Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d160875-a88d-343d-92d8-0936d69cc6d1.roa
File:                     4d160875-a88d-343d-92d8-0936d69cc6d1.roa (raw, json)
Hash identifier:          8k3a3xpzKkWVCv+T4W6mmpXezXBaN2ptQqBs/vsjKn8=
Subject key identifier:   8C:8F:D8:1C:3F:BF:0D:BC:9D:F2:F8:3E:F8:BE:F1:9C:30:1A:21:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC93EFF939E9EC2B5202A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d160875-a88d-343d-92d8-0936d69cc6d1.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        151.201.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:3e:ff:93:9e:9e:c2:b5:20:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=467ceaf1-f270-408b-bcc3-c6b689b9d074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:ef:65:65:46:c2:4d:c6:c1:9e:58:4b:2d:
                    9e:66:d2:b8:85:dc:cf:bd:9c:aa:31:62:1b:de:4d:
                    d3:e3:9f:7e:63:24:ee:f7:bd:c7:b6:01:2f:f2:75:
                    9f:a8:05:a0:fe:0d:06:d8:86:3d:a3:15:18:c7:53:
                    eb:df:d3:17:bf:a4:eb:f2:d3:0d:66:15:09:72:ad:
                    71:8f:37:58:be:ee:0f:be:07:1e:70:c7:c1:73:8c:
                    d8:35:67:e4:2c:e9:8d:e6:f8:05:22:4c:71:d5:e6:
                    7a:7d:a2:49:08:d6:ca:9d:b8:3c:d5:67:83:a1:c3:
                    44:1f:44:19:a4:23:e1:38:8e:ef:4a:d9:41:b2:b3:
                    86:2e:43:51:87:c0:ec:9a:32:70:00:15:58:f1:ed:
                    b5:49:66:a3:d7:94:9d:5a:de:5d:c5:c3:77:eb:df:
                    0c:d9:61:e1:75:75:88:ed:84:d1:d1:1e:52:07:e8:
                    3c:36:de:5e:b7:ff:45:e9:2e:59:53:bc:ad:55:bf:
                    3b:59:03:e1:b7:a8:d3:dd:21:57:b7:f2:c2:0b:23:
                    b7:76:94:6a:14:18:1e:d8:18:3c:57:a0:9d:c5:7c:
                    52:15:23:af:64:8c:cc:ca:65:5a:07:b3:d2:33:e6:
                    57:c1:11:17:69:b4:38:3c:8d:7e:bf:da:b6:4a:71:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:D8:1C:3F:BF:0D:BC:9D:F2:F8:3E:F8:BE:F1:9C:30:1A:21:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d160875-a88d-343d-92d8-0936d69cc6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:2f:95:10:8c:5e:e7:00:27:0c:dc:57:05:83:79:76:a1:bd:
         47:5b:3a:19:72:43:13:1d:dc:f7:93:ab:f4:0d:93:a4:67:a4:
         6c:9a:80:17:33:8e:8f:d4:51:6c:30:3f:31:ea:fe:68:7a:4a:
         3c:09:b3:c6:4e:9c:d7:fa:3d:f7:a1:7e:2d:db:ad:12:60:c4:
         82:b2:25:25:9b:d4:2c:a4:88:35:4e:4d:4a:18:08:0b:b1:b5:
         44:f4:99:36:5e:71:e2:93:7d:51:8e:e6:4b:ac:7e:41:4a:e8:
         c0:81:3d:30:63:41:d0:3d:79:11:99:8d:2f:a4:0b:60:63:c5:
         49:5f:08:6e:80:c4:e4:f4:4c:b4:cb:46:84:95:ca:b9:95:85:
         5d:de:37:44:2a:69:57:38:5d:82:72:01:65:f2:82:aa:59:fb:
         2e:7e:38:ac:9f:0a:11:c6:4b:2e:ad:f6:8d:57:0b:dc:26:07:
         02:2a:58:66:a9:cd:87:a8:10:1d:b7:ab:0c:8e:70:83:ea:ef:
         0a:ad:c7:2e:20:51:f7:b9:6a:c9:77:bb:8b:bd:e8:83:fe:e2:
         07:41:e7:d1:66:af:44:75:48:3b:2f:da:a0:c4:2b:2b:4b:5b:
         74:8d:8a:5f:3a:b6:c6:a5:b3:2a:7b:12:bd:44:f8:a7:3d:0e:
         99:49:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:19:41 2024 by rpki-client on console-ams.rpki-client.org