Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56b71a8-79ed-31a7-a614-507e5a48a153.roa
File:                     b56b71a8-79ed-31a7-a614-507e5a48a153.roa (raw, json)
Hash identifier:          68vOA9/H+ezfTXuFLGWxLVKbx/WBgpcHq7iWoWv9WAg=
Subject key identifier:   6B:F9:13:67:3A:79:DE:5D:35:7D:44:9F:B8:3F:3D:13:77:2D:FD:6B
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858473D25F98BD02CFB5A8B74DF00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56b71a8-79ed-31a7-a614-507e5a48a153.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        165.1.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f9:8b:d0:2c:fb:5a:8b:74:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=a1c3c5cb-8d62-4b3c-97d2-aef94b0c88db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8c:a4:d3:20:cf:f6:e9:d9:05:0b:43:d0:a8:
                    84:d9:1d:f4:c5:30:0a:3b:18:2d:0b:79:96:a3:29:
                    79:34:f4:70:55:bc:46:54:ec:aa:79:1b:17:be:be:
                    90:15:b1:fd:6f:2e:84:76:8e:b8:c2:da:bc:94:0e:
                    21:8e:39:e2:1c:da:a3:e7:a4:ea:d2:c6:58:aa:97:
                    67:8d:97:70:e3:4a:54:91:bd:f3:50:3c:bf:a0:da:
                    7e:31:7b:a9:f1:f2:3c:6f:3e:03:3a:9a:ec:1e:57:
                    1a:bf:10:36:25:f7:35:90:74:46:d4:dd:2f:fc:90:
                    7f:60:44:53:70:61:b0:4c:d4:f0:64:b4:e5:0c:57:
                    0d:20:3e:1f:d7:30:36:58:7e:60:74:e5:da:d0:ed:
                    ae:f9:a6:16:a9:f6:34:bd:7e:6b:d9:e4:10:3b:7e:
                    bb:44:35:57:d7:05:f1:88:33:ee:54:58:f8:ca:19:
                    e1:b7:47:6e:9b:7c:da:58:e3:0e:38:d7:d7:e7:2b:
                    89:47:bc:d2:c8:b4:97:38:55:51:35:68:77:14:a9:
                    b3:b6:44:4d:2e:90:a1:b0:3b:80:57:2a:71:21:63:
                    21:53:17:96:92:25:d4:cb:f8:17:01:e4:08:74:67:
                    ab:d4:bf:3d:97:d7:5c:5c:03:37:8c:20:55:c4:d8:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:13:67:3A:79:DE:5D:35:7D:44:9F:B8:3F:3D:13:77:2D:FD:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b56b71a8-79ed-31a7-a614-507e5a48a153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:17:ca:27:9c:63:47:ed:32:dc:05:22:5f:f0:ee:e2:61:57:
         76:a5:2a:86:e3:a8:24:30:8a:96:46:14:2f:ef:bf:db:f7:13:
         4f:d2:34:c5:75:35:15:82:3a:ab:35:44:3a:7e:84:82:5f:29:
         b8:67:03:9c:7a:cb:74:23:5b:5c:7e:ca:16:5f:49:70:a0:d0:
         1b:0f:6d:df:41:23:87:91:72:bc:a7:31:67:b6:b6:2e:b0:c8:
         fd:17:ba:a2:af:11:0e:64:fa:5c:21:d6:99:b9:37:d6:79:2c:
         0b:32:7b:5d:75:99:b2:02:62:4d:85:60:62:12:9a:4f:5d:90:
         67:0b:5e:5e:9d:2e:31:74:66:ad:5a:7f:b6:17:93:1d:89:4a:
         4e:01:a6:6a:9e:80:0e:47:ee:24:8e:50:2e:d3:aa:e8:12:cf:
         53:2f:a5:46:24:8a:b5:f4:38:e1:82:7f:e8:c1:c3:59:8d:a7:
         1e:7f:fb:87:c2:02:c7:37:ed:cd:b4:67:78:b4:4b:d3:b8:95:
         0f:6b:4b:af:7b:17:c0:77:8a:84:23:1d:29:bd:10:7e:4e:2c:
         f0:42:48:c1:e2:c2:de:51:33:f3:6a:20:87:fd:51:84:51:0f:
         5b:7f:84:05:bc:94:8d:e7:b6:23:a5:b5:85:2d:14:52:93:5b:
         17:48:dd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:30 2024 by rpki-client on console-fra.rpki-client.org