Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
File:                     c1255ba5-964c-3a54-9623-b83967aa57ed.roa (raw, json)
Hash identifier:          AYym1Rk4N8yg3wsEjfDm5sylSD+iMnzcco2Jd7WUa4E=
Subject key identifier:   3E:FD:40:CC:EF:B9:6B:6E:1B:72:DF:37:76:93:AE:A7:DC:70:44:55
Certificate issuer:       /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Certificate serial:       010D0C9F432858474F4B7234998BDE4131446180
Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     18986
IP address blocks:        148.163.160.0/24 maxlen: 24
                          148.163.161.0/24 maxlen: 24
                          148.163.162.0/24 maxlen: 24
                          148.163.163.0/24 maxlen: 24
                          148.163.164.0/24 maxlen: 24
                          148.163.165.0/24 maxlen: 24
                          148.163.166.0/24 maxlen: 24
                          148.163.167.0/24 maxlen: 24
                          148.163.168.0/24 maxlen: 24
                          148.163.169.0/24 maxlen: 24
                          148.163.170.0/24 maxlen: 24
                          148.163.171.0/24 maxlen: 24
                          148.163.172.0/24 maxlen: 24
                          148.163.173.0/24 maxlen: 24
                          148.163.174.0/24 maxlen: 24
                          148.163.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:72:34:99:8b:de:41:31:44:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=3fa5c856-4d1d-461e-ac5f-fa4624e4db87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:a9:87:63:18:b8:f1:c9:2a:c7:cb:c6:ab:
                    25:14:87:f9:0c:78:9b:97:89:80:ab:8c:40:01:8a:
                    98:28:a9:91:7f:13:2e:e6:a2:0c:0b:6b:62:01:3f:
                    a6:34:30:9a:27:f8:34:db:fc:9f:c5:95:72:97:fe:
                    bb:71:26:8f:f8:96:50:07:33:c6:98:53:09:c3:46:
                    7d:fd:f4:d3:ba:35:ee:fd:e8:d0:84:63:11:5b:2a:
                    e1:1f:38:35:aa:51:6c:f3:fa:2e:da:e2:12:ab:2c:
                    74:83:db:cf:dc:c9:40:4f:a0:59:9e:b0:e8:0f:a9:
                    e6:1f:51:17:a5:e3:3e:c0:c5:69:22:8a:10:a9:da:
                    98:d9:6f:da:38:f6:57:94:48:c3:6f:d6:cc:de:4f:
                    91:e6:b1:6c:18:f9:ab:e2:1f:c0:b4:7d:9a:b6:8d:
                    39:b2:59:e0:90:4d:42:59:6f:4e:5c:35:9d:7b:86:
                    0e:fb:61:ee:e0:8d:bd:b1:a1:55:2b:2c:de:f5:fe:
                    b8:f6:60:ab:5f:b0:c7:ab:5f:cc:44:2b:31:bc:40:
                    b7:1f:48:d5:15:fb:b6:20:99:e4:65:92:fe:c8:1b:
                    4b:fa:b6:5c:b7:ba:e7:20:88:21:e9:1a:b7:61:17:
                    78:ca:d4:1e:68:b7:ed:b5:28:38:7e:80:1d:cd:e2:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:40:CC:EF:B9:6B:6E:1B:72:DF:37:76:93:AE:A7:DC:70:44:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c1255ba5-964c-3a54-9623-b83967aa57ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.163.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:68:8e:43:8f:6f:ef:c5:8a:29:af:ba:66:30:15:4c:a6:
         03:4f:be:21:49:0d:d0:69:5d:9f:74:89:af:b9:58:c0:11:24:
         c5:59:07:5d:71:4d:a8:24:a2:30:d7:e6:a0:ad:a5:6d:53:1c:
         30:ba:b7:b4:78:9a:f2:94:ac:40:cb:bb:0d:44:a6:09:72:fe:
         1f:73:99:de:91:ca:82:21:9e:ab:75:bb:ec:70:43:df:d9:47:
         52:0f:ad:d0:91:77:19:0c:80:81:04:38:b9:50:f5:9e:f4:be:
         3d:ea:68:41:a3:27:a9:72:1f:63:11:8b:2f:0f:86:2f:a8:82:
         8f:ec:7d:fd:5f:96:cf:18:1a:41:4d:68:71:2a:c4:fc:8c:2a:
         01:97:9b:c7:3c:08:00:18:16:a2:8d:9c:e7:ce:b3:ef:5a:04:
         d2:0c:2f:8a:11:ea:27:44:2e:22:ae:1c:b7:cb:52:47:f3:e5:
         1e:18:08:82:5e:85:f4:5d:b4:0e:5e:98:b0:55:9a:c6:ff:4c:
         6e:66:b6:dc:28:78:66:0d:27:97:d4:53:70:c6:58:16:b4:93:
         b3:e5:b2:3a:34:2e:ae:1e:1b:d3:32:47:4b:db:6c:67:72:d5:
         14:69:63:1e:76:63:16:eb:f9:d0:72:e0:52:d1:6a:c7:72:e5:
         f3:84:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:11:47 2024 by rpki-client on console-fra.rpki-client.org