Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa
File:                     895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa (raw, json)
Hash identifier:          7jbA4xzX7S9Wtk3DNzVlq/CZhi7/abwecuaU141N9eg=
Subject key identifier:   85:45:48:35:F6:9F:24:53:6E:41:87:F6:AF:91:0F:0A:B9:B4:27:33
Certificate issuer:       /CN=3a000633-c1ee-492c-b730-12e113ab8bd2
Certificate serial:       010D0C9F4328584585A75BA3926AB061E51C4180
Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa
Signing time:             Fri 12 Apr 2024 14:45:47 +0000
ROA not before:           Fri 12 Apr 2024 14:45:47 +0000
ROA not after:            Thu 11 Jul 2024 14:45:47 +0000
asID:                     394710
IP address blocks:        85.131.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:a7:5b:a3:92:6a:b0:61:e5:1c:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2
        Validity
            Not Before: Apr 12 14:45:47 2024 GMT
            Not After : Jul 11 14:45:47 2024 GMT
        Subject: CN=f7ef1128-5236-4ca2-bc6a-3abc5b626c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:19:db:f8:d9:4a:2c:2d:af:77:0b:6d:2c:
                    ef:86:38:1f:41:22:af:6e:00:dd:41:ee:36:13:9d:
                    2e:93:65:f8:f2:9e:b2:ff:d6:6f:7c:2d:d3:f8:39:
                    6b:5e:f2:bb:f9:18:0d:aa:4c:4a:4b:50:cf:09:42:
                    bc:f4:8d:19:9c:0d:3c:f2:bb:a0:5d:9a:74:03:47:
                    3f:ba:b5:b6:c6:8f:b4:4d:6d:22:a7:2b:a4:1f:a5:
                    e8:06:1b:5b:82:1e:e9:47:81:fe:a5:df:63:4e:3b:
                    af:b3:2a:80:9e:f2:7e:77:80:bf:b3:65:f2:27:5c:
                    0c:c3:33:11:f3:85:da:5d:15:af:0a:aa:62:86:89:
                    d5:ec:7a:ba:96:8f:07:39:46:3c:b0:bb:18:be:0e:
                    f3:2f:0e:49:4f:88:32:ba:5c:27:3b:cd:85:c9:85:
                    6b:6f:72:cd:2a:4b:89:1d:91:c1:85:b8:3c:1f:77:
                    1a:ba:44:3b:29:54:12:92:d6:c5:39:40:9e:0e:22:
                    26:86:8f:8f:27:24:a3:8d:43:27:90:2e:91:ab:a5:
                    9e:5c:3a:c9:8d:6d:b1:4d:da:26:b9:ab:63:eb:5f:
                    80:17:99:0b:24:78:bd:0d:ef:ce:07:71:88:6e:db:
                    77:77:e1:0e:c4:92:d7:5e:3c:a9:c8:31:a9:6b:0f:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:45:48:35:F6:9F:24:53:6E:41:87:F6:AF:91:0F:0A:B9:B4:27:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl

            X509v3 Authority Key Identifier:
                keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.131.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:a3:42:09:0e:c1:18:e7:8c:34:5c:c2:fc:dc:88:d9:70:
         52:80:20:6c:56:98:ed:99:80:f3:52:c9:de:e0:4c:0c:da:d3:
         a1:b0:64:90:8c:ce:80:6b:ea:86:0d:b0:64:b6:4a:38:60:f9:
         99:45:8f:07:fb:93:3b:b1:02:b7:a2:cf:8e:37:3b:22:c9:e2:
         16:36:52:b3:20:0f:65:a5:2d:69:63:2a:e1:6f:55:89:c5:e4:
         8e:ca:65:3c:21:aa:f9:65:9f:33:e3:a4:cb:12:fc:73:15:a8:
         5d:4e:9d:51:61:2c:d5:79:d1:41:40:77:78:2e:46:0b:d9:4f:
         3c:30:12:fb:68:1e:58:d7:28:ad:fd:44:53:83:7b:19:7b:27:
         7f:39:f0:59:3c:8f:21:7f:fd:94:98:b5:ee:1b:fb:d6:2f:93:
         56:bb:46:a2:0d:47:4a:15:da:89:15:41:39:c8:a8:fd:bc:81:
         3d:fb:22:d8:7a:bb:60:62:bb:26:a2:5c:72:26:81:fd:c2:ed:
         6b:f0:ff:f8:43:8b:06:2b:40:d1:b0:da:d3:d0:94:7b:ab:06:
         d0:22:f1:36:cf:ea:06:f2:a2:26:3e:8a:79:9c:a4:1a:67:ff:
         35:8e:de:f4:a8:71:8d:dc:26:25:71:82:dd:6a:27:46:d7:7b:
         8c:4c:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:11:49 2024 by rpki-client on console-ams.rpki-client.org