Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/7eee69df-ceb7-3890-8794-6d3d8100094a.roa
File:                     7eee69df-ceb7-3890-8794-6d3d8100094a.roa (raw, json)
Hash identifier:          /9NewlF9/mRMfrTqzBBD6HauoJNILiK76sW8cZNW+Ec=
Subject key identifier:   F7:D2:C6:08:71:FB:0A:5D:E7:D3:9F:60:56:C4:89:FD:03:CB:26:E9
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F432858471BA5A5FA490F44EE4C219180
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/7eee69df-ceb7-3890-8794-6d3d8100094a.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     393529
IP address blocks:        160.129.0.0/22 maxlen: 22
                          160.129.4.0/22 maxlen: 22
                          160.129.8.0/22 maxlen: 22
                          160.129.12.0/22 maxlen: 22
                          160.129.16.0/22 maxlen: 22
                          160.129.20.0/22 maxlen: 22
                          160.129.24.0/22 maxlen: 22
                          160.129.28.0/22 maxlen: 22
                          160.129.32.0/22 maxlen: 22
                          160.129.36.0/22 maxlen: 22
                          160.129.40.0/22 maxlen: 22
                          160.129.44.0/22 maxlen: 22
                          160.129.48.0/22 maxlen: 22
                          160.129.52.0/22 maxlen: 22
                          160.129.56.0/22 maxlen: 22
                          160.129.60.0/22 maxlen: 22
                          160.129.64.0/22 maxlen: 22
                          160.129.68.0/22 maxlen: 22
                          160.129.72.0/22 maxlen: 22
                          160.129.76.0/22 maxlen: 22
                          160.129.80.0/22 maxlen: 22
                          160.129.84.0/22 maxlen: 22
                          160.129.88.0/22 maxlen: 22
                          160.129.92.0/22 maxlen: 22
                          160.129.96.0/22 maxlen: 22
                          160.129.100.0/22 maxlen: 22
                          160.129.104.0/22 maxlen: 22
                          160.129.108.0/22 maxlen: 22
                          160.129.112.0/22 maxlen: 22
                          160.129.116.0/22 maxlen: 22
                          160.129.120.0/22 maxlen: 22
                          160.129.124.0/22 maxlen: 22
                          160.129.128.0/22 maxlen: 22
                          160.129.132.0/22 maxlen: 22
                          160.129.136.0/22 maxlen: 22
                          160.129.140.0/22 maxlen: 22
                          160.129.144.0/22 maxlen: 22
                          160.129.148.0/22 maxlen: 22
                          160.129.152.0/22 maxlen: 22
                          160.129.156.0/22 maxlen: 22
                          160.129.160.0/22 maxlen: 22
                          160.129.164.0/22 maxlen: 22
                          160.129.168.0/22 maxlen: 22
                          160.129.172.0/22 maxlen: 22
                          160.129.176.0/22 maxlen: 22
                          160.129.180.0/22 maxlen: 22
                          160.129.184.0/22 maxlen: 22
                          160.129.188.0/22 maxlen: 22
                          160.129.192.0/22 maxlen: 22
                          160.129.196.0/22 maxlen: 22
                          160.129.200.0/22 maxlen: 22
                          160.129.204.0/22 maxlen: 22
                          160.129.208.0/22 maxlen: 22
                          160.129.212.0/22 maxlen: 22
                          160.129.216.0/22 maxlen: 22
                          160.129.220.0/22 maxlen: 22
                          160.129.224.0/22 maxlen: 22
                          160.129.228.0/22 maxlen: 22
                          160.129.232.0/22 maxlen: 22
                          160.129.236.0/22 maxlen: 22
                          160.129.240.0/22 maxlen: 22
                          160.129.244.0/22 maxlen: 22
                          160.129.248.0/22 maxlen: 22
                          160.129.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:a5:fa:49:0f:44:ee:4c:21:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=91aae6b8-3ac6-4cd6-b47e-692ad4030220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:f3:b2:28:e3:2b:04:26:2c:40:57:cf:e5:
                    bc:83:a1:ec:87:5c:d4:3f:fe:9a:bc:d7:c4:59:aa:
                    89:37:88:f1:bb:e8:14:96:ec:1d:cc:42:c3:06:4f:
                    66:f3:e2:f3:33:bf:fb:12:f8:c3:d8:9f:ef:60:5a:
                    e4:b7:18:36:d9:2a:d9:2c:e6:d9:0b:bb:6c:dd:b6:
                    ab:a9:86:32:07:19:6f:b0:b9:e3:f8:83:44:db:00:
                    d2:b0:bf:d8:33:d1:c8:6f:31:f3:4b:d8:2f:ae:e3:
                    df:75:7b:f6:d8:f3:a7:76:0d:10:66:7b:12:d7:2b:
                    1a:2f:8d:50:46:99:32:bb:1e:de:07:56:36:13:97:
                    48:a4:32:f7:d2:8b:44:25:de:be:ba:d4:a0:28:cf:
                    16:87:80:13:d8:7b:ec:b4:08:8c:c8:0a:e5:56:3d:
                    35:4b:59:96:b4:76:7a:93:e2:65:23:64:5a:d6:8a:
                    d6:98:19:9d:98:6c:75:76:50:44:62:8b:57:80:9a:
                    69:d5:5c:30:40:ad:90:27:15:8d:c5:09:bf:47:f1:
                    9c:5f:20:f9:d2:63:bb:50:02:ff:64:42:00:e7:ef:
                    0e:0c:7c:9e:d1:9a:d1:33:0e:e7:b7:be:c3:a3:52:
                    a4:0a:7b:62:26:64:56:b6:f9:9d:1e:42:2d:1e:a4:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:C6:08:71:FB:0A:5D:E7:D3:9F:60:56:C4:89:FD:03:CB:26:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/7eee69df-ceb7-3890-8794-6d3d8100094a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:ee:43:5a:70:e0:68:37:ef:81:9d:b9:44:20:55:d8:9f:
         eb:4b:36:4c:df:a1:8e:e1:9d:17:ec:2c:1a:7f:ae:c2:be:83:
         6a:40:40:53:b8:85:53:78:83:96:74:66:71:57:d9:96:2c:63:
         bd:18:1b:58:34:b8:5e:9c:1e:f9:63:c0:13:7c:31:19:b0:c1:
         e3:67:68:77:ce:5c:24:e5:75:1d:cf:6c:e8:ee:6c:82:be:d5:
         e3:37:22:64:45:d8:2b:8e:99:0e:39:df:cf:a1:18:56:89:18:
         cd:78:d5:62:ec:bb:10:38:a7:b3:12:6e:f0:54:07:23:4d:5d:
         33:f3:52:9b:43:1e:22:7b:78:84:58:68:31:e7:d3:c4:f1:a7:
         3f:45:7d:ad:1f:be:38:80:1e:d7:f9:55:b2:ef:82:fe:cf:e8:
         01:9f:9e:87:e8:01:cf:86:c3:2d:ef:91:57:fe:75:d6:42:66:
         ba:21:cf:fc:6f:8e:ca:75:f4:e9:0a:6e:50:0a:5a:09:a9:f7:
         d4:85:51:fa:36:dd:66:2b:a7:8b:19:74:d3:53:34:45:d5:a0:
         28:69:e0:63:a7:bc:a6:14:43:e9:08:cd:51:2d:d2:66:cd:ef:
         7a:5a:1a:2f:81:9c:e4:c8:7f:4b:eb:24:45:4c:20:97:8c:c8:
         a4:42:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:59 2024 by rpki-client on console-fra.rpki-client.org