Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa
File:                     e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa (raw, json)
Hash identifier:          jQBNRGq6AFPTMjjsYFONsb0UCCGATxrNAldmRisghZE=
Subject key identifier:   47:3D:0F:14:6F:5C:9C:FC:DA:A3:7D:5E:28:FC:E9:E8:54:8C:A3:5A
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285845068AC59BBC13EC517AE6A780
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     931
IP address blocks:        161.129.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c5:9b:bc:13:ec:51:7a:e6:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=68073cff-c202-4056-bac8-dd58bc0dc84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:e8:e9:41:64:80:cf:24:45:e6:51:4d:43:
                    30:b4:fa:ce:5c:8a:91:22:86:9b:ff:2e:22:4f:3d:
                    c5:3e:8e:6c:87:48:c2:66:9e:4e:89:7f:62:ac:cc:
                    42:27:cb:93:f0:1c:20:f6:fc:df:fb:d5:41:a9:df:
                    d6:a8:fa:1e:84:62:6b:af:bc:8d:3c:22:98:19:f5:
                    b8:51:e8:df:f4:3a:a6:89:a7:38:a1:a3:a4:a8:73:
                    19:5c:d7:f8:2d:00:e9:31:5c:dd:86:83:81:ad:2e:
                    78:d3:cb:c6:ed:c0:28:ca:a7:8d:e7:87:be:50:f8:
                    ef:19:6a:a5:23:2e:27:3d:d1:30:f2:94:9f:13:36:
                    67:c7:63:be:f4:aa:d8:79:7b:9a:3a:11:6f:9b:f9:
                    ff:25:0f:02:b2:15:43:d7:6c:fd:a3:9d:e3:74:26:
                    e7:db:ce:26:7c:70:c5:d0:bb:25:1f:b8:80:1c:af:
                    4a:a2:02:32:e5:f4:80:90:5e:ff:19:03:38:01:64:
                    b6:9a:7a:04:48:dd:1a:92:bd:d5:98:0a:8b:0e:1a:
                    d3:43:4d:ce:0a:32:48:6b:33:86:32:1e:7e:d9:b8:
                    71:85:8c:54:ff:08:b8:c9:0d:61:53:db:4e:d5:b2:
                    6e:69:39:26:de:c3:0b:7b:6f:6a:8d:66:c6:94:f6:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3D:0F:14:6F:5C:9C:FC:DA:A3:7D:5E:28:FC:E9:E8:54:8C:A3:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:52:c1:96:76:62:0d:9e:fa:aa:e8:2f:cc:b5:40:12:33:4a:
         4f:b5:a4:71:38:98:06:14:7d:3d:ae:4e:78:6f:71:75:d6:b0:
         24:e8:ff:2a:eb:ad:23:1c:b7:71:d5:c5:56:39:33:cd:02:8c:
         a4:10:89:b1:cf:0f:be:c9:ad:d2:d9:34:d6:bf:d8:94:cc:9e:
         29:08:31:d3:7c:41:19:ab:8b:bf:a8:35:c4:88:75:2b:0b:c3:
         02:9e:5a:03:47:12:c2:4d:eb:b3:16:9f:aa:26:0d:88:3c:df:
         73:cc:7a:78:60:07:3f:3c:52:5f:ab:bf:c0:5d:84:ea:a6:0b:
         5d:1e:e5:95:3e:36:ef:21:28:ff:ff:f8:9a:a9:a0:67:94:90:
         69:b6:88:44:4c:13:a2:64:fc:9d:0c:27:d6:49:07:5c:ad:98:
         b5:08:3c:c8:43:9c:01:6c:67:27:33:8c:89:8f:44:0e:d0:21:
         1f:94:46:38:67:94:87:9f:a9:ba:07:45:41:5c:11:49:08:84:
         b3:06:6e:ca:4c:2d:d7:88:3b:81:e9:f9:dc:e6:96:cd:e9:30:
         28:49:83:2c:8f:a5:97:a3:b6:85:db:8a:5e:6b:11:9e:6f:d0:
         53:42:3c:37:6f:12:c8:08:e5:d6:69:c8:54:b3:8a:1a:17:45:
         9c:1a:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 04:24:58 2024 by rpki-client on console-fra.rpki-client.org