Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa
File:                     f585be5d-4b82-3039-bcb5-12d932832a7c.roa (raw, json)
Hash identifier:          9r/Xw73DUqpSY2AR7xzKxF5TKu/v+/bkNbq8skOB7oI=
Subject key identifier:   B6:19:E1:03:10:4B:C6:8B:15:4C:A5:D4:53:D9:22:A3:ED:25:27:5F
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858473D25FE05C4D0BFF6F70D9DD0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        161.38.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:fe:05:c4:d0:bf:f6:f7:0d:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=6d4a329c-c6bf-4ec6-b866-0190f7ab24c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:78:d7:a7:95:02:83:0a:c7:83:89:a7:97:
                    32:35:f7:e8:ea:dd:b5:53:28:45:fb:7b:06:0c:b5:
                    b5:4b:38:d0:21:72:a4:46:c7:92:4b:8b:a1:5d:7b:
                    d8:e4:99:58:ba:83:65:71:d7:18:38:b3:61:b2:f3:
                    92:3a:fd:c1:35:24:e3:5b:48:c4:24:4b:cc:cb:aa:
                    2f:d6:bd:61:9c:81:71:eb:ae:0a:71:b1:f4:fc:72:
                    0b:98:f4:b1:4f:1b:a6:7d:9d:69:dd:a7:93:b0:56:
                    c9:f2:0a:32:38:62:6f:1d:07:c0:ac:bd:85:42:e3:
                    de:3f:80:00:c9:e7:77:33:4c:cc:4d:5b:5a:78:89:
                    53:ad:55:e2:14:86:2c:d6:b9:85:7d:45:b6:55:45:
                    d1:fe:68:22:f3:b1:e3:1e:3b:cd:21:d1:a4:ef:b8:
                    84:38:3a:68:96:22:d7:4a:70:86:b9:b5:bb:e5:e9:
                    d1:03:df:1a:62:a8:40:97:b3:c5:97:5a:9c:f3:b5:
                    fa:4b:de:f6:93:e2:c9:6d:10:6e:6e:00:0e:d0:a5:
                    8c:a3:6b:0a:48:cf:a9:dc:5b:25:b3:68:7d:d1:72:
                    c2:26:51:33:37:41:c4:e7:b2:14:b6:70:64:b3:18:
                    d4:71:16:5c:12:b6:2d:25:c6:7f:c9:d2:e7:03:bf:
                    e5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:E1:03:10:4B:C6:8B:15:4C:A5:D4:53:D9:22:A3:ED:25:27:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:77:5d:4d:a9:95:6a:f4:8d:ae:07:7c:26:d9:82:45:b6:
         c9:60:f2:8b:8d:05:92:d3:b4:28:8c:52:7f:19:aa:67:f1:17:
         c2:66:f5:50:28:ec:23:4b:da:1b:02:b7:8a:10:f5:f3:48:43:
         48:ec:4b:3e:0d:42:29:ee:eb:dd:cd:1f:6b:85:15:83:cd:b3:
         72:1c:66:61:54:c4:93:e1:49:ef:bc:20:04:6f:4a:1c:b0:0b:
         a8:70:c0:d3:8d:6e:b1:c0:16:b4:66:c6:c0:b5:45:3d:7a:12:
         8c:e7:8b:6e:7e:ef:f8:f1:fe:37:ea:6f:9a:02:50:d8:5e:ab:
         2f:3a:22:6d:99:98:a1:dc:b9:b9:bd:3c:92:75:4d:e5:aa:ac:
         35:aa:20:5c:72:de:ac:57:13:f1:93:56:0d:8c:a9:05:3c:b4:
         ad:f6:34:f3:51:c7:04:8f:f1:b9:a2:ed:1f:d4:68:d3:21:47:
         9a:2c:92:6a:ff:dc:0e:52:3b:6c:48:89:d7:11:20:12:36:69:
         ab:11:cb:10:ba:30:60:b2:5f:e4:31:f4:88:52:d6:c8:5b:29:
         b7:e3:2a:1a:6c:50:5e:60:5a:ff:fe:bf:c3:0a:16:1e:3e:4f:
         6d:64:bb:1f:e0:4a:d9:aa:f1:fa:7a:ce:ca:a6:72:7b:a0:11:
         ce:4a:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:30 2024 by rpki-client on console-ams.rpki-client.org