Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa
File:                     cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa (raw, json)
Hash identifier:          01JcISpdPXLhC7jGaBrVK52wv5xScxW25wxCSFZlPe4=
Subject key identifier:   EF:FB:96:79:55:95:94:85:14:A9:D7:65:C5:40:A0:0B:55:72:05:7B
Certificate issuer:       /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
Certificate serial:       010D0C9F4328584566BDAE5A667D6AF7CF141400
Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        147.160.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:ae:5a:66:7d:6a:f7:cf:14:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=851cb74a-dcd5-46cc-8b75-10e2a43ba8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:a8:a4:a5:8b:f9:00:94:c4:f5:b4:5e:da:
                    d6:be:fd:0e:03:81:ba:51:58:b4:85:b3:82:8c:0d:
                    97:c9:b8:f5:7d:83:08:6a:89:ec:f7:66:b2:dc:23:
                    52:92:79:b7:7b:14:39:5a:76:da:f2:82:05:55:7b:
                    ae:49:72:4f:aa:99:b7:90:16:3c:66:84:aa:b6:71:
                    0f:6a:1a:9e:0e:64:0e:7c:2d:61:a9:57:f8:dc:ec:
                    e4:4f:65:5c:92:4a:16:53:4b:01:1e:51:5d:bc:fd:
                    cc:07:c5:ae:bf:2c:c2:cf:66:36:39:cb:3c:4e:f5:
                    54:40:62:9f:54:3f:41:89:ba:08:6c:0d:b1:b5:26:
                    a6:1e:e0:94:fb:45:9a:50:b1:26:c3:4f:70:ac:60:
                    15:32:a9:0e:e4:b4:25:18:7b:84:50:42:7a:a8:09:
                    db:fa:bc:f3:f8:b6:18:cc:7c:98:90:e9:cb:f5:44:
                    db:11:1a:26:9a:2d:70:69:64:b5:31:f8:23:24:01:
                    91:18:fd:ce:67:ed:6a:41:b1:71:d3:69:c5:9d:fa:
                    40:eb:20:77:ee:3d:e0:f3:e5:05:7f:d2:fd:b5:9d:
                    34:d2:ee:30:0b:fc:ee:48:f6:55:4a:3d:36:c1:a3:
                    e6:85:2b:a6:26:11:0b:58:c0:94:fb:d6:3f:21:31:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FB:96:79:55:95:94:85:14:A9:D7:65:C5:40:A0:0B:55:72:05:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/cf8fe52f-57a2-3bc7-b251-d772218a8f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl

            X509v3 Authority Key Identifier:
                keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:92:c8:25:a0:7b:e5:43:74:12:be:a3:d5:2a:07:e3:08:85:
         46:33:0d:4d:97:e7:b5:6f:f8:7f:b5:b8:c7:4e:5c:10:cd:4c:
         4c:77:d1:6a:50:87:af:d7:62:33:31:92:a0:97:0c:2b:b7:b1:
         a8:d4:07:74:00:8e:74:7a:7b:64:99:52:ec:34:92:74:04:83:
         e4:dc:db:77:8c:17:6a:d5:a7:0b:da:1b:f6:c3:84:92:2a:78:
         b9:92:13:2f:58:39:8c:89:ca:1d:0b:ad:48:98:2c:f1:52:28:
         18:6b:27:9e:57:a9:a1:cf:d3:8d:b3:cb:ed:9a:bb:f3:dc:eb:
         07:cb:be:d6:f2:53:b5:2a:39:16:87:49:4c:1b:3c:65:17:14:
         db:ae:2e:60:cc:b1:37:b2:28:63:df:42:9d:69:3a:e5:09:f2:
         70:3b:75:6d:e9:0c:1e:89:f2:2c:17:0f:b4:8b:1c:2e:62:72:
         be:e3:bd:cb:58:fe:cd:5d:06:2e:93:41:3e:2d:5c:7f:cd:7d:
         15:9c:ac:ef:26:76:a7:cb:24:71:ec:3a:cd:dc:fb:8f:c0:f4:
         4b:05:c3:cd:fd:55:48:12:1c:33:cf:8e:fb:76:dc:07:7f:c0:
         ae:36:06:eb:1c:91:56:1d:a9:8c:03:fe:a1:4c:bf:ba:d1:70:
         d6:b8:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:19:54 2024 by rpki-client on console-ams.rpki-client.org