Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa
File:                     ecd9439b-df70-304d-a65a-4712a2c669ef.roa (raw, json)
Hash identifier:          VWCqOnfcznTLCOgIc8NXsTTXJHEmAdSOKceKH/7wL90=
Subject key identifier:   AE:3A:CB:AA:58:C7:DC:65:D2:D4:7D:73:48:3D:73:20:1C:DA:84:28
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F43285845F67EA850FA8A5BC9CF7F8880
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa
Signing time:             Thu 23 May 2024 00:50:08 +0000
ROA not before:           Thu 23 May 2024 00:50:08 +0000
ROA not after:            Wed 21 Aug 2024 00:50:08 +0000
asID:                     16509
IP address blocks:        157.166.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f6:7e:a8:50:fa:8a:5b:c9:cf:7f:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: May 23 00:50:08 2024 GMT
            Not After : Aug 21 00:50:08 2024 GMT
        Subject: CN=8288bd64-2a33-43e0-8383-6781094801cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:17:4c:ac:c7:89:fe:5d:06:9f:33:70:a7:
                    d0:83:0c:2b:6b:8c:ae:80:93:48:28:25:94:87:84:
                    f8:74:60:4c:80:3f:c0:d7:32:c4:f2:59:f7:42:fa:
                    81:8a:ab:66:5e:cc:9f:e0:8e:48:63:5f:37:11:ff:
                    b5:1b:1b:89:0e:68:92:e9:47:0f:00:ca:4e:40:90:
                    0e:41:cc:ac:cb:18:74:1f:00:cd:21:a0:a8:a0:d6:
                    00:7d:4c:c1:70:e2:92:bc:c1:a4:e8:f2:40:02:3c:
                    1a:21:1e:53:65:78:7c:78:1b:8b:2b:0d:d6:79:2b:
                    4a:e0:79:39:78:1a:84:63:d7:26:21:10:3c:91:bb:
                    6e:a0:83:96:ab:70:f4:d6:a5:95:b6:de:81:d3:b9:
                    57:27:16:e3:9b:ba:74:a0:1a:56:d4:b2:a9:a0:73:
                    6d:b4:38:08:ae:f1:29:8c:53:15:7f:5c:35:59:39:
                    3e:70:ce:93:8c:f8:aa:27:dc:e3:6f:ba:32:0e:0d:
                    e4:84:fc:21:ba:9e:46:6f:76:62:cf:d4:75:c2:15:
                    77:e8:ba:c1:f0:8d:48:17:17:d3:28:73:cb:d2:c4:
                    e5:92:16:02:1f:4d:dd:ca:27:ff:22:80:c9:f5:f8:
                    b9:3b:4c:50:57:d8:2d:9e:6c:20:35:5e:2b:40:6b:
                    75:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:CB:AA:58:C7:DC:65:D2:D4:7D:73:48:3D:73:20:1C:DA:84:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:57:8d:98:73:b1:b2:d5:29:26:b1:d2:15:89:fb:cc:4e:
         bf:9f:bb:ac:c0:97:8c:4f:11:55:89:d5:50:6b:5d:59:a4:f8:
         4c:e4:6d:74:6c:79:a7:da:eb:c4:3b:bf:10:65:d3:38:01:e7:
         22:3e:4c:48:ca:75:56:dc:da:de:94:3d:ef:79:ac:0d:50:b0:
         4d:9c:42:76:6f:a5:2a:05:17:4c:eb:0d:c7:d0:2a:55:53:9c:
         05:1a:78:c6:65:9b:2b:c1:b8:63:d0:97:94:7b:72:68:6e:c4:
         4b:d6:00:f7:ab:d4:55:50:92:9a:8c:23:eb:5f:9d:b0:8e:87:
         a7:b8:d9:1c:5f:69:a2:3f:55:4a:a9:f9:9f:ad:b6:68:c7:01:
         71:b5:27:a9:f5:f3:bb:c4:40:b5:cb:e4:e5:a8:93:ec:76:43:
         ce:23:eb:39:7e:a8:84:1b:f6:d3:1d:6a:55:46:8a:57:51:34:
         f1:00:27:56:85:c2:95:28:e2:d9:b7:68:42:b5:1c:fb:dc:e6:
         ac:bd:e2:9b:d8:bf:75:c0:c5:7f:89:2a:a2:ce:8b:13:8f:18:
         25:f0:c2:10:12:db:14:4f:d8:8c:df:70:f7:94:51:0e:67:33:
         21:cf:62:17:44:da:40:58:97:75:6e:fd:59:5b:70:cb:a0:9f:
         6f:f0:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 08:49:12 2024 by rpki-client on console-ams.rpki-client.org