Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c93eb36-e8e4-347e-b95e-b3b432e69918.roa
File:                     7c93eb36-e8e4-347e-b95e-b3b432e69918.roa (raw, json)
Hash identifier:          Ot1Ed9p2B7ReHBKOammenqdV6lbmNw/eAKyfTFYFamA=
Subject key identifier:   3B:2E:A7:C9:F3:50:AD:5C:8D:3F:28:7A:C2:22:D3:DC:18:E6:86:C6
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285842F3FF093E6FAAF96585547000
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c93eb36-e8e4-347e-b95e-b3b432e69918.roa
Signing time:             Mon 21 Aug 2023 01:00:23 +0000
ROA not before:           Mon 21 Aug 2023 01:00:23 +0000
ROA not after:            Sun 19 Nov 2023 02:00:23 +0000
asID:                     33696
IP address blocks:        140.174.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Aug 2023 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f3:ff:09:3e:6f:aa:f9:65:85:54:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 21 01:00:23 2023 GMT
            Not After : Nov 19 02:00:23 2023 GMT
        Subject: CN=a90e5558-f281-4c6c-8835-9a3e40f42397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cd:de:ef:bd:2d:26:63:ee:db:23:55:52:6b:
                    1d:2e:4e:24:b7:25:32:96:3a:66:7b:d4:99:78:1f:
                    e8:4f:71:b4:73:b9:d8:2e:a4:d8:c4:b4:3d:40:a6:
                    ce:ba:ef:89:84:a5:e9:21:42:a8:28:22:1b:e1:b7:
                    ce:ed:bb:07:08:25:a4:f5:dc:86:53:52:2f:58:8f:
                    88:ad:47:54:b3:46:d1:64:71:66:52:f6:4b:02:be:
                    ce:f0:0c:47:ba:aa:9a:d3:7f:54:b8:d2:25:84:e3:
                    cb:d1:39:a9:a6:4f:a4:bd:6e:a3:6c:16:7a:6f:ac:
                    76:f0:28:d3:fc:e6:75:fa:f0:e6:81:dc:d0:69:89:
                    93:5f:5a:0b:ac:20:55:3b:5d:c0:38:02:1c:0e:da:
                    b2:73:f5:22:1b:66:27:50:dd:56:35:7a:e5:6e:58:
                    44:8f:30:a3:30:10:be:f6:e3:46:de:c8:49:89:a4:
                    c7:24:ed:cd:14:71:92:ee:7d:1b:92:5e:8d:c4:65:
                    bf:70:a7:2a:06:50:bd:8c:2b:6e:6b:03:ff:6b:12:
                    b8:09:2f:4c:d1:51:05:b0:f3:61:e0:bf:95:9d:04:
                    73:11:9e:25:06:7f:01:91:e3:28:4c:74:37:d7:b6:
                    d4:d9:be:87:13:2a:4e:92:5b:8b:ef:0e:75:8e:b0:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2E:A7:C9:F3:50:AD:5C:8D:3F:28:7A:C2:22:D3:DC:18:E6:86:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c93eb36-e8e4-347e-b95e-b3b432e69918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:57:b5:ae:a7:ca:1c:c2:e8:d2:26:30:73:ce:73:86:86:64:
         f9:1f:af:10:50:2d:4a:74:01:28:58:c2:c0:c7:fe:90:0a:4c:
         71:37:14:21:b5:b0:17:fb:22:fa:51:0d:4a:03:4c:cf:13:ae:
         e7:24:e8:cf:86:d3:b1:3d:18:69:78:2c:c8:ca:14:3f:36:f1:
         ec:82:59:6a:8e:46:bb:e7:49:0f:5a:b2:1d:bb:e8:97:50:a6:
         98:43:00:db:47:d8:31:1a:3b:61:f1:e4:db:50:4d:94:47:a7:
         b9:65:6f:62:fc:11:ae:80:bf:1a:6b:45:01:39:4a:39:f4:3a:
         11:d6:4d:c1:18:fc:24:cf:64:e6:2f:5e:c1:f9:6b:de:63:94:
         bb:1e:9a:ec:57:a9:54:ca:c0:0a:ff:83:f5:3d:66:6a:89:9e:
         bc:c0:85:1e:7c:d0:d2:3e:00:47:e0:52:1c:c2:20:1c:23:08:
         2c:bd:41:88:ba:35:ba:53:cd:5a:e2:7d:fb:fe:43:a9:39:11:
         04:89:57:9a:f0:f1:56:9e:d5:13:14:be:44:39:0f:2d:f7:24:
         c5:d2:f1:36:fc:f7:14:93:4e:5c:fe:fb:cc:00:c6:3b:f8:0d:
         6b:1b:4c:8b:be:86:60:d8:40:cd:f4:ca:1d:4f:8d:e5:de:e4:
         9b:e2:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 01:41:24 2023 by rpki-client on console-ams.rpki-client.org