Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
File:                     2782020a-b333-378b-976a-19c150b5397c.roa (raw, json)
Hash identifier:          /S920mvuHYfSmUX3Tru5pVm2CR1AdzOFGqmEHoYNrCg=
Subject key identifier:   38:DF:49:A2:16:F2:EE:97:11:72:F8:02:43:C4:7B:78:61:ED:56:C1
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F43285845936897580B51BA9208B5BBC0
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     8075
IP address blocks:        161.221.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:97:58:0b:51:ba:92:08:b5:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=24d55418-03c6-4b90-8ff0-6f0640d13fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:b7:8d:3a:7b:24:16:ad:13:58:ca:99:d8:
                    4e:f8:6e:bf:60:b4:04:b1:b4:4e:be:8f:f0:c5:21:
                    7d:d1:87:0f:d2:b8:e7:e6:7d:21:44:1c:87:fa:64:
                    4a:da:65:40:0a:57:5a:c3:9c:c8:41:ce:70:46:6b:
                    af:f8:26:8a:da:1e:00:2f:13:03:89:e2:56:90:40:
                    34:2d:1a:c4:c4:8e:32:83:e9:51:6b:b7:ee:a7:84:
                    c9:6a:25:54:89:13:83:fe:e8:00:07:b3:ed:96:92:
                    ff:bf:ca:45:d5:93:3e:22:85:31:f1:35:81:18:06:
                    78:b5:30:b3:5a:e8:9e:ee:85:55:6b:1b:f0:39:98:
                    f1:f8:13:26:e2:d6:a5:d2:d7:dd:a6:90:5e:6c:31:
                    4b:cc:db:2e:4a:fa:63:2c:6c:b3:a9:89:9a:de:1b:
                    b0:1f:2a:7f:f9:41:5f:e8:ba:b0:15:10:63:07:8b:
                    82:c0:a5:ec:be:ce:82:eb:74:e4:39:37:1d:33:3c:
                    7f:cc:42:d6:c7:d4:87:18:92:2b:73:7d:85:d6:16:
                    5d:ee:0c:c5:3c:fa:1e:2d:bd:30:4e:99:cd:80:40:
                    09:42:75:70:ef:6d:ff:f4:14:e9:13:46:7d:35:09:
                    8a:c8:37:54:3d:64:e9:be:3d:fd:b7:97:32:a9:66:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:49:A2:16:F2:EE:97:11:72:F8:02:43:C4:7B:78:61:ED:56:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:a6:bf:ac:3e:95:b5:a3:a2:ea:96:2f:fe:2a:f2:31:f3:
         7a:5d:7e:53:42:a9:91:88:5a:c3:bc:61:76:3d:38:e9:e5:43:
         70:a0:2f:7b:65:b2:a1:53:7f:28:67:26:4e:fb:8e:eb:af:0a:
         8f:52:7f:e8:31:22:b1:8d:72:5e:78:e0:c8:f8:0e:7f:fb:dc:
         1c:11:bb:2e:0e:32:b9:86:2b:8e:87:1f:bd:5d:a1:71:92:c2:
         1a:59:c1:26:11:ea:16:bb:18:60:b8:d7:3d:44:92:62:a3:30:
         e5:8b:7f:84:4e:57:50:90:fc:84:7d:63:c1:3c:de:40:da:86:
         65:b2:4a:07:c2:2a:63:8b:14:cd:c5:9e:52:8d:6b:9b:b6:49:
         0e:03:ff:d7:46:75:3b:87:be:16:a0:08:14:5a:95:bc:c5:65:
         03:4c:33:be:79:c5:53:85:30:10:3b:3b:b8:4b:2d:2e:9a:14:
         36:f4:12:5b:a8:16:8b:d0:f1:e9:65:1d:3d:15:82:53:55:4c:
         11:65:b1:29:cc:10:38:27:1e:89:ed:57:8c:34:33:60:00:5d:
         70:c9:ec:d5:ca:26:49:6d:92:e0:93:3d:19:84:af:92:41:f5:
         74:1b:d4:8c:1f:c2:f3:fc:ae:4e:3f:9e:83:33:65:e1:1e:e6:
         8f:76:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:10:10 2024 by rpki-client on console-ams.rpki-client.org