Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f92c8-1e89-30bc-9b44-33795e6719a9.roa
File:                     b18f92c8-1e89-30bc-9b44-33795e6719a9.roa (raw, json)
Hash identifier:          9gZuj9gRfDHfp7naGFFqa/222sfsACancaHxUvviB70=
Subject key identifier:   66:65:8B:AB:DF:49:B3:14:ED:5C:C8:50:73:5B:D7:98:9B:0F:88:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76CCB7CF48A21ADCB7DD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f92c8-1e89-30bc-9b44-33795e6719a9.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        151.201.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:cc:b7:cf:48:a2:1a:dc:b7:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=f8867f59-5ebb-4be3-948e-3f727e233c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:b8:64:d0:c1:b9:66:36:90:5f:4f:76:a7:
                    66:95:93:71:3e:53:ab:d9:c8:00:b3:91:d1:ab:8a:
                    1c:c1:9d:c2:6c:c7:3f:df:da:c5:9a:d9:ab:da:25:
                    c4:fb:54:4a:4e:59:c2:7e:3a:1f:9a:b8:63:14:56:
                    5f:2a:8b:bb:4d:8d:9b:36:52:42:73:64:6c:40:46:
                    15:18:19:b3:2a:c3:df:d6:11:1d:fa:83:ee:d3:f2:
                    8d:ba:68:20:b6:cf:1a:7b:e1:9a:b5:db:b9:cc:d2:
                    25:8c:43:f6:d3:49:62:81:f0:6c:82:ef:60:86:bd:
                    c8:57:d3:99:f8:45:56:99:cc:6b:a9:35:6e:d4:8c:
                    6e:ca:fe:3a:03:5f:a6:d9:21:96:dc:bc:de:c3:c1:
                    53:a2:3e:02:96:d3:f8:92:b4:09:b0:08:fa:91:e7:
                    47:68:52:f9:a7:cc:25:98:9a:42:3f:12:50:c6:52:
                    a3:5c:37:f4:9c:f4:5a:19:68:19:ba:76:c2:4e:87:
                    a3:54:82:1e:d8:99:4a:8e:2b:31:ff:d7:34:76:f4:
                    db:a0:b1:63:b7:33:1e:d0:70:92:75:a7:00:b6:ab:
                    82:68:09:d6:b8:36:c9:17:d4:8f:8d:62:67:ce:bb:
                    fa:8a:64:c6:41:d7:40:f6:0f:09:20:4f:c1:d5:3f:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:65:8B:AB:DF:49:B3:14:ED:5C:C8:50:73:5B:D7:98:9B:0F:88:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b18f92c8-1e89-30bc-9b44-33795e6719a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:41:0b:ed:6f:86:f9:a7:f9:2e:f9:8d:ee:57:dd:17:12:fa:
         c6:2f:9f:33:e2:bd:a8:1e:90:13:37:a8:8f:b0:6c:14:86:2a:
         1d:a6:bd:f7:71:12:5b:27:6d:85:e2:87:71:f4:52:81:74:3a:
         6b:43:13:92:68:dc:81:ae:80:a0:2b:97:9a:90:9e:4e:60:cc:
         9f:03:db:ad:45:b2:3d:04:8a:1b:f7:cb:ef:38:44:cc:71:a4:
         bc:b3:49:6b:d3:58:ff:4a:79:f4:6a:84:8d:30:e6:db:74:6e:
         fd:79:27:6d:f1:10:c6:13:04:78:ba:46:6e:f8:3e:21:32:7b:
         00:e0:99:3d:cc:a9:d3:c8:7a:29:b9:00:90:0a:21:0c:93:7e:
         2e:07:ff:62:9c:43:3b:ac:96:d0:7b:9e:5b:e0:c3:ec:9b:05:
         93:85:e7:7b:0a:61:44:3b:85:3a:8d:fd:f3:31:e1:c2:ae:2a:
         43:ad:f6:8c:6b:c6:73:9f:d3:e6:09:31:d9:e9:2f:d6:36:4f:
         67:fd:e4:e8:cf:a1:be:aa:bf:d3:84:9a:0b:1b:20:33:c0:2e:
         c0:96:2f:f7:91:41:1f:f4:6c:16:76:33:f5:3d:c8:cd:cb:d3:
         3a:49:d2:ad:70:ce:8a:f6:00:c6:78:36:e8:12:d5:33:ce:89:
         25:fb:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:48 2024 by rpki-client on console-fra.rpki-client.org