Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa
File:                     6ac43537-8355-37a7-9a4d-20a26742058a.roa (raw, json)
Hash identifier:          1yUEv1Tlhjxms28V3uaAviWAiOs73uF9ppmVidbS5bs=
Subject key identifier:   F3:79:5B:AA:6A:3D:0E:0B:ED:BB:9C:89:C4:87:9C:DA:4A:8E:12:97
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F43285845777DC435B6EBDF1EF1E51DC0
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16509
IP address blocks:        162.247.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c4:35:b6:eb:df:1e:f1:e5:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=5bcbe492-3b49-4a43-ab46-cae909c68f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:8d:ba:70:dc:71:13:d5:d3:77:dc:10:ab:
                    69:0c:53:d4:0b:93:58:b8:8f:70:80:ee:3d:33:94:
                    7e:5d:f2:68:38:b0:45:ea:8e:ff:23:4b:2d:2a:af:
                    e7:63:27:03:05:a6:6f:07:ff:a7:ec:d3:36:c0:71:
                    f3:3b:ad:36:41:41:61:72:aa:5d:31:c0:37:fa:ca:
                    d4:f3:10:e3:1a:0a:9c:61:db:20:3f:eb:9b:e9:c3:
                    8d:51:d3:54:0b:f6:d9:2a:90:d7:d0:d6:44:39:59:
                    09:48:ef:3d:8a:30:b3:0d:10:6f:9b:e3:3c:09:eb:
                    d2:ca:ea:4a:40:30:2c:0d:ee:07:d5:61:ee:7f:3e:
                    e3:63:79:09:20:67:d3:29:5b:34:d5:6d:c7:43:08:
                    e8:44:a7:ce:c6:c9:b6:13:44:21:5d:a0:3d:84:26:
                    22:99:00:b5:ab:2a:de:ef:98:d6:71:33:c2:db:cd:
                    9e:71:f0:d0:46:e2:a1:ae:6c:12:db:56:fc:17:92:
                    95:88:a1:a8:f4:90:0e:e8:75:51:9c:13:b5:da:b7:
                    a8:3f:83:d6:03:c3:87:10:29:f1:3c:13:7f:b5:69:
                    f2:93:09:59:f7:4f:1f:a1:69:f9:c6:f1:30:2b:ea:
                    ec:8e:de:cd:03:8e:77:00:ae:52:67:33:82:fb:f0:
                    df:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:79:5B:AA:6A:3D:0E:0B:ED:BB:9C:89:C4:87:9C:DA:4A:8E:12:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:06:42:0e:e1:29:3b:5b:e9:d9:12:6f:f4:a7:cc:21:dd:
         c9:9f:5d:13:e0:6e:b0:87:53:e8:26:ae:64:51:4c:ca:07:32:
         5f:72:1e:96:3d:64:82:95:af:cb:cf:b7:63:04:dd:da:f8:34:
         23:b2:50:83:d7:46:f2:5e:4d:9f:87:b3:76:85:7f:73:f2:b0:
         f1:76:28:99:c2:5f:77:29:8c:3d:2f:a4:b3:a5:52:da:27:b9:
         5b:47:4a:71:9b:98:c7:62:5c:03:c1:c4:d7:a3:d4:1c:97:8c:
         2e:23:a8:b9:ed:2d:08:99:b3:02:9e:5e:28:d0:dd:d4:ba:ae:
         f1:bf:f6:e5:d8:28:05:9b:fb:64:1d:3a:a2:22:54:16:98:39:
         2a:d6:0d:9a:9d:2e:a1:52:2f:09:fc:e2:4c:7c:4d:5c:87:f4:
         ab:d7:a4:50:c5:18:ea:d4:dd:7a:ff:c5:86:08:d4:32:3c:87:
         b2:7b:f3:64:85:2d:f9:97:31:92:6a:07:d7:9f:71:4e:bc:84:
         f6:a2:e6:63:65:08:50:e5:ca:b4:97:79:11:ed:8d:6b:99:a3:
         ee:a1:1b:82:2c:8f:7f:7b:d0:7c:0f:24:f8:c8:00:b8:1a:02:
         1f:a4:36:8a:da:f6:8a:f4:ef:82:e2:82:0a:7c:99:c5:8f:73:
         0a:db:88:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:54:52 2024 by rpki-client on console-ams.rpki-client.org