Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa
File:                     e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa (raw, json)
Hash identifier:          VR7jzi9aZ3GgY0I0v1zOoU0D1K5kFm+TdxsjxfXTodI=
Subject key identifier:   08:34:46:DF:DB:E4:19:EF:D2:CB:CA:F4:A3:A3:53:BE:8F:23:B0:8A
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584734C728E315E5048EFE5E6F80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     3477
IP address blocks:        161.55.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:28:e3:15:e5:04:8e:fe:5e:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=fb06abb3-aa27-41f9-bd74-7d1c6884b95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:b9:0d:28:7f:e9:c1:79:04:68:c8:04:94:
                    be:d7:d9:cc:0f:d2:d4:28:70:6f:32:fc:94:51:48:
                    33:98:b2:34:7c:03:b6:b6:e4:a3:6e:26:7f:b0:2c:
                    d3:08:f2:a9:50:1e:66:b2:e9:34:ee:20:6a:ed:cb:
                    9b:13:dc:ff:5c:93:46:bf:d1:15:c0:ae:20:ed:18:
                    bd:47:56:cd:1b:18:8a:b4:a9:c2:65:60:26:ea:1f:
                    49:0f:fc:8b:c7:36:3d:5f:68:5d:03:84:2f:35:a2:
                    24:58:7a:1e:47:a8:e9:1f:07:1b:c5:10:5e:21:b0:
                    c9:dd:62:80:6b:6b:ae:e7:d7:2c:b5:f9:dd:cf:a7:
                    69:5e:c6:4d:e2:fd:6d:9e:b9:4b:bd:26:2f:d8:e8:
                    6f:23:8b:7c:91:d7:4c:c5:05:9f:7d:2a:de:3a:fa:
                    5f:71:73:6e:6c:f2:39:fc:95:f0:37:95:79:78:ec:
                    1f:7a:0d:87:09:7f:e7:06:77:1b:61:39:77:0c:b6:
                    e2:65:92:73:23:7e:f0:44:ad:22:55:ba:ea:53:e9:
                    17:21:06:c7:ea:76:63:bf:7b:2a:d6:c3:86:60:20:
                    75:f0:0e:22:7a:49:f3:f5:b4:0f:1d:6e:b0:25:a8:
                    51:f5:f2:6d:31:12:68:53:98:54:38:5c:1d:5f:30:
                    cd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:46:DF:DB:E4:19:EF:D2:CB:CA:F4:A3:A3:53:BE:8F:23:B0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d0:73:0e:2f:cd:64:97:58:f8:79:31:10:61:a8:33:c7:19:
         f6:ab:ca:d8:32:e4:4a:b4:4f:43:17:ad:94:54:45:40:79:ae:
         a5:20:3b:8f:92:89:be:18:5a:eb:32:82:88:ef:c0:35:56:c8:
         3f:1f:6d:2e:99:18:19:1c:22:23:03:45:f1:56:80:83:b5:c2:
         c3:85:ed:8d:1d:3a:75:9b:4f:c8:2d:cf:c3:4d:84:7d:67:b2:
         07:2b:18:b7:97:09:87:90:9c:5c:b9:8e:f2:29:f5:3f:51:7f:
         62:b9:a2:a8:a4:45:1d:b1:60:8f:bf:dd:1c:45:09:7e:1b:3b:
         50:55:ad:dc:64:71:ec:0b:2d:ac:4a:0f:a1:6c:b7:21:13:bb:
         4a:9d:46:ae:cf:1c:74:6d:d4:07:df:29:43:50:f2:d7:af:fc:
         ad:47:4e:fd:b0:6e:8d:72:c1:f9:35:53:a8:5a:3c:2a:03:77:
         77:3f:1a:73:a4:5e:74:4a:b8:c7:2b:95:b0:f1:dd:78:f6:48:
         58:ce:10:52:47:0d:7c:5d:ef:51:61:e2:14:d6:19:61:44:6f:
         9f:b1:c2:93:78:64:51:03:98:f0:02:55:5a:69:6f:61:a7:3f:
         bc:57:fa:5e:71:a0:86:22:5c:dd:a0:24:07:fa:40:f0:6c:9a:
         54:78:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 20:13:52 2024 by rpki-client on console-fra.rpki-client.org