Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/4c9283d1-6000-3203-8efd-a144aeec350d.roa
File:                     4c9283d1-6000-3203-8efd-a144aeec350d.roa (raw, json)
Hash identifier:          6TOCHy3ICSZ0CC973hVPRudcLJAgjpRXZqpn9AmRarE=
Subject key identifier:   5E:78:F9:0E:9F:66:D4:AD:1E:BF:2F:B9:D0:49:13:43:1C:87:5A:5C
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F432858472E165BC986268784931E2000
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/4c9283d1-6000-3203-8efd-a144aeec350d.roa
Signing time:             Wed 11 Sep 2024 15:32:11 +0000
ROA not before:           Wed 11 Sep 2024 15:32:11 +0000
ROA not after:            Tue 10 Dec 2024 16:32:11 +0000
asID:                     19318
IP address blocks:        161.129.64.0/24 maxlen: 24
                          161.129.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2e:16:5b:c9:86:26:87:84:93:1e:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Sep 11 15:32:11 2024 GMT
            Not After : Dec 10 16:32:11 2024 GMT
        Subject: CN=9da3fc5d-d04c-4f1a-9e1a-643414584d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:15:c1:6e:b3:97:ee:07:a3:e8:96:b6:9b:
                    29:8a:f5:de:8c:fe:bd:03:24:d9:38:71:18:87:c1:
                    04:df:a5:80:e1:53:8e:bd:34:8c:7a:fd:2e:7b:b8:
                    be:1c:3e:c4:fc:77:ab:36:f7:00:0a:3b:53:6d:1b:
                    80:d3:86:fa:8d:80:25:26:fc:14:e8:e3:44:0d:89:
                    e5:62:7d:0d:6c:23:79:10:ca:f9:60:8b:8c:fe:d5:
                    b9:99:2e:5b:af:d4:fa:03:4f:f1:74:86:0a:46:dd:
                    74:c1:33:86:dc:41:b8:e5:a8:96:18:68:a8:fc:3b:
                    b3:94:49:31:2a:3d:6b:ea:ce:64:a3:9a:ad:56:7e:
                    67:db:43:14:4f:a0:8d:e4:4f:9e:a1:73:95:53:ae:
                    df:5c:5f:23:f9:4e:1d:94:fc:47:64:ea:8c:e9:8a:
                    82:b8:c4:f4:3c:d0:b4:46:f9:ac:00:55:66:67:94:
                    1c:46:fe:69:00:e5:5c:ba:cf:23:b0:12:c7:e9:78:
                    83:25:24:36:55:fd:fc:d8:44:cb:05:06:46:8c:0c:
                    9e:d4:6d:83:51:10:51:00:81:9e:a9:9e:a3:4b:a4:
                    c4:f8:19:71:16:eb:b7:67:67:bf:76:a8:3a:24:40:
                    d0:2a:10:c1:6b:14:7a:31:59:b5:42:7c:7e:c4:76:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:78:F9:0E:9F:66:D4:AD:1E:BF:2F:B9:D0:49:13:43:1C:87:5A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/4c9283d1-6000-3203-8efd-a144aeec350d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.64.0/24
                  161.129.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:33:89:a1:d8:58:25:52:b9:ba:00:4f:a0:85:c3:99:bf:9e:
         f0:78:46:c0:45:9d:1f:ff:ea:c5:6e:96:1d:9b:b0:19:12:e2:
         c5:60:3f:ee:fd:6d:50:27:a2:0d:38:d9:8c:b9:f5:31:9e:d6:
         e9:1e:97:20:7c:14:af:a5:b1:32:ac:c1:c2:94:bf:b1:80:df:
         7d:62:4e:25:d8:9f:ca:2b:57:2b:c4:5f:d7:4c:df:42:95:e7:
         97:68:ad:cd:78:87:cc:3b:ec:d8:0b:20:4a:c9:2a:97:14:62:
         2d:ce:0c:b8:a2:fc:bf:56:ae:b3:57:67:2c:27:98:4e:ca:0a:
         3c:3c:40:f0:3a:73:18:aa:fd:21:df:bc:bb:85:d1:90:a0:3c:
         61:46:ae:a7:b5:af:e0:2e:69:82:63:66:60:8b:39:a0:d4:06:
         e3:c2:32:6b:32:85:3a:25:bf:10:e4:8f:87:51:95:fd:d8:23:
         c8:0b:cb:58:7e:38:79:dc:0f:0a:22:b8:44:c4:35:0b:d1:12:
         8f:e7:e0:c7:fb:f5:7c:78:b4:cd:07:0c:02:20:63:b6:e7:4a:
         97:ad:65:ef:da:73:50:84:16:fd:ed:25:fe:1b:71:47:53:69:
         a8:f3:a0:95:f5:f7:2c:23:6b:f8:7f:10:bf:18:e2:8e:cc:f3:
         3b:0f:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:32 2024 by rpki-client on console-fra.rpki-client.org