Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa
File:                     819d3888-df8a-3d32-a202-01632835d491.roa (raw, json)
Hash identifier:          q98Fjn/2f70J2BVGJMEjwXaDDhpFNXMpv2NcgxpD4bA=
Subject key identifier:   73:C1:A6:FC:39:30:01:FF:58:6E:16:97:31:92:3A:4A:BA:42:C4:AC
Certificate issuer:       /CN=1c066aa7-c91c-4752-a554-3ac416a79e4f
Certificate serial:       010D0C9F43285847E78F5F68FD2BD9438DDD0100
Authority key identifier: 46:8F:65:72:6A:D4:5D:EF:C0:7F:4E:90:8E:93:2C:F9:07:DB:05:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     14618
IP address blocks:        161.51.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:5f:68:fd:2b:d9:43:8d:dd:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c066aa7-c91c-4752-a554-3ac416a79e4f
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=15ee2669-08a5-4bbc-a082-16632def7fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:64:aa:35:a3:9d:86:f4:e9:29:36:4d:45:17:
                    e0:8e:bf:05:80:8f:99:99:4e:ab:10:d6:e4:76:11:
                    6f:ca:b6:97:61:f1:1b:dc:00:47:5f:52:71:55:bb:
                    0a:8a:78:ac:28:be:3c:85:8b:a0:1b:f2:1b:50:7a:
                    11:55:64:09:80:5b:a8:68:b1:d6:bb:bd:9d:17:9f:
                    2c:c8:c0:c0:e9:c9:dc:75:e0:e3:c2:80:89:01:e8:
                    d8:0f:6f:ce:45:93:25:41:11:23:31:97:1d:1b:91:
                    5f:77:b3:d6:14:b4:00:f3:b1:86:6b:e1:e0:61:eb:
                    d3:31:01:61:ea:37:1c:33:08:09:2d:8a:b2:1c:86:
                    68:92:eb:43:af:5a:a5:af:a6:f8:26:3b:3d:95:1c:
                    00:4d:c4:d4:70:c3:8f:73:d4:0e:58:8e:7e:21:5f:
                    cd:da:de:6e:5d:22:d9:fe:70:c0:bc:d4:d5:ba:c5:
                    e1:ae:57:8d:01:e4:63:eb:6f:0b:59:28:00:d2:2e:
                    6c:d4:de:48:f5:d1:3c:4d:16:a4:1f:2f:f4:7f:94:
                    2d:e8:fe:da:0e:b3:b2:3d:b0:8e:22:b1:76:40:2a:
                    b3:f5:22:f7:25:00:c6:61:47:f7:f2:a1:57:2c:f4:
                    9b:49:0f:5c:17:ba:28:a3:ce:bc:e6:b6:d5:af:3e:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C1:A6:FC:39:30:01:FF:58:6E:16:97:31:92:3A:4A:BA:42:C4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/819d3888-df8a-3d32-a202-01632835d491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f/1c066aa7-c91c-4752-a554-3ac416a79e4f.crl

            X509v3 Authority Key Identifier:
                keyid:46:8F:65:72:6A:D4:5D:EF:C0:7F:4E:90:8E:93:2C:F9:07:DB:05:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c066aa7-c91c-4752-a554-3ac416a79e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.51.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:6d:1e:bb:3d:e3:d6:3b:06:20:56:02:d2:0b:e5:dd:0a:
         0e:50:03:7f:83:d0:aa:d0:01:2d:5e:1b:2a:5c:5b:52:e1:82:
         94:32:00:97:10:e6:b3:7b:30:f5:e6:b3:28:03:05:e3:e0:b9:
         52:56:d3:91:6f:18:ac:c8:7f:19:9f:47:c9:8a:1b:f2:fd:c1:
         08:7d:01:bb:83:e1:f2:4d:73:f0:d7:0b:10:c3:cb:1c:c1:44:
         b2:1a:28:ba:d3:cf:d3:f7:3e:08:50:3d:ea:c6:70:91:62:a8:
         92:08:b4:5a:b0:29:d1:65:f6:15:6a:74:b0:16:84:00:a3:1b:
         00:50:20:86:cf:d3:37:87:00:b2:98:bd:6d:d9:32:7f:54:10:
         3d:2d:d6:ef:5b:d0:0a:88:36:40:04:79:73:be:aa:b0:fd:1a:
         57:a1:93:d0:ae:29:1e:52:e5:c3:01:fe:5b:47:b4:9e:cc:3e:
         7c:3d:df:b7:ac:11:6a:05:97:26:12:38:8f:a4:0d:21:1b:04:
         81:9a:90:9b:18:98:16:3d:20:2d:54:20:89:47:c9:05:68:cf:
         b8:7f:f9:a0:50:a4:af:23:55:ab:07:eb:a9:fd:ff:59:63:39:
         f4:12:68:e9:1c:9c:3e:69:85:57:c8:ab:f7:46:e7:c1:fc:76:
         12:de:a7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:00 2024 by rpki-client on console-ams.rpki-client.org