Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/161b9751-0ee4-37c8-ab57-7679b16d2c07.roa
File:                     161b9751-0ee4-37c8-ab57-7679b16d2c07.roa (raw, json)
Hash identifier:          LD3gL1WXWaX7YK1LtNTtUePmQOL/DLk6tPK32aWG9rs=
Subject key identifier:   3E:6F:38:82:F9:11:81:8B:2C:FA:28:E9:68:54:C4:2A:A8:7D:F2:0B
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285845533347FDC0CBC43D82496740
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/161b9751-0ee4-37c8-ab57-7679b16d2c07.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     931
IP address blocks:        161.129.32.0/24 maxlen: 24
                          161.129.40.0/24 maxlen: 24
                          161.129.37.0/24 maxlen: 24
                          161.129.38.0/24 maxlen: 24
                          161.129.33.0/24 maxlen: 24
                          161.129.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:47:fd:c0:cb:c4:3d:82:49:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=263b3b0d-5c07-454b-8ed8-8dc37e991f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:34:05:de:61:9f:8d:79:ad:49:cb:df:e4:
                    73:eb:b2:2c:d7:de:d8:5c:a6:d0:09:f1:62:c0:cb:
                    81:59:71:de:9b:54:3c:e3:8d:44:30:a6:57:ea:05:
                    0e:9e:e8:a9:73:03:c7:02:ba:5c:7c:9e:15:a7:a3:
                    bf:74:d5:71:6e:ad:85:9a:a4:5a:14:38:4b:db:cc:
                    9f:13:6a:1f:c6:08:51:d8:6c:85:0b:85:60:b0:5c:
                    81:f7:bc:a7:52:35:b7:61:84:e0:97:a1:25:60:cb:
                    18:64:62:f4:7e:ab:c9:68:68:ca:d0:70:94:40:0d:
                    f5:80:5b:ce:bd:4f:a8:ef:ce:3d:5a:ed:b8:89:7c:
                    66:25:94:f5:5d:23:bf:9b:9d:ad:b3:72:96:0d:7b:
                    ab:7f:39:0b:25:dc:ed:be:41:4f:a8:8c:bf:c3:eb:
                    ac:6b:0d:4d:5e:8b:d9:6c:48:a7:be:33:a9:da:9e:
                    e4:4c:bc:19:5b:c6:85:47:42:b1:9b:ba:7f:c2:b0:
                    58:e8:fa:df:d6:a3:74:f9:e4:99:63:a5:04:9d:80:
                    dc:eb:96:a9:79:a9:3d:54:36:99:50:51:ad:bf:0d:
                    6a:90:dd:5f:70:b1:1a:69:e6:25:59:55:6e:9c:27:
                    97:7d:ff:84:ef:b2:8e:ee:5b:5f:77:d1:92:87:7e:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6F:38:82:F9:11:81:8B:2C:FA:28:E9:68:54:C4:2A:A8:7D:F2:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/161b9751-0ee4-37c8-ab57-7679b16d2c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.32.0/23
                  161.129.36.0-161.129.38.255
                  161.129.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b1:64:a0:d6:fe:e4:b2:8c:94:c1:cc:d3:bd:03:f8:56:fc:
         90:dd:4c:97:7a:33:4d:a6:6f:ff:21:f6:06:cd:2c:07:2c:6b:
         15:33:41:c8:68:8f:53:5b:86:4e:58:0e:56:f2:ff:2c:6e:bd:
         68:e4:1f:aa:16:91:b1:d7:9e:d1:99:52:0d:76:5a:44:e3:40:
         d8:74:06:8c:7e:c3:3d:3e:8b:fc:bc:45:0e:43:82:d0:cb:af:
         aa:5f:82:5a:ee:17:8c:40:e4:3e:ee:f0:7b:98:99:de:8b:96:
         70:1b:f0:6b:45:e6:d2:40:11:8a:6b:de:32:32:dc:70:90:20:
         b9:fc:45:68:b2:a1:d8:e3:02:1a:be:5d:4a:b8:b8:89:32:0c:
         4e:e5:6e:78:ce:2d:bc:84:eb:2c:15:bb:4f:bc:09:38:31:e6:
         59:a4:63:20:ce:7d:9f:e8:66:fc:e3:da:37:ab:10:a8:86:71:
         e3:76:80:5a:94:29:70:1c:3b:f6:91:b6:fd:dd:da:f1:10:fa:
         1f:99:e4:cf:1b:cb:40:70:36:00:d4:f9:a3:d8:ba:26:a1:01:
         7e:3a:13:ef:2d:35:18:47:89:37:15:b3:d5:9d:f9:71:dd:a0:
         fc:1b:c9:07:9d:0c:09:f3:fc:fb:db:92:56:73:f6:e1:0a:82:
         b8:60:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:32:33 2024 by rpki-client on console-ams.rpki-client.org