Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/6a4e8678-033c-381a-8058-3c3a7b46bb9d.roa
File:                     6a4e8678-033c-381a-8058-3c3a7b46bb9d.roa (raw, json)
Hash identifier:          XdjWbkFoNHeL/CfUmJhD/ncjBfnCS/w29PgvrSYvUt4=
Subject key identifier:   D3:2E:FF:A9:9F:02:A5:FC:D6:48:F7:E0:B1:74:23:4A:E9:28:22:DB
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F432858488AE0A096B5EF9CB35C0D97C0
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/6a4e8678-033c-381a-8058-3c3a7b46bb9d.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     8075
IP address blocks:        161.195.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a0:96:b5:ef:9c:b3:5c:0d:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=d1265594-6ec1-43b8-971b-3f55662e1613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:58:f8:6c:a2:59:7e:93:82:84:48:1e:db:
                    ea:73:48:73:7a:1a:40:94:cc:a3:18:5d:2f:82:d1:
                    ae:da:68:dd:fe:91:10:be:e9:dc:1e:77:58:a3:72:
                    90:ee:99:4b:64:9a:bd:5f:5d:95:31:0e:f1:9a:de:
                    57:2d:8d:4a:72:54:d4:17:2b:39:56:82:1a:a6:ed:
                    45:70:ad:92:f0:3e:99:34:d6:d4:a0:6b:0f:aa:f5:
                    58:cb:44:43:d8:9a:d0:fc:20:8f:d4:6e:6e:d9:b6:
                    fc:6d:47:ce:c4:6c:d4:a3:4a:67:65:5c:be:96:87:
                    81:b2:d4:d7:22:af:de:e7:3e:22:a0:07:f6:41:8f:
                    cb:15:32:f4:85:15:b7:7f:0b:ae:6e:6c:d1:d8:c9:
                    9f:ee:65:24:7a:73:eb:1d:57:fe:f1:4c:44:c7:24:
                    91:f4:b0:ea:1e:19:94:17:27:24:54:f8:4d:7a:6d:
                    d3:46:f5:bc:ec:b7:47:a6:61:11:4f:49:1f:59:0e:
                    ca:b9:a1:1c:57:01:0d:6d:b9:a6:32:f1:ee:37:45:
                    29:68:cb:f5:f6:c2:ec:a5:27:6d:83:e7:07:be:a3:
                    0d:69:55:89:61:90:df:84:55:6a:ab:db:9b:c2:44:
                    fe:0f:17:00:60:03:fd:cd:f4:f1:f9:36:3e:6c:ee:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2E:FF:A9:9F:02:A5:FC:D6:48:F7:E0:B1:74:23:4A:E9:28:22:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/6a4e8678-033c-381a-8058-3c3a7b46bb9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:53:5a:1e:a0:98:1b:8e:a2:e7:03:b7:ef:97:a4:7b:7a:
         92:41:ee:99:91:74:6b:d4:72:23:6e:bc:6e:db:00:70:02:2d:
         28:8d:38:ac:4a:d5:21:77:2e:c3:13:50:93:9b:f7:e6:52:04:
         f4:54:65:5b:5d:d9:59:0e:2d:28:d6:63:ec:e9:14:3a:f7:9e:
         6c:2f:26:91:ad:7e:7d:72:a4:18:4d:05:c8:63:5c:0c:5c:1e:
         fe:9d:b1:49:54:ff:63:2a:b5:91:40:69:ed:a9:ce:e0:24:56:
         a5:f0:2d:c1:4d:05:90:c7:f6:ce:a9:c2:27:b5:27:e4:eb:6b:
         e7:14:3e:1a:33:95:57:7d:01:49:39:b8:8a:70:9c:ba:5a:73:
         29:28:13:ce:83:c6:f7:65:f7:67:2e:57:e9:a4:61:a3:a3:38:
         90:ec:d1:dc:f1:47:2c:b7:9c:ad:bc:17:51:45:84:76:11:76:
         85:00:23:da:cd:c9:28:4f:98:50:43:4d:b1:44:83:ce:23:6d:
         fb:ce:da:e7:2e:8e:6f:d1:03:4c:72:1a:88:d2:58:14:83:c2:
         95:58:9f:d4:3b:a6:9e:4d:35:ad:ac:9d:a2:7b:b4:28:6b:6b:
         f5:3d:0b:0e:bf:d1:5f:59:dd:83:15:17:15:42:fc:a7:b0:5c:
         ce:5c:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:39 2025 by rpki-client