Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa
File:                     ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa (raw, json)
Hash identifier:          QWIKotjbrmBxXLXjkgegvds3BReUME86iAXn1efPbCY=
Subject key identifier:   D7:62:D2:5B:82:5A:3F:28:BC:03:44:A5:27:5C:44:25:A9:79:7C:BF
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285845AF53683AB2C778107FC34D40
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        85.113.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:68:3a:b2:c7:78:10:7f:c3:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=1c2fdb5c-7f74-46a7-b605-062b2688d34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5e:49:b9:ad:5f:8d:e0:be:67:9c:07:a0:81:
                    3f:8b:89:8d:f4:82:25:9a:13:f6:47:27:6e:41:f9:
                    d6:5f:26:19:5d:c5:6e:62:14:b7:c3:55:80:81:ed:
                    de:30:56:33:42:05:99:cd:75:4c:9d:a7:a2:9d:1c:
                    d0:be:e0:64:20:13:0b:92:e0:73:d6:04:d6:63:97:
                    11:75:3d:20:cb:4a:09:15:80:64:eb:e6:61:f2:71:
                    ec:54:09:71:d1:0c:6e:e5:4e:65:e5:55:8a:c2:24:
                    ad:4a:ef:d9:f3:0f:7d:26:67:40:1a:1b:ad:85:50:
                    3d:99:40:93:81:05:97:2e:1c:22:9d:c3:df:5e:e4:
                    3a:b9:79:95:e7:89:2a:cb:fe:d5:02:05:2f:f8:95:
                    5d:3a:85:ff:d6:fb:1d:69:84:1f:48:65:28:43:b8:
                    6a:c6:c8:8b:b3:db:aa:82:cf:bd:fb:7f:79:44:af:
                    fd:12:50:fe:2d:32:57:46:6b:19:d1:20:73:68:0a:
                    36:b4:8d:73:5d:6e:44:89:8d:21:8a:5e:26:6e:24:
                    c5:8a:c2:89:63:cf:de:68:61:b4:17:bf:8d:a1:71:
                    06:36:b0:dc:f4:02:69:a9:b9:c1:01:9f:c8:4f:0c:
                    32:48:68:26:40:a5:fa:f6:d0:c8:b0:3f:8e:cf:8d:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:62:D2:5B:82:5A:3F:28:BC:03:44:A5:27:5C:44:25:A9:79:7C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:1f:65:1d:9e:b9:ae:c7:70:d9:04:b0:d5:ab:31:70:f1:
         e2:08:fe:c3:86:a6:a4:3f:08:ac:14:49:fd:0f:79:18:f0:ca:
         41:29:f9:9c:a0:22:ae:a0:35:28:b9:8b:53:97:96:6d:a7:80:
         99:ac:c8:a7:12:f5:e1:26:68:32:06:82:1c:f1:8b:da:35:99:
         39:9a:0c:8d:74:cd:df:4d:d0:5c:17:b7:80:64:b2:c5:40:ec:
         f7:1c:36:03:68:d9:fd:44:95:18:1a:2f:9f:2c:07:cc:ed:bb:
         2b:72:b2:e7:20:40:73:9d:90:4f:f5:b0:e4:fb:cf:75:0d:b8:
         98:45:89:73:61:29:e2:58:76:37:f7:9c:de:6d:77:d9:1f:db:
         9d:8c:89:51:ee:b3:ee:45:7c:9d:b8:d3:84:b5:15:97:34:30:
         cb:cd:5a:3f:0d:86:c9:2d:aa:f6:fc:b6:9f:a1:4f:37:21:f0:
         60:5f:9e:2d:43:c3:8b:ac:ab:10:e8:74:8c:11:1e:8e:a4:ff:
         98:72:7a:8f:ad:de:2b:93:d0:5e:9a:00:65:b3:b1:9b:46:b1:
         de:ac:24:89:a2:a4:a1:0a:29:68:95:05:29:e6:84:15:68:6b:
         c4:e4:f1:12:dd:cb:eb:7b:32:00:04:59:28:e3:d7:18:5c:26:
         f0:a0:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:11 2024 by rpki-client on console-fra.rpki-client.org