Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/fd2ab405-7740-3ccf-95f0-fd1e6ac4361b.roa
File:                     fd2ab405-7740-3ccf-95f0-fd1e6ac4361b.roa (raw, json)
Hash identifier:          2HPmWJdOXPAsF6oxlIVuBByC7wonX4y1qTFJTlrAYmI=
Subject key identifier:   2F:09:6B:42:0D:AD:0E:D9:1B:0E:EE:55:C0:97:26:36:3F:5B:90:69
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F432858460313FBDDE1AAA755A744D180
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/fd2ab405-7740-3ccf-95f0-fd1e6ac4361b.roa
Signing time:             Mon 27 May 2024 13:00:34 +0000
ROA not before:           Mon 27 May 2024 13:00:34 +0000
ROA not after:            Sun 25 Aug 2024 13:00:34 +0000
asID:                     29967
IP address blocks:        161.195.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:03:13:fb:dd:e1:aa:a7:55:a7:44:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: May 27 13:00:34 2024 GMT
            Not After : Aug 25 13:00:34 2024 GMT
        Subject: CN=9d2f973e-f1fc-4a6f-bd45-31cd86106b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:65:61:6a:76:53:ad:cf:29:e2:c5:f2:3a:4f:
                    ac:9e:7a:0d:33:66:bc:75:bc:fb:99:8a:b2:2a:4b:
                    c1:f0:7f:3b:56:08:76:07:31:df:5a:21:19:c1:9c:
                    01:7e:3c:c3:56:c3:55:91:e9:18:8a:3f:ea:1a:e3:
                    54:1e:10:92:d4:2a:81:2a:fe:fa:20:ad:e7:d2:d5:
                    be:8a:7b:f9:5a:b3:20:39:e1:83:71:b0:33:33:3d:
                    07:3d:c2:e1:c5:a3:4a:64:17:80:6b:c2:9b:b2:97:
                    6a:c1:d5:06:02:74:0f:41:98:7e:7b:a4:88:1f:a1:
                    14:2c:b9:45:b2:94:b8:4a:94:dd:65:75:d5:6d:3a:
                    12:0a:2c:a8:b8:d6:47:cb:da:69:03:db:c8:8d:3b:
                    30:6a:5d:47:75:07:9a:27:e6:e8:1b:0c:44:05:5f:
                    63:2f:32:fe:c3:90:3a:1d:f7:af:fa:ee:4b:2d:54:
                    a2:45:82:22:fe:5c:b4:76:89:88:88:64:c4:db:a3:
                    59:83:22:59:cf:51:b0:10:dd:5a:06:82:a9:a7:bb:
                    c3:1d:a8:71:bd:31:7c:5c:1a:8b:e8:7e:ef:51:7b:
                    d4:92:9c:b2:9c:85:8c:ae:3c:ef:6f:3b:28:01:41:
                    e0:90:55:70:09:8b:e3:1d:81:14:dc:8d:ef:1e:04:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:09:6B:42:0D:AD:0E:D9:1B:0E:EE:55:C0:97:26:36:3F:5B:90:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/fd2ab405-7740-3ccf-95f0-fd1e6ac4361b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d8:e2:f7:ca:08:1d:c6:07:cc:7e:fe:17:fd:84:ec:99:1c:
         ab:4b:86:30:dc:44:1a:52:5e:ae:23:fd:05:24:70:1b:b0:5a:
         0d:78:6f:e6:64:d7:d3:1b:38:3b:8a:ef:c9:d3:7a:8a:64:7a:
         5c:eb:c0:f9:30:4d:88:2a:b0:88:43:71:8b:29:5f:e7:72:8e:
         48:68:e2:53:a8:74:29:f3:a7:0e:63:e8:4c:3f:63:86:27:a6:
         f1:c2:1f:a5:c2:8f:1b:0f:ab:5c:57:18:50:d4:11:94:ab:b9:
         ff:60:21:72:54:ec:83:9b:07:d2:c3:bf:91:98:43:30:91:d5:
         74:50:b4:8c:3e:00:8e:f0:4b:37:ef:66:f1:2f:1c:4a:91:64:
         c2:37:c0:1a:79:6a:54:ae:7d:b6:ec:a3:93:3f:16:5a:26:6e:
         b4:30:14:73:50:82:d1:68:32:b8:b0:86:27:1d:76:a6:74:fc:
         ce:54:d6:d1:1b:1c:17:1e:b6:f2:e4:d6:bf:e3:db:1b:93:f7:
         64:dd:5d:8f:ef:bd:a1:ce:36:df:40:fd:28:a3:45:28:2e:b7:
         d2:7a:b4:b6:cb:8e:e5:33:3e:ef:a2:42:ec:0e:d5:14:75:bf:
         bb:3c:f7:53:cb:cd:a3:90:fc:81:af:76:d1:3b:ee:ef:e3:f4:
         1a:e1:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 15:59:21 2024 by rpki-client on console-fra.rpki-client.org