Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa
File:                     33a15d20-681d-3fde-98e7-9009e686b584.roa (raw, json)
Hash identifier:          1MPoXxyUZJNxZIhb2PCtQ0xIhJBSmMmFi7mmYqSM8yQ=
Subject key identifier:   7C:DB:23:E0:95:EC:80:37:44:A7:AE:65:FB:F3:95:D4:62:27:97:11
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285844D17FBC5028C4EE474EF83480
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa
Signing time:             Thu 08 Feb 2024 02:00:26 +0000
ROA not before:           Thu 08 Feb 2024 02:00:26 +0000
ROA not after:            Wed 08 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        198.160.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d1:7f:bc:50:28:c4:ee:47:4e:f8:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Feb  8 02:00:26 2024 GMT
            Not After : May  8 01:00:26 2024 GMT
        Subject: CN=5cfd6b32-8073-47ed-94dd-63e98fcec3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:ee:a3:aa:74:a0:b8:59:bf:a4:d8:19:a9:
                    9d:ea:59:66:a9:7f:35:4b:a4:4c:82:01:8d:49:f2:
                    0b:58:df:23:1a:9b:df:17:96:56:6c:8d:90:bd:62:
                    b8:e6:42:3c:5e:09:18:4c:01:9f:14:35:1c:44:62:
                    c6:63:58:e7:d4:f4:49:8d:f3:b5:87:2e:67:b3:38:
                    0c:c5:31:33:9e:48:8b:47:41:9c:dd:e5:be:0e:cf:
                    37:a1:88:ea:18:62:db:0a:6d:71:66:75:f9:f6:c5:
                    f5:b0:40:5c:7c:7e:9a:65:ac:9f:d0:26:b5:4d:51:
                    8b:4e:83:f3:ab:d6:85:8f:a0:e9:7d:33:be:18:97:
                    94:39:aa:08:0e:19:9d:e1:f2:42:70:30:20:5e:ed:
                    5f:d8:d2:95:00:13:a1:c6:7d:d4:46:18:4c:62:73:
                    90:69:81:8f:3d:ff:26:6c:37:33:20:ef:82:35:ef:
                    a4:c2:5d:8f:86:c3:bf:67:67:1e:66:1b:a6:d4:57:
                    0a:ce:32:03:7e:00:05:4a:f8:ba:e6:bd:df:fd:5a:
                    7e:84:52:4b:3a:0c:69:9f:7b:bf:44:2a:05:44:03:
                    bd:8f:f2:d2:d2:af:20:fb:f6:c7:25:75:11:85:c6:
                    b0:af:b4:f7:3e:5c:e7:b7:f4:d6:9c:d3:53:fb:18:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:23:E0:95:EC:80:37:44:A7:AE:65:FB:F3:95:D4:62:27:97:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/33a15d20-681d-3fde-98e7-9009e686b584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:db:cd:f5:c2:81:97:35:70:3f:7f:79:13:e4:f4:6a:95:
         7e:44:e2:42:21:f1:c8:04:84:5e:e4:69:ad:49:ad:00:8e:89:
         8b:63:d5:7c:f9:83:4e:43:80:e9:01:07:49:ff:5e:0f:31:2c:
         9c:84:92:f1:41:d9:9b:03:75:40:ca:a5:d5:e8:ea:f2:c3:e8:
         2d:8c:ea:50:0d:ef:04:60:de:22:46:62:3e:df:47:f2:d7:b8:
         af:8f:3d:2d:3c:27:1f:4e:c5:4e:8f:64:1b:f8:d5:0c:a6:bb:
         f2:1c:b5:fd:5c:8c:d8:84:d5:dc:bf:48:7e:42:06:7c:01:56:
         82:cd:45:ca:0b:b1:e1:93:33:64:1f:4a:f9:27:60:ec:21:2e:
         f4:c8:e2:a8:f1:1f:e0:c7:b7:67:4e:6d:f3:63:38:4f:ef:30:
         57:df:cb:59:f5:9c:17:ec:0b:c0:a7:bb:75:d2:d0:59:64:7f:
         98:97:2c:ce:c3:fe:d7:c3:dd:ee:4b:96:06:17:c3:06:ba:f3:
         a0:72:23:13:44:bd:c0:32:19:d5:5c:08:d5:b3:a1:32:bc:66:
         1d:da:14:37:6d:13:ff:3f:e2:6c:e9:23:7b:03:88:a1:c0:9b:
         5e:b1:89:0f:3e:7c:bd:56:a3:62:df:de:11:a3:16:0d:4e:e2:
         28:65:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 11:14:13 2024 by rpki-client on console-ams.rpki-client.org