Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/313df310-96e3-3f94-8aec-692872adb64e.roa
File:                     313df310-96e3-3f94-8aec-692872adb64e.roa (raw, json)
Hash identifier:          BV+Lhl2DT6dIhGxWAu4DYdYtG5WX9kkD1o1sr4V30rY=
Subject key identifier:   76:1C:5A:C5:4E:C0:65:10:2E:4C:D9:63:31:BC:C9:28:D1:01:F9:74
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F4328584567931542E48ACAFCBA8962C0
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/313df310-96e3-3f94-8aec-692872adb64e.roa
Signing time:             Mon 01 Apr 2024 20:10:41 +0000
ROA not before:           Mon 01 Apr 2024 20:10:41 +0000
ROA not after:            Sun 30 Jun 2024 20:10:41 +0000
asID:                     3356
IP address blocks:        161.151.162.0/23 maxlen: 24
                          161.151.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:67:93:15:42:e4:8a:ca:fc:ba:89:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Apr  1 20:10:41 2024 GMT
            Not After : Jun 30 20:10:41 2024 GMT
        Subject: CN=37fb89e3-dd5c-40dd-91b0-ef73e4e98e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:b0:9a:d1:48:8a:39:02:88:b5:e1:99:f1:
                    ae:04:23:11:16:8b:8b:b2:30:d2:b6:cc:f9:65:d6:
                    3e:59:37:aa:c4:13:bd:96:9d:1f:1e:ee:f3:fb:16:
                    e1:d9:42:97:bb:9e:12:ee:7b:77:e8:15:0d:c8:4a:
                    f2:c9:fc:11:e5:b4:68:4f:9f:e8:e5:df:ac:49:f9:
                    81:6d:c3:33:9b:09:f8:19:fd:ea:45:0c:5c:0d:95:
                    66:1c:ed:21:56:b1:3f:69:22:cf:62:36:3c:ca:67:
                    2d:ab:94:d7:40:a1:dc:5f:28:38:d9:70:83:93:ed:
                    fb:4b:97:28:d3:13:58:06:dd:59:82:96:b1:fe:7c:
                    47:e1:48:af:5b:02:5e:c0:bc:b2:a2:da:de:c2:c8:
                    d8:fe:fd:3b:19:d7:80:ee:a8:43:8b:a8:d2:dd:6c:
                    33:fc:c4:3a:98:0b:f8:77:36:b5:cc:c1:14:c9:12:
                    48:8c:64:ce:1f:a9:4a:ff:8d:b4:21:96:d9:e3:e9:
                    a6:cf:96:d8:33:cb:96:ff:e1:42:12:23:36:1f:89:
                    c3:86:76:63:f6:1b:16:9d:28:4a:2a:d8:e5:a9:8d:
                    ab:43:ab:8b:0e:9a:68:a2:da:2f:0b:ca:44:6a:f9:
                    d8:3c:60:a9:34:fb:5a:d6:7f:fb:98:b6:c1:25:67:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1C:5A:C5:4E:C0:65:10:2E:4C:D9:63:31:BC:C9:28:D1:01:F9:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/313df310-96e3-3f94-8aec-692872adb64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.162.0/23
                  161.151.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:49:63:08:e8:48:9a:40:e2:20:87:75:a4:0e:3a:d7:b2:
         0b:c3:1d:05:a5:a1:20:75:a8:96:ef:95:15:61:40:f3:68:ca:
         02:29:1e:7b:59:f7:f5:d2:55:c9:78:ac:da:a0:3e:9b:c0:46:
         78:d3:88:ac:bb:64:22:81:c5:4a:0e:f9:57:bd:e3:8b:0b:fa:
         ed:6b:72:ce:69:ed:39:96:86:d2:a5:16:63:87:1c:96:8a:e9:
         6c:8b:94:60:cf:2e:65:12:a9:34:9b:db:9b:2d:ea:ad:e5:e6:
         97:f6:fa:ef:0f:4f:60:44:3e:11:88:d9:24:98:34:6e:51:73:
         8c:c7:b4:68:a4:4f:3f:1f:24:55:2f:db:4f:b5:20:43:b1:b9:
         24:97:3e:8f:e7:2f:08:82:d7:06:14:86:35:90:9f:0d:16:a9:
         22:60:dd:c8:02:a3:fe:a7:bc:66:dd:d2:aa:18:ba:ab:9b:19:
         87:3e:01:a4:22:6e:bc:1e:a8:25:ea:a4:93:98:68:78:c3:7d:
         29:6b:89:f2:da:93:9d:10:43:42:5c:cf:78:0f:51:02:0a:d3:
         36:0c:58:4d:59:5b:61:ce:e0:86:ee:fe:f3:36:00:75:ea:e7:
         b9:23:ca:aa:57:4a:47:9e:4e:e0:3c:0b:c5:cb:10:ab:a0:c0:
         8e:86:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:51 2024 by rpki-client on console-fra.rpki-client.org