Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22180221-b8cb-3b12-964c-e2d163475428.roa
File:                     22180221-b8cb-3b12-964c-e2d163475428.roa (raw, json)
Hash identifier:          XFg8FqgtYK8/+7qqifhhgqEDWB/SAyfz7zk7TvrLwt8=
Subject key identifier:   32:EA:DC:38:B9:7D:BD:67:C7:9C:1A:D9:61:0D:23:0D:05:F4:5B:16
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A10CDB3025A7EB951F4480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22180221-b8cb-3b12-964c-e2d163475428.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        131.148.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:0c:db:30:25:a7:eb:95:1f:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=92651ae8-f9fd-492d-ac10-3f12cbe98d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:19:72:1a:31:16:8f:6b:0a:6e:df:25:e8:
                    5d:ac:2a:28:09:0e:45:52:ca:3d:f4:cf:6e:0b:92:
                    ee:85:7e:e0:50:f3:69:b1:83:c8:55:39:e8:dd:cd:
                    db:07:7b:02:15:a3:7c:36:ee:78:9b:7e:81:f8:cf:
                    0b:3d:65:17:8e:a8:e4:ed:ff:40:e9:5c:f7:ac:12:
                    32:5c:34:15:07:4a:55:72:5a:ea:37:24:47:e7:cb:
                    97:b8:51:4a:60:15:4a:c1:bd:e8:25:fc:39:6c:43:
                    be:0a:b1:b8:5d:1a:17:02:b1:ba:1c:10:63:6e:3a:
                    9c:b6:54:73:28:9f:16:fd:39:63:7f:c2:f0:2f:9c:
                    b3:d8:4e:3b:44:c0:07:bc:ca:7d:7d:01:3b:a0:c6:
                    8c:fa:36:72:b0:5b:ea:4a:3e:f3:32:c3:54:d3:78:
                    e3:4e:ee:46:eb:a8:ef:26:f8:2d:12:ae:52:67:34:
                    0f:c5:f6:85:e9:fa:d5:73:f0:33:19:e5:d3:6f:d5:
                    38:bb:a2:9b:85:be:36:8a:6e:c8:b1:ce:e5:90:8f:
                    f8:f8:68:81:20:22:8e:fd:55:1f:79:cf:33:c6:3f:
                    7c:de:13:de:2c:83:e3:bc:88:c6:6a:0a:a3:a8:50:
                    8f:9a:cf:5d:a5:96:14:47:1f:ff:38:13:ae:b6:d8:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EA:DC:38:B9:7D:BD:67:C7:9C:1A:D9:61:0D:23:0D:05:F4:5B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/22180221-b8cb-3b12-964c-e2d163475428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.148.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:f4:c3:31:7b:7d:53:f6:5d:6b:04:8c:8b:8f:51:3b:eb:
         07:ab:1a:3b:72:93:ae:7a:5e:e5:2b:e0:52:d4:76:d5:70:45:
         7d:61:cb:a5:d0:a8:70:61:70:ae:cd:09:11:87:81:4c:81:f8:
         2f:4f:e2:a4:99:04:3f:5d:c7:eb:8e:2d:be:fa:2f:18:85:46:
         0a:64:e7:85:09:4b:65:3e:46:17:57:2e:11:38:79:b6:5e:54:
         c7:d1:3e:20:b4:47:3b:00:c7:55:72:90:04:19:8d:f5:75:da:
         a1:21:e8:f3:ec:e1:a6:97:f3:ec:21:80:6e:b7:be:21:94:ea:
         89:9e:2d:9f:7f:e9:0c:ba:f6:2d:c4:f4:85:be:5a:96:3a:09:
         4c:1f:6e:1d:e3:d7:6b:5d:0f:6e:2e:73:48:b6:a9:b2:a8:c0:
         cb:a0:f7:82:72:e5:45:61:9c:56:c0:62:f2:f5:6d:de:38:ba:
         93:97:05:4f:7b:1c:8c:4e:51:1b:ef:9c:c1:9e:89:37:22:49:
         d2:3d:0e:9a:b7:37:10:d6:2b:de:12:9f:de:99:91:0c:8b:ce:
         47:36:26:d5:63:04:18:a0:8a:67:64:aa:93:a3:e7:2a:0d:b4:
         e9:5b:82:11:f7:93:49:48:0a:6a:96:ae:58:18:29:ad:4c:99:
         f0:52:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:04 2024 by rpki-client on console-fra.rpki-client.org