Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/711e95fe-36e2-3b84-8231-e086c1aef1bc.roa
File:                     711e95fe-36e2-3b84-8231-e086c1aef1bc.roa (raw, json)
Hash identifier:          CoT4ezRNNt6JMFb/XHxWhkyxW8JaI3e7HlYGC73qf58=
Subject key identifier:   03:D7:9A:1B:4E:1E:2D:B7:C1:60:C0:16:81:BE:CF:65:48:89:0C:D0
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858473D25FE3C8911691D34305E40
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/711e95fe-36e2-3b84-8231-e086c1aef1bc.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        161.38.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:fe:3c:89:11:69:1d:34:30:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=34efed77-c6ec-4436-bc2a-f02800955186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:11:7a:f9:5a:83:b5:21:1b:ad:34:9e:2c:
                    36:ef:03:7b:4f:b5:91:92:86:71:ef:c0:41:df:1a:
                    6f:af:23:89:ef:c9:26:a1:08:57:bd:a6:4f:e3:bc:
                    50:a9:bb:93:22:ac:5c:d4:6c:4c:e4:31:51:0b:5f:
                    f5:1f:18:f8:51:7b:e8:3c:8b:55:03:fa:11:94:69:
                    3a:ba:9c:bd:20:bc:f7:cf:df:6b:ca:9b:78:10:0c:
                    7c:55:82:fa:01:e3:aa:e9:0d:eb:1e:f3:7c:92:be:
                    9c:15:b6:5d:07:1c:b2:9a:54:4a:be:95:73:0c:57:
                    a2:37:81:f1:5f:d7:3e:6b:e7:f3:43:48:c2:40:5e:
                    f3:88:d7:71:76:1d:22:b1:89:64:63:16:31:65:08:
                    55:d1:e3:55:36:f4:7f:c1:b0:d2:a6:be:32:24:7e:
                    f8:d4:c4:71:e5:3b:d0:9f:1e:00:83:19:26:8b:c2:
                    05:de:e3:a3:06:32:cc:9f:d2:bd:ba:89:bb:5a:ed:
                    90:dc:53:2c:53:50:12:49:d5:18:af:ca:ba:e6:27:
                    c6:21:73:0d:9c:ee:bf:ce:fd:e8:1e:6c:7d:f4:f9:
                    70:23:9d:05:db:f9:10:65:ee:01:b1:b9:71:34:81:
                    98:04:73:98:ec:66:75:31:1e:00:42:7f:74:90:e8:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:9A:1B:4E:1E:2D:B7:C1:60:C0:16:81:BE:CF:65:48:89:0C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/711e95fe-36e2-3b84-8231-e086c1aef1bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:66:8f:fd:41:56:34:2d:24:6b:82:7b:1b:f7:47:2d:21:
         24:12:f6:b0:9d:0c:86:98:77:5d:3b:e1:7f:9b:d8:c2:5f:49:
         d5:3d:2a:37:00:5d:47:72:a5:5c:31:22:d0:6f:0c:23:1d:d9:
         78:50:01:23:9c:8f:86:ce:70:da:82:73:f7:28:1d:1b:7d:56:
         98:ac:10:2b:3e:ca:d4:ce:f2:48:0d:79:e6:ac:54:38:5d:11:
         ee:77:5c:79:44:dd:04:fd:04:97:1b:61:24:c2:19:0e:a8:d4:
         62:36:1d:a7:ab:88:b3:b6:5f:54:be:98:8d:a3:e2:e1:83:63:
         38:de:83:39:e7:ab:1f:89:f0:bb:6d:f5:0b:14:9a:b1:6c:10:
         59:9a:27:ba:82:61:ac:37:50:df:dc:d3:86:0a:65:51:b1:49:
         40:54:f2:80:52:90:c7:fe:95:bb:c9:f1:ef:f5:5f:11:d5:af:
         1d:c3:4f:d0:93:04:01:55:ba:52:1a:f7:74:aa:95:1e:f8:5d:
         d4:3c:26:ab:96:d8:02:17:df:44:16:17:35:64:58:dd:40:80:
         80:11:7b:05:3a:ca:89:16:03:08:81:dc:3b:95:23:21:aa:b5:
         ae:9f:29:2c:5a:1b:c2:a0:64:8d:41:d7:86:eb:47:ae:2e:33:
         bf:b2:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:39 2024 by rpki-client on console-fra.rpki-client.org