Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/6f696c03-f570-3db2-b18a-e6bd15ba93be.roa
File:                     6f696c03-f570-3db2-b18a-e6bd15ba93be.roa (raw, json)
Hash identifier:          Jn3Esi4HqIPYP1hYVteQoQUvpTaV4sxjR5Jlh8eiQxo=
Subject key identifier:   B6:AF:43:CC:E8:C0:FE:03:CA:E0:0D:F3:06:6A:94:53:83:DA:AF:A7
Certificate issuer:       /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5
Certificate serial:       010D0C9F4328583E9EAF4AA96780EBB2C34A1860
Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/6f696c03-f570-3db2-b18a-e6bd15ba93be.roa
Signing time:             Fri 01 Jul 2022 17:33:08 +0000
ROA not before:           Fri 01 Jul 2022 17:33:08 +0000
ROA not after:            Mon 21 Oct 2024 04:00:00 +0000
asID:                     20473
IP address blocks:        198.62.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9e:af:4a:a9:67:80:eb:b2:c3:4a:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5
        Validity
            Not Before: Jul  1 17:33:08 2022 GMT
            Not After : Oct 21 04:00:00 2024 GMT
        Subject: CN=e442aca3-ecd8-4ba2-9f45-a96ed0709d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:86:ec:7b:b3:36:90:d8:90:4c:58:84:1b:
                    38:36:fe:25:68:74:2c:24:8e:c6:99:8b:d8:93:e7:
                    1a:f4:7e:07:d7:05:38:b3:d5:a0:90:15:80:b5:fa:
                    42:89:e6:5a:d9:cf:af:ff:30:99:35:fa:fd:f4:43:
                    64:d6:79:a9:d8:ca:06:d2:ac:74:cc:e2:20:01:92:
                    ff:b8:e0:63:a6:c6:18:2e:b2:e7:8e:0c:46:5b:00:
                    0e:61:e2:98:40:73:88:36:9a:29:50:35:3f:c1:3c:
                    f5:b8:28:60:6f:08:e5:f1:e3:24:f3:2a:c4:13:2f:
                    32:5c:49:01:0c:b4:9a:3a:24:1a:2d:32:3d:28:59:
                    b4:8d:f2:9e:cf:99:2f:9c:a0:7e:9a:a8:ed:7c:4a:
                    f0:83:f8:1b:22:4e:d5:bf:ba:8d:40:32:19:9d:ee:
                    c6:8a:a4:f6:98:58:28:cd:5c:da:be:e3:9b:05:70:
                    f9:7d:65:ee:d7:fe:f7:e7:ff:37:1a:a4:e5:ab:f8:
                    7a:ee:a6:58:57:0e:ac:f2:f9:2e:d1:b5:43:c8:c9:
                    64:de:d5:21:03:98:4d:60:7e:33:ad:bc:ee:38:74:
                    ac:ff:72:ca:30:d9:6f:66:fe:bd:d9:f2:7d:fe:4d:
                    aa:1b:6e:b9:dd:5a:cf:6a:44:17:ba:9e:73:26:c4:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B6:AF:43:CC:E8:C0:FE:03:CA:E0:0D:F3:06:6A:94:53:83:DA:AF:A7
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/6f696c03-f570-3db2-b18a-e6bd15ba93be.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl

            X509v3 Authority Key Identifier: 
                keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b4:45:01:9a:46:11:7d:ae:46:42:1a:a6:e6:e0:48:95:9c:
         7f:de:54:71:78:53:87:3a:fe:d4:fd:39:14:18:9f:58:b8:f3:
         37:31:62:64:34:db:f0:42:ae:c8:5d:5c:d8:d3:cc:aa:51:8f:
         8d:e1:00:f2:70:b3:cc:72:6b:f5:e0:1f:02:0d:8e:91:78:c6:
         e7:10:37:da:23:4b:74:e7:8b:8d:84:56:33:93:c8:3f:fa:20:
         09:0f:4e:1e:f9:f1:4d:b2:74:3c:64:e2:98:b5:da:65:58:da:
         bc:2e:0a:2c:59:46:d4:2f:e6:eb:7e:c6:54:c0:92:08:7a:20:
         13:d8:b1:8c:82:fc:f3:8f:ce:04:c3:3e:ec:76:8f:67:57:76:
         f3:05:55:1d:fd:e0:2c:22:a9:79:3e:bf:2e:d0:b7:69:c3:44:
         b1:79:bc:ce:c0:35:0c:3b:84:aa:d6:c9:c5:27:7a:b6:42:85:
         b6:f3:de:9b:3e:44:a2:37:cb:7d:f5:84:61:0f:c0:40:5c:94:
         96:49:69:91:ad:06:60:60:48:81:dd:15:ec:ac:9e:aa:29:7a:
         be:ee:16:f4:17:88:7c:c6:92:a3:98:3d:52:c1:63:6f:33:9a:
         39:5b:33:35:9b:14:f4:4c:0a:7e:79:46:ef:6f:e5:a6:83:27:
         7c:1b:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:59:00 2023 by rpki-client on console-fra.rpki-client.org