Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/082b504d-d367-3797-9b8a-ad6761749052.roa
File:                     082b504d-d367-3797-9b8a-ad6761749052.roa (raw, json)
Hash identifier:          BB/R2fzNYc8YIZrS92lZre3x7W8ohS5sSPQuLjwzhEo=
Subject key identifier:   AA:5E:CF:A4:38:25:7C:24:C0:6A:4F:99:FD:9E:AB:A8:82:CA:9F:16
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285848CC7B93867695F6964C398690
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/082b504d-d367-3797-9b8a-ad6761749052.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     203724
IP address blocks:        161.69.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:93:86:76:95:f6:96:4c:39:86:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=507142ab-d93b-4f2c-a294-13a557a387ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4b:9d:63:47:09:e2:96:1d:1f:63:f4:3f:05:
                    3c:f9:48:55:f6:03:15:4a:39:74:a5:0a:98:73:4a:
                    92:c9:5b:ef:a4:fc:f9:d5:e4:c1:30:87:67:60:5d:
                    ac:e6:1f:81:b8:3e:3a:cd:3a:e5:cf:66:36:76:90:
                    6e:7e:9d:ca:4c:9c:6e:e4:81:46:c3:2f:ae:73:56:
                    54:01:11:61:c6:e2:f3:cc:3b:eb:10:28:f1:b7:53:
                    65:62:8e:02:95:bf:89:79:39:3a:b2:fb:af:16:33:
                    1c:3b:18:c6:05:79:59:8f:15:02:b2:44:07:d3:b1:
                    59:7e:ea:c6:6d:57:58:40:0f:24:0a:25:1b:0c:34:
                    02:70:33:34:91:e4:7a:76:4b:11:72:41:ac:94:27:
                    2c:3b:53:fe:40:04:aa:63:39:77:12:1f:dc:51:73:
                    a0:dd:9c:c7:80:0e:92:5f:54:b6:a6:d9:65:43:f4:
                    d6:2f:c0:01:82:49:c8:10:93:00:0b:1e:0d:9a:0d:
                    4a:bc:95:dd:56:92:64:ad:5b:0c:37:c7:49:c3:19:
                    b3:76:61:dd:c8:a7:b2:ad:91:3f:45:5f:6d:9e:da:
                    f5:87:9a:88:85:76:c3:39:3f:4a:c8:7a:05:69:1f:
                    3b:3f:11:3a:63:5a:22:7d:59:46:65:8a:7e:db:09:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5E:CF:A4:38:25:7C:24:C0:6A:4F:99:FD:9E:AB:A8:82:CA:9F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/082b504d-d367-3797-9b8a-ad6761749052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7f:9b:e0:b1:9f:c4:6e:3d:10:b4:17:73:99:b9:87:71:ec:
         51:b7:0f:cf:bd:e5:b7:24:8c:58:ef:5f:e6:84:2a:7f:d9:ca:
         4c:ad:c1:dd:66:fc:0a:0f:6b:5f:dc:da:9e:b1:4d:87:5a:5c:
         2a:02:2a:2c:6a:c0:17:bd:7e:e1:57:51:03:c0:2e:18:d8:30:
         d9:a7:43:15:6a:49:24:17:65:a5:a3:ac:31:8f:38:5f:7e:9d:
         0c:59:33:5d:21:bc:ad:0d:9f:25:1c:28:2c:7c:cf:14:85:1c:
         cf:08:a0:85:22:79:b5:7a:7d:31:c7:11:8c:f2:12:a1:96:95:
         af:39:50:04:da:1f:3b:40:8b:e3:d9:81:a5:a0:67:c8:77:31:
         ee:ed:51:c3:89:4c:46:c4:10:6e:80:a7:16:cd:26:5b:4c:9e:
         54:46:8d:7e:5e:7c:b4:76:1a:e2:d7:cb:05:cd:44:91:29:3f:
         f4:29:90:b1:d3:d8:cb:cb:97:08:8b:f3:1e:25:83:41:e0:8c:
         43:01:02:cc:26:76:fa:29:cb:ec:5f:6a:06:43:e0:a8:7c:26:
         30:34:be:83:79:8e:65:82:77:83:a7:fc:98:ec:f1:94:fd:a5:
         3f:5b:71:73:63:aa:31:87:c5:3f:b4:80:bc:6b:d5:15:fd:28:
         33:74:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:12 2025 by rpki-client