Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa
File:                     fd05dd98-3073-3868-a202-0a6c4f041811.roa (raw, json)
Hash identifier:          r/XyYuKT5IAZT1+iTm0ya03ajpfumZ0NoVuev34uzlA=
Subject key identifier:   2C:70:2E:48:12:3D:E5:15:99:06:6A:8B:42:AF:91:7B:DD:16:00:B8
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F4328584726D08F5974EB61155E392540
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     203
IP address blocks:        161.151.162.0/23 maxlen: 24
                          161.151.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8f:59:74:eb:61:15:5e:39:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=93495c06-8d07-42f1-b2e7-6270419d7d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:55:8a:98:93:2c:32:9e:b7:45:0c:81:3d:
                    e4:0e:a8:fb:25:e1:64:60:e9:ec:1f:40:6d:2d:e7:
                    6d:b9:22:d3:15:df:de:9e:c9:79:a3:79:11:02:2b:
                    ad:63:c2:2a:44:89:5d:08:16:09:80:1c:12:cc:9e:
                    c4:fd:fa:d0:d7:57:91:c0:f1:d8:f8:7e:93:9a:7f:
                    b1:ab:7a:18:fa:7f:55:2f:2c:f6:19:7a:f8:fc:24:
                    4b:56:89:fd:d3:a2:a6:b8:33:81:9a:d1:76:76:ca:
                    ef:c9:65:f4:be:d2:41:64:d8:ce:8f:87:fa:e2:77:
                    ea:37:2e:16:dd:3f:66:d8:f6:3d:39:cc:eb:34:83:
                    dc:d3:31:2e:87:b8:e6:b8:ca:12:0c:a7:ad:1b:9a:
                    0d:f6:ea:c7:fa:bd:c8:ab:00:8e:6f:c9:39:44:6e:
                    6c:b9:9c:05:b1:15:ed:79:02:a3:9c:64:99:34:83:
                    52:1b:28:a2:a3:2f:18:f8:44:e7:c6:9e:b9:39:13:
                    a4:57:72:83:91:d2:c2:f3:e1:ae:19:c6:96:67:9a:
                    87:ca:72:74:c2:4d:87:9a:d5:72:94:22:ff:a9:5f:
                    fb:4a:01:a8:db:0f:ca:e3:e6:36:bc:e1:12:1e:93:
                    01:fa:1a:46:72:53:30:f5:1c:d1:3a:d7:f3:23:5b:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:70:2E:48:12:3D:E5:15:99:06:6A:8B:42:AF:91:7B:DD:16:00:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.162.0/23
                  161.151.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:e4:fb:55:0c:e8:1a:f0:35:74:58:49:12:9c:e2:f1:29:
         91:18:e8:de:6a:c0:a3:03:ec:43:96:19:78:1b:95:ad:1a:c6:
         34:6f:5f:17:bf:51:6d:d2:41:83:e4:1c:cc:88:24:b7:12:3a:
         fd:13:5e:c2:ab:c7:04:92:83:fb:06:2a:6f:e6:96:28:c3:44:
         bb:1a:48:e6:d7:45:b0:c9:08:9a:46:e0:f7:c1:59:da:5a:8f:
         b0:c3:b1:69:7b:a1:c1:42:57:33:4f:ba:4c:92:6b:10:05:e4:
         ed:e5:31:1e:11:e1:96:7c:99:1a:96:56:75:c9:a3:40:78:8a:
         10:64:2e:4b:bc:c8:a7:af:43:e4:83:9b:3c:88:c7:c3:69:dc:
         50:25:d6:7d:64:1b:75:75:46:04:57:40:88:85:50:fc:d0:b1:
         d6:70:f1:cd:32:38:bd:ec:a8:f9:40:cc:74:85:a0:75:c6:c3:
         bf:88:17:8b:d9:ce:2e:b4:cf:a3:12:e3:34:ce:a6:c6:f2:b2:
         f5:d5:18:ec:10:b0:a8:60:f4:f0:61:d4:3f:6a:28:79:2f:ea:
         30:e0:06:42:8a:c2:54:72:91:a0:9d:9e:86:ee:96:6d:ed:7c:
         9f:26:4f:8e:a2:60:bb:8c:25:3b:b3:4b:ea:b4:04:62:6f:a5:
         b4:04:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org