Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa
File:                     f9a2facb-e73a-3151-8001-8276673133ae.roa (raw, json)
Hash identifier:          SfSdGzRElyO5+5UpCUiQjaaGqkbRaR3KQM4LsO0BB+c=
Subject key identifier:   08:50:85:81:7F:92:87:A2:E8:04:22:95:D8:55:AE:E1:B2:F3:C2:44
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858453A12AD090BAEA73F7DB9AA40
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     11090
IP address blocks:        198.135.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:ad:09:0b:ae:a7:3f:7d:b9:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=7ece11ab-e849-46a1-853a-19efa4141edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:f0:f6:c4:95:a9:70:57:77:0e:c6:23:1a:
                    cd:d0:38:f0:d0:3a:b4:6d:65:ae:aa:c6:9e:6c:cb:
                    b2:e8:54:69:51:ae:e7:4b:d0:f7:bb:d6:7e:09:6d:
                    86:fe:42:55:86:50:99:81:6b:36:7b:ed:65:31:56:
                    00:f6:d0:3c:44:62:cc:1f:f3:49:10:dc:a8:a7:91:
                    28:93:29:25:f5:3d:6e:11:8c:99:d9:38:36:fd:ed:
                    e0:0c:f6:d0:ff:2f:9c:ab:11:2b:76:2d:95:29:29:
                    c8:61:2c:a6:c1:b3:d2:59:83:64:e0:6b:79:cf:07:
                    7d:67:b5:ec:99:fd:8e:0b:87:ef:a1:4a:d2:1a:8f:
                    80:36:10:6e:90:28:19:d2:65:5a:af:58:51:60:1d:
                    64:97:0a:b2:18:ff:d0:ce:b4:d4:9a:8f:0b:70:ca:
                    32:da:c8:5a:b7:a4:f3:0c:a2:2e:32:ca:14:bf:c7:
                    84:85:57:65:1f:8e:0f:db:70:9b:17:58:44:af:2b:
                    8c:6a:48:e4:fe:32:67:77:f3:98:ce:4e:26:35:0a:
                    19:f4:41:f0:c7:15:55:b9:93:41:38:90:3d:ea:c8:
                    de:91:5d:dd:e9:b3:de:df:f8:21:b1:57:74:27:10:
                    85:bf:da:42:32:f5:bc:7d:a2:8f:e2:88:aa:e9:33:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:50:85:81:7F:92:87:A2:E8:04:22:95:D8:55:AE:E1:B2:F3:C2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f9a2facb-e73a-3151-8001-8276673133ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:31:ec:41:d5:95:af:5d:d1:69:8d:6b:e6:e6:65:d9:f6:b7:
         be:80:ee:60:c9:db:4d:97:42:1b:a9:15:81:5f:8e:0c:40:b8:
         b3:63:2f:4c:67:65:b9:d5:9a:9b:73:55:d8:b2:4c:fa:19:0e:
         91:99:64:43:70:42:60:f0:bd:ad:54:c4:c0:7c:4b:9b:cb:65:
         bc:46:ca:be:1d:9d:f2:d6:d6:69:3b:91:d8:15:a3:78:7d:1c:
         cc:c6:f3:58:a7:61:9c:d9:c1:0d:65:b0:8d:34:d5:0e:67:9e:
         67:8a:6b:0a:09:31:7f:58:84:5d:9b:d6:14:3d:c6:a4:b3:dc:
         bb:86:50:ce:33:c9:60:0a:43:53:58:2f:15:29:b3:a5:aa:39:
         eb:7d:04:61:e8:ad:28:3d:11:53:6d:30:9a:62:28:d3:55:03:
         ae:08:72:89:fe:2a:54:33:1f:61:11:75:79:f6:10:59:ba:a9:
         4b:b5:21:da:bb:60:47:1c:1a:b0:50:cc:15:e3:17:98:07:32:
         03:72:c6:85:03:35:03:17:67:66:80:f4:e2:6b:4a:fb:9d:ee:
         03:29:18:fc:a3:cc:11:9a:da:88:9e:c8:f0:8a:f9:bd:66:36:
         bf:c1:8a:5f:e0:2d:69:0e:66:19:9b:d5:4b:0c:53:42:a5:de:
         ad:6b:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:11 2024 by rpki-client on console-ams.rpki-client.org