Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa
File:                     035def30-19a3-3770-96c6-3387b1f7f2e2.roa (raw, json)
Hash identifier:          TG97TLmWGE8TOPa57TbnUPTAI1IFMOhTBYlitE1gMXc=
Subject key identifier:   AF:31:F3:4C:B1:7B:0C:7A:AA:C8:FC:3A:D9:98:01:14:8F:27:18:ED
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858473D25FE712164C799B3494640
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        161.38.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:fe:71:21:64:c7:99:b3:49:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=3340a101-d778-4a62-87cd-a1204062c26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:94:1e:b3:68:5d:95:0f:84:bc:5e:ee:b9:
                    cd:be:a7:c8:e0:2f:c1:db:42:da:3d:a9:6e:12:41:
                    ff:fd:46:37:89:7e:74:6a:b9:24:47:1c:1e:11:20:
                    60:9e:2a:eb:38:7c:cc:bc:b4:87:48:87:0d:c1:2c:
                    b0:8f:c4:ce:1d:ed:3f:d8:82:36:f9:97:8b:05:20:
                    5d:dc:97:87:e4:cd:ed:11:2a:34:e8:08:dd:48:f7:
                    b7:9a:06:92:97:63:4b:c0:b4:6f:5d:57:c8:77:4f:
                    01:ec:ed:60:94:a3:a2:e5:16:d4:7a:af:ec:48:2e:
                    0c:5f:d6:ad:60:c6:9f:a9:cf:91:ca:ec:d0:8e:70:
                    26:66:f2:25:b3:30:62:29:3c:99:73:2d:d9:49:a6:
                    ab:72:a0:22:fc:2a:01:e0:b4:b7:49:8e:60:09:98:
                    5a:8c:51:83:2b:ea:39:18:9c:3a:93:a1:73:58:2b:
                    24:2d:8f:43:e5:e9:ba:ac:d5:61:ab:87:e4:af:50:
                    b8:68:92:8b:9d:fb:1d:5e:bf:f0:24:1c:6b:a8:85:
                    7d:c3:95:fd:5d:76:ad:7a:05:23:f1:01:d9:af:16:
                    72:cf:5b:d8:ca:8d:a5:58:05:c9:b2:0a:77:4e:25:
                    de:39:d0:7f:60:e1:6f:53:76:77:79:99:82:48:c3:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:31:F3:4C:B1:7B:0C:7A:AA:C8:FC:3A:D9:98:01:14:8F:27:18:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:ba:37:1d:f5:9e:2a:12:4a:28:f6:b5:4d:56:5f:5f:5c:
         a2:69:b6:e1:39:e0:0d:e7:bc:4a:7e:01:15:e1:d4:b4:d2:f2:
         2f:a9:6e:3a:0c:57:b6:6d:da:e8:11:23:99:a7:33:ae:27:34:
         eb:cd:ea:42:57:32:2b:cd:65:ac:9b:1a:04:21:04:f8:e5:32:
         3e:dd:98:66:3b:cf:4e:af:31:17:f8:69:64:70:e5:0d:20:25:
         55:71:f3:ad:ec:0e:79:6c:44:e1:6b:92:d2:0d:31:4b:c4:67:
         27:55:86:90:cc:4c:15:29:ec:49:cb:63:c3:fa:5d:8f:67:89:
         a8:a8:f0:fa:e0:04:78:9e:87:d8:2f:f1:35:08:38:07:94:8c:
         1b:f2:ae:09:88:4c:32:d8:80:36:9b:61:63:2a:d6:db:b3:17:
         3f:bd:3d:7a:d2:97:46:5b:64:b7:8d:c5:7d:e1:51:b6:1e:36:
         87:9b:6c:67:33:48:e1:dd:c2:1b:a8:1e:2c:3c:6d:d1:59:d8:
         a5:66:04:1d:8d:0a:cf:b7:4d:04:ff:84:21:0b:70:15:df:e0:
         95:66:68:14:f4:c7:7b:af:dc:23:34:5a:a4:04:66:93:50:c2:
         18:e5:e4:09:00:a4:ee:c2:57:d1:28:ac:9f:71:b5:e8:29:bc:
         1a:50:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:39 2024 by rpki-client on console-fra.rpki-client.org