Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bc68f8c2-a4d4-37b1-aea3-7f42522ddc1c.roa
File:                     bc68f8c2-a4d4-37b1-aea3-7f42522ddc1c.roa (raw, json)
Hash identifier:          VSmdeaAcqlkQItq4V/gGP/mmhl9HZ0MAW7HEm4k8Fyw=
Subject key identifier:   53:5A:7D:B4:8C:E9:32:E1:25:F2:FA:06:6A:AB:A9:7A:3E:F3:F5:39
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584898D60363E0D7BDDBB9BB2120
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bc68f8c2-a4d4-37b1-aea3-7f42522ddc1c.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        161.69.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:03:63:e0:d7:bd:db:b9:bb:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=e23277d9-ab56-4520-a731-0bfaab80f60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:d4:f8:e5:e2:be:6f:90:23:a7:ec:ba:61:
                    f2:46:2a:33:d0:bb:0e:d2:5d:63:42:6d:b6:f2:f9:
                    40:67:44:80:5f:f0:41:0a:97:77:d1:d0:e4:55:b9:
                    a5:ee:6d:bf:59:78:9a:0f:17:e5:81:4f:ae:fc:27:
                    17:40:ea:f0:73:55:25:c5:13:08:34:7c:1e:96:3d:
                    80:0d:e8:1a:02:c3:fd:1e:a3:36:ad:9f:9e:d7:84:
                    50:29:04:05:65:5e:e8:9a:07:af:2d:fb:66:e0:41:
                    90:a9:92:cb:07:d3:66:92:bb:a5:e7:00:3c:54:e8:
                    c1:86:40:51:0a:a9:6b:ec:42:f9:fe:bb:5d:7e:32:
                    7e:5e:be:87:3a:27:db:0a:54:2e:2d:03:da:2a:af:
                    4a:73:d6:68:6a:c1:93:76:be:3c:88:03:9d:34:00:
                    62:5f:bf:37:93:73:75:05:84:a8:29:8c:4a:64:4c:
                    61:5c:cd:86:67:55:dd:4c:ab:46:ee:6c:c5:9d:95:
                    2e:37:b5:a6:8b:58:b8:cd:bb:d3:73:8a:6b:9c:36:
                    b6:f8:7b:4b:59:d8:c3:d5:57:0a:53:42:ab:3b:59:
                    bf:55:d5:06:d4:34:a9:93:a9:ba:3c:9e:54:a3:fa:
                    83:a7:e2:f2:ad:bd:fc:b4:20:7f:b8:76:6e:c2:39:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5A:7D:B4:8C:E9:32:E1:25:F2:FA:06:6A:AB:A9:7A:3E:F3:F5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bc68f8c2-a4d4-37b1-aea3-7f42522ddc1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:03:79:d8:ce:4f:c0:4a:0b:c8:5e:da:3c:43:b9:fd:3f:06:
         7f:5c:c1:ac:68:a3:06:0b:1a:13:d7:32:ed:d1:f1:e7:a5:d1:
         a7:35:77:d1:38:ed:b6:ab:46:0a:85:a9:f6:11:f9:6a:0e:c2:
         8f:ce:2b:0d:35:12:5e:ff:f6:6c:61:da:2a:60:24:fc:f2:b8:
         15:dc:0c:06:c5:ea:71:db:30:5a:ef:31:6c:a7:a6:77:51:fa:
         77:76:a0:1c:65:6d:47:6f:ec:16:b6:ea:20:3b:f4:dd:b3:1a:
         09:d2:b5:c0:e8:5d:fd:c0:9f:6b:7a:13:55:bf:be:63:8e:5c:
         69:8d:1c:88:ee:06:47:4b:7b:1e:aa:05:2a:d0:9e:d9:c1:84:
         06:b4:37:e9:17:fe:bc:78:40:98:da:e4:72:34:b7:ce:95:b1:
         11:68:1a:c9:f7:d7:65:93:70:f9:5b:a6:b3:3a:e7:05:ad:f4:
         f7:6b:eb:85:c1:6f:35:83:73:04:bc:1a:1d:52:5b:ec:45:9a:
         e0:f0:23:d0:35:4c:ee:a9:5c:3f:7b:15:04:7a:db:af:53:18:
         1f:cf:63:d0:e1:a8:df:5f:a7:e9:2e:a2:54:5b:9e:75:5f:0e:
         0d:88:ca:ee:af:3e:f4:a8:9d:47:fb:64:4b:37:6f:78:99:fe:
         98:7f:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:25:09 2025 by rpki-client