Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
File:                     576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa (raw, json)
Hash identifier:          ypGgM6OVj3uSd3wz7xIPYq4yrTWkcaVEDlXawy+/Sps=
Subject key identifier:   22:D3:9E:72:3C:CF:CB:BD:F8:B4:AB:2B:32:CE:52:69:18:7C:02:C9
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F43285847537B63BA4F42755D5C0648E0
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     8075
IP address blocks:        161.221.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:63:ba:4f:42:75:5d:5c:06:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=5592a615-53eb-48cf-bb2d-e0a0aaa1e7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:9a:82:38:e9:c8:3f:87:8c:ae:ea:bf:2d:
                    3a:04:b0:6e:ab:93:22:28:fa:a2:09:b3:3e:20:f8:
                    08:1d:e7:ca:65:f6:5a:91:c7:41:86:ae:43:d7:b4:
                    26:b3:39:13:57:3b:3d:2e:55:1e:30:08:04:7f:4a:
                    1c:1a:34:f5:31:0d:cb:00:bc:88:51:e9:73:a8:d6:
                    38:b1:a2:fc:5f:9c:50:df:1b:0d:16:eb:f3:d8:af:
                    7e:71:95:a4:84:75:80:cb:01:c3:14:4b:98:b3:25:
                    5d:8b:f9:37:0f:d4:bd:f5:ae:5f:7d:43:bb:d4:16:
                    bf:43:34:04:c2:9d:38:39:1e:fc:68:34:36:60:0b:
                    d9:59:00:b1:38:f9:e6:62:fb:3f:bf:ff:4e:b0:8e:
                    bc:0f:77:0a:08:30:cc:75:0a:07:3a:7f:d6:d7:6d:
                    39:39:14:b3:38:bc:42:d7:b3:1c:79:e4:8b:56:a2:
                    f7:21:54:e3:a0:79:d0:86:69:d3:cc:fe:b3:2a:a0:
                    6c:7e:d5:94:f3:30:1d:cc:b6:b9:1c:fb:37:03:0d:
                    d7:a1:cb:21:42:44:c5:5f:30:c4:7e:f9:c6:bd:e3:
                    bd:6b:cc:cf:4e:5a:94:80:50:98:a4:70:b5:7a:18:
                    1a:99:7f:fe:44:b1:c6:ec:83:fe:a6:4e:33:fb:81:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D3:9E:72:3C:CF:CB:BD:F8:B4:AB:2B:32:CE:52:69:18:7C:02:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:e7:d9:e0:cf:b9:db:3e:52:86:e5:13:0e:98:4d:e5:c0:
         40:fd:d1:60:d1:ae:f2:6e:dc:3c:db:38:96:29:61:46:6d:43:
         5b:e1:67:08:a1:6a:f0:80:11:ba:5a:52:cd:4e:e5:62:e4:71:
         e6:7b:a9:ad:d3:99:7d:0e:20:9a:d8:d5:51:8d:64:77:f1:ab:
         03:65:5b:8b:ec:55:34:fe:e8:04:b8:44:0a:0f:79:df:af:5e:
         d2:b4:46:af:3a:e9:0f:7f:2b:8e:7b:a7:f5:26:1e:39:8d:58:
         94:7a:23:e7:fb:2a:22:1d:a6:5d:c5:1b:68:e7:89:5a:90:12:
         ed:1e:30:4c:4f:9f:b6:62:83:ad:19:81:15:f1:1b:4f:09:8e:
         53:5e:13:67:de:50:b9:68:47:58:47:fa:45:fa:77:56:0a:d8:
         53:75:77:63:75:bc:d0:b8:9f:02:d6:69:cf:4a:e1:6f:9c:d2:
         03:14:a7:94:61:65:08:fa:4f:b8:b4:a1:3f:0e:a2:81:a2:d8:
         8b:17:6f:dd:20:b4:f3:2c:1a:b5:4f:ff:0d:c9:32:26:2a:a8:
         b4:a4:7d:e2:ee:13:24:b1:2a:2c:ee:0c:fc:31:29:60:2e:d1:
         8e:80:0a:33:68:4b:10:dd:9b:fd:43:f7:e5:6d:aa:63:40:02:
         c4:ec:16:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:07 2024 by rpki-client on console-ams.rpki-client.org