Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa
File:                     e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa (raw, json)
Hash identifier:          bchQ7Qx+o4AqypCaQSFtGYCPkSTCRLf24jGWZFXyDRg=
Subject key identifier:   F4:5E:89:7E:23:41:A8:C1:35:F2:53:A9:86:27:80:0E:1F:43:8B:4E
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F432858471E705BD9FA5D5B4EE6C2B500
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     19551
IP address blocks:        160.129.0.0/22 maxlen: 22
                          160.129.4.0/22 maxlen: 22
                          160.129.8.0/22 maxlen: 22
                          160.129.12.0/22 maxlen: 22
                          160.129.16.0/22 maxlen: 22
                          160.129.20.0/22 maxlen: 22
                          160.129.24.0/22 maxlen: 22
                          160.129.28.0/22 maxlen: 22
                          160.129.32.0/22 maxlen: 22
                          160.129.36.0/22 maxlen: 22
                          160.129.40.0/22 maxlen: 22
                          160.129.44.0/22 maxlen: 22
                          160.129.48.0/22 maxlen: 22
                          160.129.52.0/22 maxlen: 22
                          160.129.56.0/22 maxlen: 22
                          160.129.60.0/22 maxlen: 22
                          160.129.64.0/22 maxlen: 22
                          160.129.68.0/22 maxlen: 22
                          160.129.72.0/22 maxlen: 22
                          160.129.76.0/22 maxlen: 22
                          160.129.80.0/22 maxlen: 22
                          160.129.84.0/22 maxlen: 22
                          160.129.88.0/22 maxlen: 22
                          160.129.92.0/22 maxlen: 22
                          160.129.96.0/22 maxlen: 22
                          160.129.100.0/22 maxlen: 22
                          160.129.104.0/22 maxlen: 22
                          160.129.108.0/22 maxlen: 22
                          160.129.112.0/22 maxlen: 22
                          160.129.116.0/22 maxlen: 22
                          160.129.120.0/22 maxlen: 22
                          160.129.124.0/22 maxlen: 22
                          160.129.128.0/22 maxlen: 22
                          160.129.132.0/22 maxlen: 22
                          160.129.136.0/22 maxlen: 22
                          160.129.140.0/22 maxlen: 22
                          160.129.144.0/22 maxlen: 22
                          160.129.148.0/22 maxlen: 22
                          160.129.152.0/22 maxlen: 22
                          160.129.156.0/22 maxlen: 22
                          160.129.160.0/22 maxlen: 22
                          160.129.164.0/22 maxlen: 22
                          160.129.168.0/22 maxlen: 22
                          160.129.172.0/22 maxlen: 22
                          160.129.176.0/22 maxlen: 22
                          160.129.180.0/22 maxlen: 22
                          160.129.184.0/22 maxlen: 22
                          160.129.188.0/22 maxlen: 22
                          160.129.192.0/22 maxlen: 22
                          160.129.196.0/22 maxlen: 22
                          160.129.200.0/22 maxlen: 22
                          160.129.204.0/22 maxlen: 22
                          160.129.208.0/22 maxlen: 22
                          160.129.212.0/22 maxlen: 22
                          160.129.216.0/22 maxlen: 22
                          160.129.220.0/22 maxlen: 22
                          160.129.224.0/22 maxlen: 22
                          160.129.228.0/22 maxlen: 22
                          160.129.232.0/22 maxlen: 22
                          160.129.236.0/22 maxlen: 22
                          160.129.240.0/22 maxlen: 22
                          160.129.244.0/22 maxlen: 22
                          160.129.248.0/22 maxlen: 22
                          160.129.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:5b:d9:fa:5d:5b:4e:e6:c2:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=e301d70f-13ad-4ff7-b83f-9cb81f3f1460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:0f:86:75:8e:c0:e6:d4:40:79:54:cc:7e:
                    2f:80:46:61:ec:9d:5e:aa:58:68:13:5f:08:30:61:
                    9f:af:0e:7d:a5:57:bc:51:ce:e4:10:ee:2d:a3:97:
                    5f:59:9f:9d:52:0c:51:30:65:ea:36:5a:7c:1e:2a:
                    ea:6b:5b:73:ab:e5:02:09:89:7a:73:90:1f:30:b9:
                    f8:11:df:ea:98:0e:c9:b6:5c:e5:26:d3:9c:1d:a8:
                    82:de:81:3e:ac:df:c1:2e:44:07:d0:18:6c:1c:1a:
                    b4:9a:07:58:cf:a1:05:cd:95:10:cc:e1:e0:64:60:
                    50:b8:ba:f7:fa:a0:74:57:94:d4:42:55:b8:d0:ca:
                    ee:79:fb:13:8d:66:bf:6e:c5:7d:4b:4f:cf:89:26:
                    fa:36:07:f1:71:42:30:2c:a3:d3:5f:41:4a:5c:44:
                    11:33:f1:73:cf:7c:4e:06:bb:bd:c4:8b:10:8e:06:
                    6a:72:b7:71:85:b6:9a:c8:0d:84:7a:fc:93:9f:7d:
                    ba:ec:02:cb:b6:7f:3a:6e:3a:25:9c:74:e1:4c:d3:
                    3e:2a:d1:a7:a9:db:a6:0b:aa:0e:1d:57:d1:dc:da:
                    d1:75:8b:96:0c:d6:a8:61:31:fa:1d:99:79:01:98:
                    69:8f:7f:72:4f:54:bc:b5:50:5e:59:4d:b7:cb:0a:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5E:89:7E:23:41:A8:C1:35:F2:53:A9:86:27:80:0E:1F:43:8B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:81:a4:57:a9:e7:db:f1:c6:62:e2:58:85:f9:4f:50:c0:81:
         80:0e:b4:9c:4e:c8:4e:a9:f0:cd:68:60:e5:11:18:d8:c9:78:
         8d:9a:15:2a:59:15:60:9a:59:cf:5d:c7:ef:13:2b:4d:6b:37:
         4b:7e:4a:0e:e1:fd:4f:ed:11:a9:83:4d:da:d3:b5:12:62:ce:
         a3:6e:d4:d6:84:d1:84:3e:cb:04:53:15:64:bd:21:10:27:f3:
         4b:d3:ab:68:37:5b:a8:fa:51:bd:18:69:d3:74:a3:22:a2:3f:
         f2:04:55:25:84:6c:37:37:fa:f0:d0:23:99:fd:2a:03:12:d9:
         04:99:5b:ca:bb:8d:0f:d3:c0:8b:71:a3:61:2d:dd:00:19:00:
         32:72:b6:fe:e7:b1:5b:10:97:2a:fc:be:f1:93:e7:e4:76:86:
         c4:cc:f2:6f:73:2a:ae:89:f0:7a:21:e8:0d:9e:18:25:fb:ef:
         da:6d:ab:9f:48:43:36:e0:68:3f:42:8d:b9:5b:99:4e:d3:6f:
         53:58:a7:9d:22:61:6c:29:bf:c7:86:12:e7:7e:3a:1a:81:aa:
         5a:ee:34:75:04:ff:8a:bf:13:ac:5d:95:9b:ab:d3:57:43:f8:
         9d:dd:e5:5f:7a:17:0d:23:51:3e:03:e9:3e:07:78:de:be:31:
         5b:24:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org