Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c51b0613-46f1-3adf-a87f-ce47427afc0c.roa
File:                     c51b0613-46f1-3adf-a87f-ce47427afc0c.roa (raw, json)
Hash identifier:          ixjEdInp5dR8WN4WqKaXLkgmd/fUQfTPX6kgQ494boY=
Subject key identifier:   20:DD:75:54:FB:67:08:01:19:93:57:45:83:59:44:04:EE:53:A8:35
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285845D39E4FB4A4D79683391ABC80
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c51b0613-46f1-3adf-a87f-ce47427afc0c.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     140096
IP address blocks:        161.129.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:4f:b4:a4:d7:96:83:39:1a:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=cb0995d3-f872-4895-911e-5d81a5a1b2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:00:11:8d:11:30:a6:a7:30:13:39:e4:6d:
                    de:13:7a:8e:3e:c9:2c:97:2a:6a:89:9f:ad:b9:04:
                    3c:9f:c6:da:f8:3a:7c:ad:35:a6:a5:b1:46:08:de:
                    0e:5e:48:72:15:f5:9b:c0:71:e1:fa:05:57:78:40:
                    61:a3:54:fb:57:c9:ff:9c:84:78:02:a5:bd:cc:a1:
                    ed:ca:6a:c5:99:59:c0:97:39:ac:17:f5:5b:45:97:
                    f2:b7:4f:44:c3:d5:44:50:ae:51:35:73:ad:1a:ad:
                    0d:ea:7d:69:8d:2c:66:df:75:d1:03:30:08:93:25:
                    fb:85:34:28:ba:58:34:73:cf:2b:dd:91:f5:01:c7:
                    d1:0c:6c:1a:fc:32:2c:2b:40:6f:93:b5:78:88:b0:
                    d5:9f:e3:7b:6b:07:81:66:0c:9f:a4:dc:49:6b:1b:
                    43:b4:22:d7:38:c1:0f:51:2e:4d:8d:47:af:3b:29:
                    3c:bf:46:b3:2b:91:da:61:b4:52:38:0d:14:c7:43:
                    51:6e:ab:6a:1c:6d:93:0e:ae:79:6a:8a:91:c5:ff:
                    c9:dc:83:e4:d1:88:6d:60:8d:c9:25:39:54:0a:cd:
                    f3:fb:2e:68:f9:a8:77:9d:14:36:42:35:52:fa:e2:
                    48:b5:05:d5:b1:8a:ae:5e:8d:6e:c7:58:47:13:d9:
                    43:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DD:75:54:FB:67:08:01:19:93:57:45:83:59:44:04:EE:53:A8:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c51b0613-46f1-3adf-a87f-ce47427afc0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:94:2c:ad:34:ed:64:e1:5b:f3:59:35:a8:46:1a:ea:86:
         50:3b:23:2d:3b:fb:66:e3:a0:bb:4c:f5:75:2e:8b:a9:67:03:
         96:d9:8b:25:50:17:34:f7:25:20:63:21:36:9e:4f:7f:18:2f:
         00:67:6e:71:6c:6c:c9:58:67:32:03:eb:2d:6e:f3:99:12:14:
         52:a3:67:fe:93:1f:8a:74:2a:8b:ba:0e:b4:3f:85:80:b0:58:
         9e:1d:3e:5e:d6:64:75:81:61:76:6a:fa:f6:2c:5e:54:8f:29:
         56:1d:da:a1:b0:27:cf:b3:3a:80:d8:97:fa:64:09:80:34:0f:
         29:80:60:6a:76:5d:1d:a7:63:3e:ad:a6:58:dc:3f:18:1b:f5:
         aa:85:90:fb:01:f0:ea:c7:be:44:03:0e:35:a8:39:40:5f:6b:
         b0:03:00:94:a1:2b:bd:aa:2b:17:11:cb:4f:42:a1:34:e8:48:
         9d:60:4e:57:70:65:68:8e:97:99:11:35:f8:b6:44:a2:aa:5e:
         43:6a:9e:35:8f:6a:1d:d2:7d:fb:d1:88:b1:db:cb:ec:5a:17:
         f2:61:81:e4:42:ce:b4:e3:5e:d5:72:79:51:a4:bc:9f:60:85:
         b6:98:15:5e:bd:60:40:14:33:03:25:78:e4:77:b4:a8:1e:fe:
         b7:9f:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:53:28 2024 by rpki-client on console-ams.rpki-client.org