Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/aabc5d96-0daf-3067-b09f-0660862c00b1.roa
File:                     aabc5d96-0daf-3067-b09f-0660862c00b1.roa (raw, json)
Hash identifier:          iogqnkVMAHUZS1iV83KxwNYYqOqdItKL+sPz/H9HItI=
Subject key identifier:   80:8E:07:5A:7C:76:FE:BF:79:18:4A:58:D9:C4:ED:F6:89:A3:D3:10
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285847B1016A8424E1327EA5E32780
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/aabc5d96-0daf-3067-b09f-0660862c00b1.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     16904
IP address blocks:        104.153.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:6a:84:24:e1:32:7e:a5:e3:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=4c597cba-dc5c-4047-884f-3219ea555f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:77:af:e9:aa:5d:01:d0:a1:4b:26:71:19:
                    3e:7d:05:9c:0f:08:30:70:32:4d:27:7e:97:c5:a7:
                    5e:fb:6e:f7:73:8a:a8:5f:78:04:c3:6e:1d:d8:16:
                    46:de:e5:0b:fa:fa:a9:64:ea:5c:4a:89:fb:6b:37:
                    f1:e7:07:05:75:91:5e:bc:c3:9f:8d:f9:3f:0f:ac:
                    45:98:d3:29:5a:0b:d9:4c:b9:38:d6:05:f9:eb:f8:
                    15:53:c0:58:96:70:69:e1:e1:46:ef:f4:1c:1e:d1:
                    05:42:a9:86:5c:1e:d8:6b:c6:47:a9:c9:bc:8b:d2:
                    e6:4d:3f:ee:d1:97:9f:d6:6f:36:c1:cf:01:f6:85:
                    8a:81:36:a8:44:ab:76:61:45:3a:c1:d9:e4:df:a5:
                    22:f7:3d:14:1f:f9:dc:02:29:78:f1:b9:c8:f1:c7:
                    50:80:9d:ab:55:69:70:72:d0:03:37:e3:c7:01:21:
                    05:02:bc:b9:37:94:61:9c:b7:52:0c:01:8f:28:59:
                    a4:d3:dc:c0:2b:cf:14:db:ad:4f:a6:d7:7e:c3:e1:
                    e0:3e:79:98:a5:9e:55:86:8c:ed:0c:1a:e9:13:1e:
                    03:c2:4e:c8:f0:e6:a8:73:62:2b:08:cf:10:68:ce:
                    5e:cd:e2:aa:71:6e:3c:51:d4:bb:61:f3:4c:df:58:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:07:5A:7C:76:FE:BF:79:18:4A:58:D9:C4:ED:F6:89:A3:D3:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/aabc5d96-0daf-3067-b09f-0660862c00b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5a:b3:de:c3:68:29:41:ec:47:78:60:38:b9:23:de:1a:91:
         76:86:90:72:ff:d0:8c:d0:1f:20:71:1e:3e:de:8a:9b:1d:fe:
         0e:63:1c:11:27:b2:b5:86:ca:4c:91:5b:c1:5b:08:28:34:16:
         17:14:e5:8f:02:7b:8c:83:a2:78:37:48:3e:41:2a:f0:75:91:
         8a:83:31:e8:bd:ba:5a:b9:7a:ce:0c:4f:41:4e:1c:e4:22:91:
         0b:77:5c:c7:8b:30:aa:75:90:b7:05:a5:3c:4a:9d:37:be:83:
         09:65:a4:58:a5:4c:7a:15:98:3a:f7:86:eb:9c:d6:16:d7:78:
         47:7a:90:b5:74:1c:ca:b5:73:df:c2:1a:05:19:f0:06:c2:3c:
         05:b0:ee:11:49:dc:e5:fe:06:80:b3:ad:03:16:d4:f1:42:f5:
         96:66:84:fb:47:e4:16:51:d6:b8:3f:96:c6:b1:0d:9a:81:55:
         04:fd:e7:c1:eb:35:ab:b6:90:a1:70:1f:6d:b3:e3:58:e4:bd:
         92:f8:f4:75:61:d5:3f:23:c8:41:c2:71:43:d6:ae:d6:a6:a1:
         65:fa:cc:93:d6:24:d5:d1:a0:e0:82:50:f0:f7:8b:86:1d:85:
         76:57:0b:55:d1:58:c7:b2:64:e6:19:0b:ce:43:a9:6c:a7:66:
         45:d7:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:08 2024 by rpki-client on console-fra.rpki-client.org