Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/be85d67d-0720-3a49-bc63-74e038ebd5af.roa
File:                     be85d67d-0720-3a49-bc63-74e038ebd5af.roa (raw, json)
Hash identifier:          FFbZEIF0FRFVXvvPvlOAXQiZwbkv7PPelZfZtlZckVE=
Subject key identifier:   EC:9D:92:34:B1:49:3B:85:84:F8:C4:44:B2:40:23:80:D5:C4:A5:66
Certificate issuer:       /CN=ee734db0-353b-4ddd-a33f-8fa55d49a69e
Certificate serial:       010D0C9F4328584726D083FE30C0F6C1FDD53A80
Authority key identifier: 7A:95:C1:FB:A2:78:79:93:B6:7F:4F:04:2C:DF:D3:FD:51:A3:7E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/be85d67d-0720-3a49-bc63-74e038ebd5af.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     397168
IP address blocks:        172.83.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:83:fe:30:c0:f6:c1:fd:d5:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee734db0-353b-4ddd-a33f-8fa55d49a69e
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=01ac4c69-a226-4edf-b7b8-1079789b521e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:5e:00:d8:a8:37:cd:20:49:93:f7:7a:b4:
                    9b:d7:6d:e2:5e:1e:e7:e2:f3:14:39:c4:56:e2:74:
                    b1:0f:2b:68:54:aa:f9:bf:72:c6:b5:96:fc:c9:4a:
                    0f:98:26:94:12:27:aa:e4:90:90:37:47:a2:37:f5:
                    f2:67:ac:ee:c0:5c:84:f0:ed:f1:1b:95:d7:1f:d7:
                    07:ff:f0:dc:de:99:8d:52:48:ad:03:91:e9:19:cc:
                    54:8e:c7:e3:c7:77:4e:40:de:46:23:07:a3:6c:ba:
                    dd:7e:ec:97:e2:70:3d:a8:47:78:c9:13:88:3b:07:
                    9f:82:c2:a7:02:9f:cc:86:7f:2f:b6:f4:d6:65:f1:
                    14:e9:43:7c:8c:0c:25:39:81:b9:39:47:c5:5c:42:
                    db:1f:6e:41:27:6b:98:bc:12:7e:ba:cc:7e:f0:d5:
                    1a:dd:b2:25:03:c3:22:fb:29:3a:f7:59:c6:ae:55:
                    20:2c:ff:0d:a8:f1:f1:c7:04:b4:6a:d3:17:7f:54:
                    d3:f6:b4:c8:ee:a7:31:32:74:82:a3:cb:5e:d2:d1:
                    96:e5:14:31:68:5c:17:6f:62:79:1b:9a:eb:ba:bc:
                    af:e1:9f:57:07:d9:14:57:42:3e:51:e3:db:5d:71:
                    fb:be:02:d8:4c:ac:0e:39:ba:fb:64:8b:c8:c8:a3:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9D:92:34:B1:49:3B:85:84:F8:C4:44:B2:40:23:80:D5:C4:A5:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/be85d67d-0720-3a49-bc63-74e038ebd5af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:95:C1:FB:A2:78:79:93:B6:7F:4F:04:2C:DF:D3:FD:51:A3:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:26:fd:e5:b5:6d:b4:5f:2d:33:97:e6:fd:ee:23:5d:e6:
         80:ba:f4:bb:18:dc:61:41:18:77:72:ae:47:82:f2:43:db:82:
         ed:67:56:46:4a:1a:fc:3b:da:17:3b:bc:55:8e:3d:a1:c0:3d:
         fd:09:0c:c3:63:99:1d:3d:d0:4c:b5:4e:f4:3b:bf:e3:42:45:
         78:9e:ee:18:85:a6:9b:d2:c1:b7:d7:38:01:8f:bb:1b:a6:c6:
         5a:33:1a:cc:12:7a:77:65:e5:0b:bf:14:58:30:fe:7c:77:47:
         ac:51:9d:0b:61:c3:10:2e:a6:8d:d4:50:4d:93:b8:b4:74:d6:
         e8:27:fe:65:56:e1:0b:80:44:86:02:fd:0d:ef:db:35:31:d4:
         1f:1b:8b:c3:c3:41:a7:4a:07:ae:16:dc:ef:ca:ce:fe:68:2b:
         6b:c4:ca:c1:d0:50:d9:5d:d1:0b:6a:5b:5f:ed:66:0e:d5:0e:
         0a:17:8f:35:d2:f9:a4:35:42:79:56:71:0c:34:85:f0:6c:7a:
         6b:5e:06:76:bf:0c:a5:2d:0b:7f:9c:86:ce:fc:d4:cf:06:65:
         24:67:05:b6:47:ca:c4:ed:5e:54:be:8c:65:ee:4f:47:25:85:
         ab:df:30:90:ba:38:05:4f:ab:e5:18:b7:2c:e5:84:94:bd:88:
         65:1c:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:47 2024 by rpki-client on console-fra.rpki-client.org