Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
File:                     f0fef11b-fd18-3aa2-8573-f66dbff15626.roa (raw, json)
Hash identifier:          bdLE1HQQtqP0w8fVhXzZ9JKhEUX1X5d7281//aufvxA=
Subject key identifier:   2D:BF:31:BA:18:37:E8:76:60:B2:D8:16:BE:78:58:A7:67:0F:63:53
Certificate issuer:       /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial:       010D0C9F432858455498284DE64A8FDF19446400
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     18615
IP address blocks:        147.160.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:28:4d:e6:4a:8f:df:19:44:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=294b0b8c-ca8c-4fe8-aa1e-a84898a0917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:b2:93:18:60:77:81:ec:b9:55:34:1b:ad:
                    b8:fc:d5:b8:2d:a9:0c:1a:72:c9:e1:c9:bb:2b:76:
                    0e:a8:4d:36:64:bb:81:77:f9:8b:33:e6:83:25:22:
                    d7:57:49:01:86:bc:dc:f4:53:7e:b9:b0:6d:10:6a:
                    81:cf:89:6e:e2:3f:dc:65:c1:1d:00:38:c9:1d:8e:
                    1a:dc:92:84:cc:f9:cb:c4:2a:15:aa:37:93:46:17:
                    6a:87:59:f0:48:7e:b6:09:20:dd:83:b0:f1:06:74:
                    86:c1:3c:61:6c:cc:67:bd:ee:5f:02:14:26:2a:08:
                    9e:10:0b:b1:ed:34:98:fb:8f:eb:79:72:cd:27:46:
                    9f:d4:c3:6b:71:42:67:32:14:9e:2d:c6:74:d7:c2:
                    ae:2d:47:9f:bb:44:94:9a:3a:96:14:30:74:72:b1:
                    30:26:62:26:5c:c8:72:62:a0:cb:b8:86:43:c7:57:
                    e3:80:58:83:69:01:68:e7:38:40:25:cd:8a:83:11:
                    c6:f8:4d:09:7a:4c:83:c2:7f:14:87:1a:a4:4e:d2:
                    d7:e2:1a:23:08:5b:bf:41:0f:8d:29:dc:50:73:73:
                    13:d6:4f:dd:53:c7:40:e6:e7:e8:d6:35:d2:84:d1:
                    8d:5d:b0:38:1d:95:43:78:be:1d:ce:75:02:f6:e8:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BF:31:BA:18:37:E8:76:60:B2:D8:16:BE:78:58:A7:67:0F:63:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/f0fef11b-fd18-3aa2-8573-f66dbff15626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl

            X509v3 Authority Key Identifier:
                keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:16:41:6d:50:0e:99:51:e9:ae:e5:c5:b7:d0:0a:0f:d3:3a:
         25:66:59:f7:89:35:df:9a:3d:60:a5:58:15:fd:d9:5e:ff:10:
         60:f3:e6:90:28:4b:6a:e4:cc:ee:6c:2f:9f:6f:05:30:02:ab:
         7e:3f:ee:e1:db:91:e0:4c:aa:50:42:f0:00:d4:71:cc:2f:88:
         62:4a:c4:d8:1f:52:6e:ce:53:bd:de:12:36:7e:76:bb:3e:44:
         b2:e2:27:a0:a1:9e:0d:6b:3c:67:f1:c0:91:77:bd:05:0c:e8:
         1f:b1:a4:a7:32:b4:c8:8a:3f:26:ec:c6:de:08:8c:45:ac:f1:
         aa:5a:5c:02:8e:c4:31:3d:13:d4:de:e3:51:0c:33:f7:2a:9f:
         2e:8b:03:f7:08:20:e0:ad:8f:e4:d3:00:6b:48:b7:4d:96:5b:
         a6:a5:a8:93:17:c1:c7:26:46:e8:23:01:ea:33:ea:d1:54:40:
         65:de:21:64:d2:ab:c4:b3:c0:6a:87:fc:e6:af:58:b0:0b:07:
         c0:e1:5b:fb:c4:a6:58:9e:07:a3:3b:37:13:96:20:a1:60:3d:
         1a:fa:9d:21:3c:80:bf:14:11:0d:2f:b3:a7:ee:33:1f:7a:0e:
         5c:31:41:e2:59:7b:47:ef:b4:3a:9c:0c:45:80:ba:f7:f1:9c:
         91:c4:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:51:54 2024 by rpki-client on console-ams.rpki-client.org