:28:a1:2b:b3:52:f4:e5:81:9e:17:0d:36:a1:52:7f:3f:be:
         7e:ed:94:00:37:d2:dc:b3:ab:cc:16:48:fc:a7:15:b4:ad:4b:
         ea:e1:61:6d:3d:b0:66:17:7d:c4:21:49:25:3e:8a:8e:82:cb:
         3a:a0:c7:fd:bd:97:d9:d5:fa:1e:e6:90:6f:ce:8c:d8:9f:6a:
         1b:79:5b:89:27:43:c0:f3:3f:4f:2e:61:4a:84:9a:44:ef:a6:
         57:dc:62:a5:55:a9:a5:0f:56:c6:0c:59:f7:c4:57:74:ab:5a:
         c1:c2:56:cb:30:26:80:72:c6:09:6f:f6:bd:5a:76:18:11:5e:
         a3:d8:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:00:59 2024 by rpki-client on console-fra.rpki-client.org