Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa
File:                     33a15d20-681d-3fde-98e7-9009e686b584.roa (raw, json)
Hash identifier:          dIVrxeo/N7pVVlhyaYHWvQiK9+icKOX+Ubtp4dOuOg0=
Subject key identifier:   21:9A:B9:F8:1A:BF:98:E6:2F:ED:93:93:E0:84:AD:A1:F1:8E:90:6A
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285845B21E165B611A1B9ECDB5F000
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        198.160.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:16:5b:61:1a:1b:9e:cd:b5:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=218a3df7-ff92-4ed1-96d3-467b95332175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:cc:89:56:23:20:18:4f:24:79:31:45:d1:
                    b6:9f:42:a4:d8:55:39:99:dd:7c:96:63:62:f1:22:
                    cc:7b:74:d0:a5:df:94:13:7f:50:1d:7a:fd:c2:fb:
                    50:37:69:28:f4:2a:cf:0f:0a:7a:de:07:94:91:d1:
                    db:96:00:30:ec:93:87:71:d0:6c:cc:11:91:6f:7c:
                    1f:d6:9b:f7:bc:ae:4f:d4:41:75:3c:a7:0d:f4:45:
                    b5:f0:4b:64:a8:07:a1:2b:98:19:a7:10:3b:3f:88:
                    1c:6c:35:19:ed:e1:b2:7a:12:d9:07:10:44:02:fd:
                    7e:11:14:a3:87:b2:b5:38:2f:7b:c2:0f:d9:97:40:
                    d6:24:04:0b:b4:1b:90:20:3b:0b:18:60:51:43:71:
                    78:df:ab:43:30:7c:16:07:70:3b:93:07:29:11:0a:
                    9d:c8:6a:72:b6:85:1d:bd:a3:09:00:6f:56:04:74:
                    16:ae:e8:21:46:68:e6:48:c2:92:88:97:41:59:24:
                    43:09:17:5a:10:44:d4:39:80:b7:af:f9:d9:03:9f:
                    e9:06:69:8f:ce:05:e0:f6:5e:4d:87:48:32:da:cd:
                    7a:23:a2:df:c5:23:7d:7e:64:ce:b7:e1:ed:23:e2:
                    db:dd:19:1c:05:d8:ab:57:22:62:e6:ea:30:1a:67:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9A:B9:F8:1A:BF:98:E6:2F:ED:93:93:E0:84:AD:A1:F1:8E:90:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:89:21:87:81:de:ed:b1:93:21:36:59:4f:31:cf:d6:43:
         90:0a:ba:53:ec:a3:c3:4a:1c:74:3e:e9:f4:f2:f4:d0:87:29:
         65:bb:6f:d1:05:3a:b1:46:c3:a3:36:64:3b:79:9d:c9:6a:7e:
         7f:47:59:45:99:fe:f0:93:a7:68:19:b3:22:2c:25:fc:59:9f:
         76:99:9c:c0:30:08:83:c1:4a:d4:ba:49:82:0f:6a:2a:50:80:
         9f:cb:9b:8c:ed:d3:e7:7e:c5:82:23:f1:8a:98:33:ba:79:49:
         d0:35:e0:01:ac:4f:9b:6e:e0:c1:a0:6b:c8:33:d6:6e:43:86:
         74:0f:01:7b:4d:ab:a5:a2:ad:89:f7:f5:3b:14:83:bc:82:f4:
         5d:ed:c5:7e:d5:c8:1f:b6:ca:45:5a:6b:26:85:c4:7d:25:1e:
         ba:29:88:8d:e3:b8:79:da:db:23:1f:2b:f0:e7:7e:e0:8b:29:
         bb:e3:8d:4a:e0:60:f2:62:60:ad:57:1d:1c:df:7a:5d:ef:ae:
         cd:20:8f:d4:f0:d4:76:08:56:61:96:8a:76:5f:06:94:1a:54:
         15:51:66:b8:98:cb:82:1a:8a:5d:03:31:cd:f1:82:ed:8d:3c:
         55:ff:9d:44:3a:99:25:2a:f8:9b:88:da:5d:bc:c9:8e:e7:36:
         a6:c0:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:03:06 2024 by rpki-client on console-fra.rpki-client.org