Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
File:                     a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa (raw, json)
Hash identifier:          bxgr6Wdmr64D++lfnO3V3RytUKxozscDwjtItQkFluw=
Subject key identifier:   47:00:37:99:1D:36:CC:6E:53:47:9F:84:3A:23:E0:E0:FF:A4:CD:0F
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285845C013938F78002E355CAFECC0
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     393529
IP address blocks:        160.129.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:93:8f:78:00:2e:35:5c:af:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=35f3706c-6301-48b2-98d9-7a620dfa07a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:88:a6:a4:d9:e1:08:b4:3e:db:09:cf:fd:
                    ae:a3:18:f5:36:68:fa:4c:5c:91:3c:8b:ff:c5:d2:
                    c2:bd:bd:2a:fd:46:75:f8:1d:e7:e0:c1:bf:1f:db:
                    fa:df:0c:e4:d0:78:03:5d:28:b4:8f:6d:a0:e4:55:
                    01:af:cc:94:e8:60:ef:6c:a2:2d:de:72:9d:28:84:
                    f2:9f:4f:b7:db:87:6f:9e:32:a3:23:b0:36:cd:ca:
                    63:9f:b4:69:69:82:e5:6b:77:13:2f:cd:b6:13:88:
                    c4:6a:71:54:f9:40:47:4c:87:a1:4f:a7:5e:8c:a2:
                    80:cf:da:9d:84:53:6c:9d:d9:9d:37:87:8b:4b:60:
                    44:73:25:56:df:2a:22:b9:94:b3:c8:c9:7f:d7:fe:
                    f4:53:8a:c8:7f:40:da:cc:86:3f:4a:73:05:1c:ea:
                    a8:52:98:a1:23:54:3e:57:66:7a:1f:f1:14:69:3d:
                    84:91:f6:bb:da:ae:9c:70:d5:e4:9d:39:9b:2c:b1:
                    0e:6e:21:ae:20:ef:65:29:b9:e6:42:8e:74:7e:82:
                    01:6f:df:47:b2:77:c2:b7:2a:c6:38:e3:2c:c0:7a:
                    a1:32:6e:db:a1:a3:71:13:ba:a3:89:64:72:76:a1:
                    65:54:75:f7:2e:18:26:be:d2:17:cc:ae:2b:81:e7:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:00:37:99:1D:36:CC:6E:53:47:9F:84:3A:23:E0:E0:FF:A4:CD:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:a0:66:d3:af:da:81:09:d0:c8:da:c2:aa:68:4b:f6:68:
         82:fb:18:ac:b0:d7:a9:08:a9:05:64:1d:5a:45:b8:98:ee:6f:
         f6:52:1c:68:31:a1:1b:c5:77:02:be:7a:9d:70:f6:50:06:23:
         eb:7c:1d:b3:ba:4c:1a:46:0a:c0:e9:e0:22:d5:12:f4:f7:08:
         55:52:4c:a1:17:a1:85:02:fa:cf:09:ab:c0:e3:18:72:a1:eb:
         70:cd:66:d7:0e:ac:24:6a:73:fb:9a:4b:51:13:ee:48:73:e9:
         69:3c:50:48:3d:44:96:61:ce:00:97:25:d1:f6:10:95:a9:3d:
         ef:0b:5c:60:8d:96:4d:4e:59:af:91:62:34:8b:6c:dd:7e:e3:
         53:b6:93:e4:60:7c:7a:19:ca:dc:13:68:38:ed:52:59:da:02:
         67:53:dd:8e:02:25:1a:d1:8c:9a:76:ee:11:8a:53:d8:ba:7d:
         97:8f:e3:59:39:db:a2:a1:3a:f2:67:4b:a4:e6:4e:30:54:cf:
         8d:3e:ae:01:47:54:96:65:11:13:bc:a7:bd:ec:06:f4:cf:b8:
         d3:42:51:65:94:38:be:48:65:0b:1e:02:eb:51:87:94:5c:f7:
         d4:3d:04:88:1c:bb:c0:30:eb:f4:c3:7d:61:7a:eb:2f:64:da:
         14:31:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:15 2024 by rpki-client on console-fra.rpki-client.org