Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa
File:                     31157718-1d9b-3397-ac07-a6037d33d8f0.roa (raw, json)
Hash identifier:          kYYEcz8C68TVmjfLaRHEFXno9EmzJ123ecdIgrRV20A=
Subject key identifier:   77:84:0E:59:91:AD:10:3D:86:7C:9F:16:7A:E0:31:FD:05:24:93:9B
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285845E72913DD152F6FE5553758C0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     400618
IP address blocks:        161.129.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:13:dd:15:2f:6f:e5:55:37:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=f7d2e6a7-a3f9-4081-ba4e-d33af170e92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:b3:dd:36:16:69:0e:f5:73:21:04:84:e5:
                    53:8e:a9:ad:df:a7:88:85:52:7f:77:65:76:a0:14:
                    df:f1:56:38:fd:2c:a6:78:b9:80:cc:4f:43:06:67:
                    e2:ad:30:f4:4c:40:f5:1b:3a:ee:1c:a4:b5:23:91:
                    35:73:00:fa:df:b0:e0:bd:44:34:27:9c:09:62:6b:
                    b8:95:81:7e:7e:3b:69:d1:d0:a8:f0:ab:30:1c:f8:
                    00:c1:13:fd:27:33:49:a0:7b:19:6d:22:27:8b:62:
                    7f:92:a6:91:90:12:f3:9f:a4:06:c2:c7:97:a6:05:
                    97:7e:f7:f6:7e:f5:b8:5d:d1:bf:c6:61:36:1e:d2:
                    23:f7:f5:a8:b6:06:8f:a4:3f:28:eb:f3:3d:df:b5:
                    83:00:2b:a1:78:0d:82:f2:57:5e:81:e2:ad:50:05:
                    0d:d3:13:8d:50:e6:58:d7:c7:4d:09:16:5f:36:c7:
                    78:45:9e:54:a9:66:d2:df:35:18:0d:1b:20:94:be:
                    34:fa:52:dc:11:a6:eb:84:b9:c1:9b:80:8c:b7:0c:
                    2c:b3:db:f1:3c:e8:e8:8a:29:ec:3c:ee:13:0e:c4:
                    71:db:cc:a4:65:97:01:31:17:7f:82:b1:84:fa:f8:
                    37:43:8d:5c:09:51:92:10:a4:0c:a4:c3:8e:0e:34:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:0E:59:91:AD:10:3D:86:7C:9F:16:7A:E0:31:FD:05:24:93:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:4a:fa:2f:d5:32:6c:3b:86:ea:2f:75:0e:24:be:fa:0e:
         57:1d:78:29:22:e7:19:85:4c:92:92:c1:7f:da:1b:82:d0:15:
         55:1f:f9:b8:c3:01:6d:c2:fc:dc:96:1c:1c:75:55:4a:d3:25:
         c0:ed:3a:94:c0:b9:23:93:a0:e0:98:3a:ae:6e:17:bf:ce:d6:
         4d:6a:bc:95:63:af:2e:2b:20:b9:07:d0:cd:0e:86:1d:7d:c8:
         33:1b:12:a1:e0:b8:b9:55:f0:58:92:e8:2d:0b:22:44:52:48:
         61:8a:aa:0c:0c:2e:e5:f7:60:a4:17:06:02:99:c9:8c:e0:24:
         8c:46:b2:43:cb:60:0d:9d:6f:1f:d4:d0:86:67:c6:5f:7f:78:
         2a:eb:2c:4e:ad:23:29:52:90:0b:50:fe:b7:0d:ef:83:b1:e7:
         7b:4b:65:fd:d0:ce:ab:23:98:38:eb:b8:a1:d3:3c:8a:82:76:
         ae:16:98:43:58:95:84:5d:73:72:34:67:68:3c:20:98:25:ae:
         66:28:51:8a:1e:ea:7e:a0:f2:b8:05:83:ba:2c:f1:2e:df:dc:
         0a:37:29:54:b4:bf:d1:c4:16:23:7c:16:08:a5:14:39:8d:09:
         7e:39:87:31:4f:9e:da:45:a3:82:77:0c:66:30:72:59:67:a4:
         0d:e3:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:39:43 2024 by rpki-client on console-fra.rpki-client.org