Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51eb4884-953a-33ab-8f23-19232ed0aa9f.roa
File:                     51eb4884-953a-33ab-8f23-19232ed0aa9f.roa (raw, json)
Hash identifier:          zleid0vTFILAfqqxUEMCSw6Cp5s86lvEG5K9kDVwQvA=
Subject key identifier:   9F:FC:2C:BD:8C:74:35:76:75:0D:76:48:96:74:23:C8:8A:32:28:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1F9FC911A1B61F97A3EA040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51eb4884-953a-33ab-8f23-19232ed0aa9f.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.200.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f9:fc:91:1a:1b:61:f9:7a:3e:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=7112ca20-083e-4df3-a868-470bec4fbe7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:37:72:a0:7d:09:f2:bb:f9:94:c3:7e:2f:
                    f8:80:44:e5:ae:fc:85:26:b6:55:d3:2b:c0:9c:e3:
                    79:81:0e:81:9d:2b:e1:5c:ff:8d:fe:52:94:0a:00:
                    6b:c3:40:48:ea:e6:3b:2a:d9:72:26:90:32:0f:62:
                    b5:16:e0:a2:d5:c4:95:88:b4:10:db:c8:9c:4a:b0:
                    c0:f6:8f:90:24:3e:e8:f7:08:58:76:11:df:35:97:
                    1f:e1:36:4f:63:69:18:97:25:4a:3e:65:af:39:04:
                    66:89:ce:54:b8:27:1d:65:ea:69:34:d3:70:8e:62:
                    4a:5a:44:bc:05:f1:24:80:da:86:77:d9:4a:cb:f7:
                    9d:1b:e2:59:7d:ff:6f:5d:a8:af:1b:ba:42:f9:6b:
                    a3:e2:da:34:8b:65:6a:4d:a6:74:5c:0b:e4:f0:62:
                    11:b9:d6:1e:dd:a9:4c:ba:30:34:e9:9e:e2:00:47:
                    15:8f:97:8e:50:32:af:1d:da:ac:f3:a2:f9:ca:a1:
                    75:87:59:a4:5f:e1:ba:1c:bc:60:d3:24:d3:b2:ab:
                    d1:79:2a:88:ef:9d:5a:62:b6:63:9f:3a:5d:e9:2a:
                    80:c6:7d:72:41:3a:55:18:71:f8:8d:4d:b4:d7:7f:
                    d9:3f:56:50:04:72:cc:fb:00:bc:24:6c:11:60:b3:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FC:2C:BD:8C:74:35:76:75:0D:76:48:96:74:23:C8:8A:32:28:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51eb4884-953a-33ab-8f23-19232ed0aa9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.200.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8c:bf:13:0f:5c:3a:b9:df:64:73:24:aa:de:1e:9d:55:f5:
         13:b0:f4:c1:a2:46:dd:6c:2c:09:c0:b5:2f:0a:00:78:4f:e7:
         3e:73:f4:08:48:cf:d5:dd:67:f0:dd:8f:26:e5:87:34:7a:30:
         e0:c9:7d:28:5a:c4:e9:8b:6c:6b:4c:28:ad:d0:0b:d9:5f:76:
         9c:67:5c:c7:84:4f:ec:4d:96:ab:be:13:37:58:11:51:50:32:
         97:5d:a6:35:e2:14:21:18:f3:b3:ba:81:7a:4a:9e:dc:b5:08:
         5d:92:b6:64:83:4d:b3:f0:7a:da:c3:2a:43:f8:00:91:64:ea:
         15:23:6d:af:5e:ba:55:02:f3:a7:be:d4:7c:4a:5c:fc:9a:a8:
         5c:4e:4f:43:99:b4:3e:b7:a3:10:24:06:5a:9d:b2:99:96:7e:
         9a:8e:c0:26:1e:fa:52:5b:fa:41:8a:67:79:a0:11:29:e7:17:
         fd:bf:3c:f5:3c:40:8f:2f:26:16:83:1e:eb:db:d9:09:25:47:
         29:e3:fa:e7:ea:0c:1e:a8:17:bb:6c:41:2b:30:3d:e8:16:4c:
         13:e2:f8:65:b8:50:a8:fd:b0:6d:d9:3b:4f:e8:a4:b1:bd:d5:
         21:1a:d3:06:15:b8:f0:52:93:45:62:a0:9b:d0:7a:be:e6:3f:
         59:8b:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:26 2024 by rpki-client on console-ams.rpki-client.org