Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
File:                     12211a98-a467-395a-802f-13b6b78c07d9.roa (raw, json)
Hash identifier:          eJoJCJMsu1y7UFs4/PkEgI1WzrjHsBT/bmNyXMnmc/c=
Subject key identifier:   8E:F6:FF:3C:76:24:7A:26:70:62:92:D4:DC:A4:95:52:A5:84:0F:17
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F43285845909DEA30304DBEBBC534E120
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     8075
IP address blocks:        161.221.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:ea:30:30:4d:be:bb:c5:34:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=646394f3-1cb6-46e6-a6af-0e0031ed1e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4e:37:c6:e1:70:34:c7:1f:5a:c8:e0:55:f4:
                    df:ca:11:d3:67:5c:06:2a:cc:99:3e:c2:76:dc:20:
                    6b:ab:26:d1:6a:39:60:2a:a5:94:32:f2:d5:3a:b8:
                    b8:0a:8f:4c:bf:08:71:fa:e7:07:df:95:ba:65:56:
                    03:6e:4b:71:95:9c:ee:3d:dd:45:0f:ef:50:46:5d:
                    8c:b8:42:1c:82:75:30:39:70:47:01:13:a2:ff:6f:
                    81:ec:3c:54:26:6d:0a:6c:11:92:e0:e6:88:cb:1e:
                    e0:a6:5c:e2:ba:c4:01:7d:86:d6:fc:b7:38:69:e9:
                    60:6d:f3:94:fc:a0:23:4f:a0:8e:c7:39:62:cf:99:
                    6d:ef:38:83:0f:7d:2b:7e:6a:12:d7:49:be:df:37:
                    a9:10:66:e8:8e:6d:a0:96:87:9d:a0:77:c6:43:4c:
                    07:b0:73:46:67:65:32:d6:fc:77:64:1b:83:b1:8b:
                    41:dc:48:07:43:83:6d:5c:77:48:be:40:b6:0e:69:
                    88:ae:3b:f2:9b:e1:f3:d5:3a:fa:b4:b9:70:b5:06:
                    e1:9c:9c:6c:e9:e6:b2:d1:eb:db:b7:d6:f7:0e:c6:
                    66:67:f6:ef:08:48:67:0c:c0:13:ae:16:3f:3c:00:
                    d4:2a:af:4e:70:db:9c:53:85:a9:74:a7:aa:fe:a9:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F6:FF:3C:76:24:7A:26:70:62:92:D4:DC:A4:95:52:A5:84:0F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:78:e5:5e:d8:54:ee:ec:fd:8b:da:7b:58:b7:f3:99:dc:4f:
         70:57:c3:f3:f0:20:9b:d3:b4:e1:91:06:4a:13:cd:99:0c:c3:
         b8:fd:d7:f4:d9:ed:93:4e:8d:34:72:24:8f:c4:bb:2f:df:aa:
         a3:e0:97:be:63:34:b7:0a:11:78:a0:23:28:9f:e5:10:e9:b9:
         21:c6:82:10:55:d7:23:38:c2:42:0e:bf:00:ce:5d:9c:fd:2e:
         c9:80:f1:05:fc:f0:7d:5b:f2:68:98:f9:e3:dc:ef:94:4c:a1:
         8b:70:30:0f:a2:c9:e7:55:8e:e2:b4:43:55:3b:03:7c:11:c0:
         03:bc:92:78:f5:d4:b0:22:8c:83:cf:c9:aa:e7:81:23:3d:96:
         17:3e:34:ef:47:69:4d:b2:50:f3:50:b3:ab:09:a5:a6:2d:ba:
         0f:c0:c7:c8:7d:e6:45:32:50:ef:10:9d:6b:55:93:25:99:96:
         5f:a6:e8:c6:4e:4b:62:db:e5:5c:45:ef:53:ec:9f:49:a3:fa:
         5a:32:18:59:71:2f:7a:22:e5:29:f1:ca:22:39:22:4d:70:3d:
         7a:ef:57:be:45:5b:7a:17:91:cb:24:a5:81:77:d4:dd:2d:bf:
         20:9c:56:7a:44:b3:95:73:14:6f:a6:cb:59:6b:01:7d:1c:eb:
         5e:4e:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:25:16 2024 by rpki-client on console-fra.rpki-client.org