Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7404ae0-7eef-3155-87a4-fd6c76fcf911.roa
File:                     b7404ae0-7eef-3155-87a4-fd6c76fcf911.roa (raw, json)
Hash identifier:          +G4CGp8ejRoAtuTYy6ZeREvgdJFwdaL8hfXcMLe5bcc=
Subject key identifier:   9A:FC:F4:2C:F4:7E:EE:05:27:1E:35:9D:82:8D:E6:3F:66:37:25:32
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285845B21E163F3C52A1B074AE7D00
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7404ae0-7eef-3155-87a4-fd6c76fcf911.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        198.160.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:16:3f:3c:52:a1:b0:74:ae:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=cb53bd6b-c04b-434c-8343-3b0ee5552824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:dc:11:4f:c8:ff:45:7d:85:63:31:64:e0:
                    e6:78:f2:8c:52:73:b6:e7:4f:d1:3e:0e:6f:09:63:
                    36:35:18:bb:b8:89:14:d6:6b:cd:56:76:4a:3f:0b:
                    dc:a3:3c:ae:84:78:f9:f3:0d:ba:cd:56:f7:92:27:
                    0b:04:11:1e:01:3d:71:f9:a2:fa:93:0e:25:37:eb:
                    c5:ac:ba:81:41:1b:56:e3:7e:6f:c7:32:cf:95:9d:
                    28:66:47:75:38:da:ed:55:f3:14:aa:4e:01:83:34:
                    e1:1f:78:80:87:9a:18:5b:1d:be:c4:e4:0a:9c:58:
                    f7:36:79:ab:84:8f:d2:da:90:a7:e8:7e:13:da:66:
                    15:14:47:be:f5:54:8c:db:21:69:08:f6:f1:dc:f2:
                    59:b0:0e:f9:f6:84:00:93:b3:92:9b:77:ca:cf:e6:
                    a9:cc:da:b4:e2:6e:38:f1:3b:de:2d:fe:db:07:f4:
                    b9:17:f7:2b:fe:af:7a:01:05:a3:60:f2:0c:b8:41:
                    4c:d2:d5:d3:22:d9:b6:50:26:f2:42:20:63:6e:76:
                    e4:f1:88:eb:bb:16:58:2d:08:66:c8:7a:d4:5d:e4:
                    8b:d2:01:ed:df:61:ef:df:6c:5a:1b:e0:31:b5:5d:
                    41:d9:17:ee:5a:6e:16:45:59:d9:aa:8a:8c:c2:a0:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:F4:2C:F4:7E:EE:05:27:1E:35:9D:82:8D:E6:3F:66:37:25:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/b7404ae0-7eef-3155-87a4-fd6c76fcf911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:07:07:fb:c8:d2:cc:ac:9f:b8:9b:72:86:ee:ce:5f:38:
         9e:f4:6e:ee:bb:73:18:33:e3:a1:d7:74:c3:a6:91:c7:13:cc:
         97:96:64:b2:c8:28:7c:1d:e6:64:7c:6d:d7:85:e4:0e:eb:a8:
         94:2f:03:c8:c5:47:60:23:e7:b5:2c:68:cf:e0:97:63:74:e8:
         b2:93:67:95:ba:ae:7b:06:d5:96:12:e1:72:fe:7b:f5:6b:79:
         77:50:72:a1:a9:5f:0f:b2:f4:db:50:e0:dc:6e:25:89:41:81:
         cc:38:14:65:38:ef:3d:f3:32:51:13:32:08:7d:39:b2:00:8c:
         04:f9:14:32:19:3b:55:5e:53:4a:a1:03:69:9b:01:66:69:17:
         77:a7:40:21:d6:8c:fd:e7:a4:3d:8f:a5:d0:df:c7:33:8c:33:
         b2:04:fc:2f:aa:f1:66:ee:ca:73:52:96:69:9f:e8:f9:c7:ce:
         27:56:8b:28:15:ab:04:05:30:b5:e4:af:dd:51:08:fe:38:e6:
         f3:62:bf:ef:3a:63:f2:45:d2:7a:c5:2d:29:5f:81:91:e0:d6:
         5a:42:c3:6f:e2:6e:c5:bb:ff:7c:74:51:18:0d:3f:e0:93:4f:
         dd:5d:86:f2:40:6f:08:74:6b:c7:ea:ad:13:b9:67:af:37:ec:
         7b:a9:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:11 2024 by rpki-client on console-fra.rpki-client.org