Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/43f7f746-df47-30c8-8d57-576ececff2a4.roa
File:                     43f7f746-df47-30c8-8d57-576ececff2a4.roa (raw, json)
Hash identifier:          y8Q4Igdh/XuyVOzJSMO4VzjXi5UnhGZ6v8ILaC/Lvfk=
Subject key identifier:   E7:73:D0:85:28:01:FE:07:9C:D9:8F:62:27:67:47:30:F5:0F:CB:FC
Certificate issuer:       /CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Certificate serial:       010D0C9F43285845D503C9F44436335C6831CF00
Authority key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/43f7f746-df47-30c8-8d57-576ececff2a4.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     1021
IP address blocks:        152.160.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c9:f4:44:36:33:5c:68:31:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=25fc6fc4-e15a-4c73-88d8-1465ab8d34d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ad:2f:20:08:5e:4a:e8:a8:16:79:e2:6a:d3:
                    0e:7e:a0:a6:e4:3f:c3:9e:a7:0d:30:f3:be:a2:ba:
                    24:60:17:72:bd:2d:31:9a:d2:b8:f3:30:9b:15:b2:
                    7f:c7:51:d4:4d:4e:5a:0a:64:a4:cf:ee:51:37:51:
                    91:aa:6f:1a:0f:07:77:64:1c:78:71:80:31:d1:9e:
                    8d:cc:7c:01:59:bc:f8:aa:05:92:d1:92:20:ec:04:
                    e4:89:bf:dd:e2:e9:3c:c1:0e:d3:0b:59:96:f0:bf:
                    82:e3:87:40:fd:ce:ca:c3:e9:77:be:15:bd:69:95:
                    3b:e1:fd:d9:71:31:1d:fe:f8:dd:33:61:9f:7a:a0:
                    b2:fa:4f:21:ed:ed:4c:ad:ab:13:cc:fc:55:9f:64:
                    ca:1a:2a:9b:72:a1:15:d9:56:44:db:2e:16:ee:5c:
                    cb:12:ba:fb:cb:e5:c9:f7:3b:28:2c:4c:69:27:2d:
                    70:35:81:32:3d:3f:86:12:ca:6c:dd:58:8f:e9:90:
                    4c:36:ca:9e:0a:31:62:71:d5:1e:0e:02:cc:7e:06:
                    bd:fc:50:65:c3:eb:19:69:28:f9:a1:68:78:c5:0c:
                    b2:a7:9d:74:bf:68:01:13:4b:9d:08:bf:c7:79:e7:
                    1a:f2:54:c4:c9:0d:ac:53:db:85:a6:60:46:eb:55:
                    21:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:D0:85:28:01:FE:07:9C:D9:8F:62:27:67:47:30:F5:0F:CB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/43f7f746-df47-30c8-8d57-576ececff2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl

            X509v3 Authority Key Identifier:
                keyid:A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.160.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:44:50:5d:fc:83:51:9f:7a:18:29:fb:08:01:82:a3:39:ec:
         2f:db:83:a5:24:a6:47:63:69:84:21:c3:47:b8:34:0a:47:eb:
         0e:ea:7f:78:c5:c1:7a:95:6a:7d:9c:21:25:06:e2:74:58:a9:
         f7:3a:ef:93:36:ff:d7:64:e7:ce:2e:97:fa:5a:24:55:d3:e4:
         15:06:95:ff:2f:00:4c:2c:51:ac:63:8e:e2:d0:d2:1c:79:23:
         4e:ae:cc:6c:c4:0c:1a:54:26:7f:38:ae:f1:1b:80:c5:1a:b3:
         c7:19:d8:81:d2:46:e2:49:8b:55:0e:0c:64:ca:66:5e:07:b7:
         3e:9d:24:a4:42:a4:62:52:6c:af:fa:b8:e6:8a:54:06:70:67:
         28:b0:e7:63:bc:20:32:88:b7:0b:17:63:10:d6:cf:94:4f:62:
         7f:58:f3:a0:d3:48:7a:4c:f5:4e:2b:13:2c:aa:69:17:9a:c4:
         7a:24:10:0e:10:e7:e1:01:46:d3:e7:3b:e1:c9:3a:e6:7c:39:
         53:60:e4:fe:0f:a5:9b:2f:41:18:0b:ad:d5:7a:e0:49:d8:a4:
         b2:f5:15:64:1a:67:ff:2c:f3:78:d0:bd:78:2c:3d:a5:fe:a3:
         1c:76:b0:53:9e:de:83:dc:08:b5:8b:b4:65:92:21:8b:ca:0a:
         e6:32:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:41:15 2024 by rpki-client on console-fra.rpki-client.org