Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa
File:                     b44b5711-0436-3c6d-afd4-086e370fe33b.roa (raw, json)
Hash identifier:          1u7k6KMziDbH0C/Ymsgldken3YZElmHW4B+EY+Zt6uw=
Subject key identifier:   FE:BB:4C:D9:2A:32:9E:A9:8D:33:A9:B3:6B:E7:5E:E9:08:60:B2:14
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F432858457FDDCC2E5458A2609C070100
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     36445
IP address blocks:        161.38.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:cc:2e:54:58:a2:60:9c:07:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=a7fbd7bc-664b-4d66-baa5-f936552d6680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:f0:51:16:3d:f5:09:1a:d1:74:23:37:12:
                    cf:1f:f3:e6:90:26:78:f0:ec:35:c7:06:74:db:53:
                    a5:ac:3d:9c:5a:e7:ca:2b:87:a2:59:c9:66:91:a3:
                    ec:fe:0c:fa:cf:03:28:fe:78:40:0b:61:36:07:fa:
                    40:20:0c:2a:17:8f:11:be:33:7f:82:32:20:bd:75:
                    c3:6f:b5:24:01:3d:f9:36:d3:2e:42:75:be:89:f8:
                    56:8b:e4:b5:22:b7:66:6c:c6:bf:4a:71:74:a3:b1:
                    d0:46:71:44:69:65:4a:44:fe:c5:df:2c:0e:54:8f:
                    87:2f:8e:2c:44:5d:16:28:57:fb:ab:17:2c:5e:f0:
                    91:4d:b1:bb:70:29:f9:99:04:00:50:ef:92:5b:84:
                    4a:dd:e0:77:6b:44:4f:52:f3:3b:d9:09:20:8d:ed:
                    62:61:93:68:00:73:c2:45:9f:b7:ba:0c:31:10:48:
                    9f:fc:04:2e:7b:45:4d:b7:e0:6f:28:c2:2b:3d:e7:
                    6d:cb:72:93:1f:fb:35:07:86:02:17:d1:a9:1d:c7:
                    f5:08:ce:71:4f:1f:81:ee:54:11:22:a4:68:e9:8d:
                    0c:fb:74:95:74:4a:8d:2a:38:38:96:62:13:e0:8e:
                    a9:4e:a4:cd:2b:6e:6c:5c:6c:e2:16:2f:26:04:9b:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BB:4C:D9:2A:32:9E:A9:8D:33:A9:B3:6B:E7:5E:E9:08:60:B2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:77:38:bc:56:10:6f:9c:a0:0e:42:dc:b6:2b:86:33:14:
         05:f1:9a:3b:87:d7:92:e1:be:31:a1:59:75:56:65:ff:b0:f1:
         61:6a:c1:e7:bd:fd:e2:b8:bb:2c:96:62:a4:34:f4:87:76:8b:
         ca:e6:cb:ec:a0:63:7a:fc:b7:c2:4b:24:7c:41:62:f7:87:af:
         ef:6e:57:1a:37:fd:14:28:73:5d:79:3e:3d:a6:b3:24:8c:c9:
         5d:d9:53:2e:5a:87:d4:5e:0e:fa:6c:21:6b:d7:3c:29:c3:d0:
         32:40:be:0d:09:bc:47:5c:74:73:c6:44:a1:e0:e5:19:06:ca:
         ef:bb:7d:00:0b:1f:ed:53:84:38:0c:bc:38:e9:b3:ab:63:9f:
         02:e0:93:87:3c:03:88:fd:70:c2:38:ea:ca:21:af:62:fa:1a:
         46:8e:dd:e1:85:90:58:22:cf:c5:a3:8e:54:1c:88:b4:27:9f:
         67:07:55:22:ea:dc:70:c9:a1:fc:e2:23:86:86:8f:30:e8:83:
         92:9d:77:76:62:28:b0:0c:fd:20:2d:82:f0:20:0c:26:46:b1:
         c7:e3:28:88:2e:48:c8:40:8d:95:4c:8c:74:81:5d:3a:41:61:
         3f:e8:54:71:89:5a:cf:79:80:1c:e5:3f:c5:db:c4:b0:7b:7f:
         7f:ef:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:34 2024 by rpki-client on console-fra.rpki-client.org