Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa
File:                     7774879b-9330-3b7e-ae8b-286b0014a62e.roa (raw, json)
Hash identifier:          wZO2KAzyrKF/rJuRxQC2M0Z5u8O5Htm1CuG//DMTbG0=
Subject key identifier:   92:51:A8:F7:56:31:C8:CF:D7:6C:E7:5C:F7:51:38:0E:C9:DC:3E:F0
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F43285848E59BD204E510B65DB592A400
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     202
IP address blocks:        161.151.162.0/23 maxlen: 24
                          161.151.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d2:04:e5:10:b6:5d:b5:92:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=65bbba66-d80e-41d0-861c-106b8e2d87db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:85:17:74:5f:93:14:7d:fd:9c:5f:56:9e:
                    6a:02:6a:9e:0d:f2:bd:f0:ad:98:bb:49:92:e3:ee:
                    cf:07:79:be:a1:e4:f4:48:fe:ea:13:ca:ec:bc:4e:
                    96:47:91:4f:e9:c6:d6:44:80:b8:91:cd:e8:30:d6:
                    6c:e8:e0:78:f4:3c:d8:7d:94:df:32:b3:4f:2c:06:
                    df:11:30:da:61:ba:4f:96:18:3c:a8:64:5f:12:ec:
                    32:ff:90:ae:b4:f1:70:07:7d:0d:bf:a0:3f:06:19:
                    8c:24:7b:6e:32:c5:a3:1e:7f:48:ff:e4:c3:db:1f:
                    ec:83:b4:14:d0:47:c4:ff:9a:01:4d:63:fb:2b:d2:
                    ee:a4:ad:6c:5a:ce:71:e0:1b:a2:18:da:22:97:f7:
                    12:b9:7a:c1:0f:8f:b5:f7:22:24:32:82:40:8c:81:
                    63:12:5f:0b:54:2c:b8:5f:03:90:79:0e:4e:f4:bb:
                    b7:c7:98:b2:91:8e:03:80:2b:b1:5c:6a:9c:e1:31:
                    9c:8e:23:4f:20:c1:bc:65:6b:c8:ee:8a:6d:03:ab:
                    84:8a:9f:80:e1:d5:8b:93:a9:dc:8f:87:cf:f5:42:
                    62:75:ce:e2:7a:19:9c:86:a8:0e:e9:a2:52:6f:34:
                    73:34:22:e0:63:cc:5a:88:46:ba:51:0e:5d:91:d0:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:A8:F7:56:31:C8:CF:D7:6C:E7:5C:F7:51:38:0E:C9:DC:3E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/7774879b-9330-3b7e-ae8b-286b0014a62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.162.0/23
                  161.151.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ce:bf:0d:1d:81:9d:b6:22:56:82:c7:9a:0d:7d:07:71:86:
         3a:16:5f:fb:c8:89:1e:07:87:cc:8c:89:38:3b:50:ed:06:67:
         9f:95:b9:1e:e7:7e:c5:0a:37:74:41:69:ed:5f:48:c0:b2:33:
         60:9a:de:21:90:71:19:b7:44:d5:f3:a1:7d:66:65:87:df:62:
         33:e4:ca:c7:3a:81:89:60:44:67:d4:fe:64:7f:91:f1:ba:7d:
         c5:62:b9:d4:d7:a1:9e:d7:e5:b9:7b:8e:8b:fa:db:e7:42:cc:
         b6:f2:6c:88:2d:32:0b:a6:83:03:c8:f7:2d:81:48:b0:4c:34:
         0d:f7:8a:8c:42:80:84:ed:35:85:81:77:c4:1a:ae:7c:bf:36:
         13:2a:39:b2:ff:86:2b:42:c2:d0:36:7f:ca:19:80:63:29:bc:
         6c:b4:b9:7f:c1:42:1e:38:f5:12:dc:1c:2e:51:d0:ea:cf:27:
         90:a3:40:7c:78:ae:ae:ce:55:43:cc:fd:46:c2:0a:06:85:b5:
         d1:83:d5:2f:13:7a:9b:66:b0:00:af:17:67:ac:88:70:6c:6f:
         87:eb:12:05:b2:17:8a:8b:d5:63:cd:71:91:65:dd:6d:65:84:
         7a:ee:22:c6:c1:3b:95:f6:b8:d1:b0:5a:da:45:87:8b:56:8c:
         1e:0a:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:02 2025 by rpki-client