Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/002e5797-866a-3765-8009-a02bde7b0032.roa
File:                     002e5797-866a-3765-8009-a02bde7b0032.roa (raw, json)
Hash identifier:          k9xWRHJWP7Z3z+j1p0Xff02lWneXI1saXmBkBTXPYJg=
Subject key identifier:   35:26:F7:70:B1:38:CF:EC:AD:D5:E0:20:F9:4C:47:1D:F6:7D:D1:51
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451B7AEEC11952AA1F26777EE0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/002e5797-866a-3765-8009-a02bde7b0032.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        161.69.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:ee:c1:19:52:aa:1f:26:77:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=feccf229-4de2-4960-bf98-f97dae649843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:20:2e:9a:a8:d3:03:4a:0e:29:b8:1f:95:
                    0e:93:22:ca:82:51:06:69:9f:d1:54:d9:0e:17:86:
                    07:53:e6:59:69:b9:25:7c:69:a9:d9:2f:b2:3f:55:
                    68:9c:bc:19:3f:b6:e9:4a:ba:f9:2e:49:0e:45:05:
                    34:8b:41:84:55:57:5d:8a:f4:57:15:7b:38:94:43:
                    56:34:bf:6a:86:62:63:ab:e0:9d:ab:dd:88:59:8f:
                    df:5e:cc:3b:91:27:1e:00:28:7f:57:46:5e:1f:98:
                    bd:2d:3c:a7:53:16:63:f3:ba:41:c1:a1:c7:47:be:
                    92:c5:40:3c:c0:a2:d3:cd:41:6e:ec:f8:d9:1e:f5:
                    ee:b8:d0:13:d6:ce:06:a9:51:87:d6:c7:fa:b6:42:
                    33:2b:a0:bd:c1:43:12:c6:33:00:06:78:12:78:1d:
                    6c:2e:79:e6:97:c6:20:e1:5f:6d:d0:09:bd:1a:7e:
                    31:da:46:ac:f8:4c:01:fa:c1:03:af:55:a4:0b:fc:
                    e9:b5:20:e1:a3:ac:94:1d:fb:50:95:2f:35:d2:8f:
                    67:83:e2:4c:27:a6:28:18:ed:3b:86:0e:89:a2:1b:
                    80:e9:34:63:bc:e3:fa:0f:16:24:32:05:67:68:0f:
                    31:68:84:a2:eb:6d:ee:4c:70:34:ba:84:a9:1f:60:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:26:F7:70:B1:38:CF:EC:AD:D5:E0:20:F9:4C:47:1D:F6:7D:D1:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/002e5797-866a-3765-8009-a02bde7b0032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ac:18:71:5e:93:54:eb:30:4f:7a:11:6d:6b:95:60:ed:51:
         cc:96:41:63:86:7b:0b:75:17:5a:ba:28:88:92:46:85:7d:fa:
         18:63:5b:11:ae:9c:22:f3:63:09:50:d0:e6:7b:27:5d:81:88:
         ff:15:9e:93:f3:76:82:24:f5:05:db:6a:01:84:a8:a0:39:af:
         55:29:e6:32:5b:41:7a:25:ad:e1:6e:a4:5a:c7:b9:57:a6:d1:
         41:00:47:85:cf:a7:7f:0d:16:1d:2e:9c:83:84:80:d2:1d:f4:
         1d:02:b9:4f:38:7a:43:10:10:3e:32:aa:52:d5:d4:15:02:94:
         10:3f:98:08:16:65:cc:ee:53:98:d9:e5:23:7c:aa:42:26:22:
         f8:bb:1c:28:05:95:5d:9f:34:ea:97:92:ad:a1:f5:a2:d2:e1:
         eb:d9:14:5f:36:9f:8d:0f:6a:4f:dc:f5:80:47:e5:4c:33:af:
         80:af:c8:5f:a3:e2:6f:78:5d:09:08:85:eb:ba:5f:0a:88:32:
         72:73:93:60:a7:cc:ae:35:b9:29:79:62:02:b3:2c:3d:1c:b1:
         be:9c:f5:ee:ed:b5:dd:fd:93:60:e9:63:0d:4b:34:e1:03:5b:
         f3:bb:f5:b6:76:55:f0:f3:10:c4:24:f5:15:82:7f:19:15:bf:
         6e:ce:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:43:01 2024 by rpki-client on console-ams.rpki-client.org