Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/01bd91a8-2774-3ca6-9935-fa094ad568fa.roa
File:                     01bd91a8-2774-3ca6-9935-fa094ad568fa.roa (raw, json)
Hash identifier:          2uejIW5JP3vNEVFGs9UinX4LzWqnw/bgbSi+mgnq3+A=
Subject key identifier:   A8:4C:D0:7F:AE:04:AB:79:6D:94:9C:13:29:45:78:DD:75:5D:03:C9
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451B7AEE800ED3E204581FADC0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/01bd91a8-2774-3ca6-9935-fa094ad568fa.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        161.69.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:ee:80:0e:d3:e2:04:58:1f:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=d255f9d3-f0cd-4acc-80fc-3499fb85e705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:7c:27:68:68:f6:27:74:39:2f:9d:c2:72:
                    bb:46:08:4a:96:0e:40:bf:a0:a2:97:97:98:75:2f:
                    76:10:50:45:95:cc:ca:b8:39:03:f5:ca:e3:f0:c2:
                    62:b3:79:da:bc:ca:6f:5c:84:42:9f:d1:f9:1f:a9:
                    08:44:b0:47:26:9f:14:ec:4f:28:8d:64:aa:1e:c7:
                    94:7d:e9:ef:ce:26:44:42:df:4e:17:91:0f:b1:c4:
                    34:f9:5e:56:9a:d8:e9:12:5f:79:18:11:37:0d:e9:
                    bd:01:d9:0a:95:35:eb:f6:37:7c:c1:f1:a7:2f:20:
                    0e:98:83:f4:83:98:d1:fe:1b:cb:e2:7e:2b:28:35:
                    9d:94:73:d8:f7:dc:02:5c:53:ef:dc:e6:1c:91:88:
                    90:b7:f3:4f:e8:6c:d6:c5:84:55:f5:45:5c:c2:29:
                    e4:c1:79:af:8e:1d:f9:67:18:17:62:10:f4:d0:76:
                    ed:9d:c8:1c:e4:99:0b:49:47:52:69:e2:77:6d:80:
                    7d:df:b8:d8:01:41:76:d4:89:6b:80:05:7f:cc:31:
                    bb:ac:57:5f:eb:4a:d0:76:b5:50:6f:d0:f3:af:a8:
                    08:f2:82:f2:be:02:ab:d3:61:5e:65:0b:71:f1:c9:
                    51:c1:90:b5:f6:4f:ef:49:48:bf:49:89:04:a2:ec:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4C:D0:7F:AE:04:AB:79:6D:94:9C:13:29:45:78:DD:75:5D:03:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/01bd91a8-2774-3ca6-9935-fa094ad568fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:bd:19:f6:b5:e7:61:19:8a:a4:8f:a0:5c:68:0d:e9:0a:
         84:27:a8:36:39:44:cb:c2:60:5f:47:5a:79:e6:f8:d5:5b:a9:
         91:6b:ee:cc:37:0c:e6:9b:5d:9e:03:8e:8c:48:e4:76:66:9f:
         79:3a:d4:12:1d:3c:e7:04:24:0b:97:4c:32:b8:cd:74:de:36:
         51:0d:a3:08:4f:da:8b:56:8e:f8:86:1f:75:da:9d:0b:de:72:
         e8:ec:b8:ae:49:02:d3:a6:51:76:6a:2d:6b:e2:c6:8f:41:4f:
         4a:6c:c7:10:f7:ee:ba:a7:e9:33:ee:2f:5d:6c:e3:ef:aa:14:
         a9:86:3b:1c:bd:71:bb:40:dc:2d:94:b5:00:9d:88:ee:94:75:
         fa:e1:67:77:41:51:0e:0e:f2:5e:33:45:c1:96:5c:0e:77:94:
         3c:17:29:ec:23:78:19:1f:4c:b2:ec:66:eb:52:f1:68:3b:17:
         95:36:8f:93:cb:67:84:65:26:9e:01:a6:3b:1c:45:bc:66:4a:
         a8:71:33:f6:14:7e:9f:ab:92:a5:72:e4:ca:41:4a:35:7d:2d:
         3d:e0:bf:16:d4:22:86:b1:df:38:78:fd:01:c9:17:c7:37:de:
         d5:77:ae:66:65:ef:63:e6:2a:84:cf:67:95:56:f9:4d:60:df:
         11:e8:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:31 2024 by rpki-client on console-ams.rpki-client.org