Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa
File:                     0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa (raw, json)
Hash identifier:          S6B50w0uyT1d1o2MK5gia9BBlHiGV0gkaH/7lMEoLCA=
Subject key identifier:   92:A5:8F:7A:A0:56:59:27:C9:80:F2:CC:D9:37:C9:4C:A6:6D:78:F7
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858475EA63319975C146E98978120
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     31898
IP address blocks:        161.69.32.0/22 maxlen: 24
                          161.69.48.0/23 maxlen: 24
                          161.69.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:33:19:97:5c:14:6e:98:97:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=9bec73a1-ea13-492e-a820-eb2ac8b6a3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:e4:a8:e2:b0:b9:14:aa:a3:3d:e0:04:55:
                    fb:69:4c:6c:43:d0:22:33:49:9c:22:a6:95:89:df:
                    45:b7:08:7f:97:c6:35:6c:fa:ba:4f:0b:39:c6:5d:
                    70:1e:27:e1:9d:b8:96:dd:75:d5:90:38:bb:d8:a4:
                    09:61:0d:b6:fa:1c:60:1e:fe:da:31:e0:d9:81:8d:
                    54:c2:6c:77:00:91:0a:92:90:1a:63:33:11:22:22:
                    0b:f4:5a:08:3a:dd:44:27:1c:2b:82:22:ac:43:78:
                    ac:24:1d:21:d8:9a:30:d4:c9:3e:40:9d:14:cc:9b:
                    5e:af:0c:42:f2:2b:b5:af:4c:3c:9a:50:d5:2f:78:
                    ba:76:1d:05:d9:38:c4:40:a7:53:f8:38:20:e8:6a:
                    cc:02:15:59:ef:9b:41:16:c3:a8:b7:ba:b3:c2:ea:
                    35:ea:5b:37:b9:69:23:88:c2:f8:ab:5a:9c:a3:43:
                    76:3d:00:f8:ea:45:73:9b:3c:76:5a:55:5e:a7:b3:
                    d8:ee:39:5e:e1:b4:a7:7b:9d:36:84:47:b1:7b:ab:
                    2d:91:54:a2:2c:03:14:b1:f8:a6:43:0a:58:4a:d6:
                    e7:a9:e2:1f:af:a7:4c:e1:0a:3d:99:3a:43:dd:ef:
                    15:ee:b7:35:13:ab:99:00:f9:47:e5:a5:89:62:b0:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A5:8F:7A:A0:56:59:27:C9:80:F2:CC:D9:37:C9:4C:A6:6D:78:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.32.0/22
                  161.69.48.0/23
                  161.69.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:04:7c:6b:e3:65:ba:e6:ca:47:47:55:2f:d2:30:d0:be:d6:
         99:71:e2:21:24:75:69:b0:f0:df:7d:34:78:bc:a9:0f:04:12:
         41:b4:7f:b8:4b:e7:62:cd:64:2c:2d:ee:58:79:12:10:a9:3b:
         6e:b3:17:43:ec:34:35:88:36:3f:8b:5b:03:44:85:f5:92:b8:
         a0:d8:af:62:b7:33:4d:1f:0f:90:7d:e8:23:82:69:18:65:fe:
         5c:77:b4:18:76:f5:9b:b2:da:a3:fa:44:2e:9e:07:fe:27:59:
         e4:d5:23:8a:fb:4e:18:b0:a3:dc:e4:32:2b:31:6c:1c:59:d8:
         0e:ac:d0:3e:ab:41:b7:ce:2f:dc:61:78:3b:70:be:12:30:e8:
         17:2b:32:4c:53:f5:65:c5:d3:2b:02:34:2c:4b:33:45:c0:db:
         a1:62:7a:e8:25:ca:10:69:c4:7b:aa:95:47:12:9b:60:6a:dd:
         7e:9d:f1:72:04:ba:2c:e9:29:3b:97:fc:08:cc:9a:35:a0:89:
         d7:5e:ec:d5:ec:91:0c:30:ed:06:eb:3d:31:e4:d8:43:1e:95:
         3d:a0:d2:98:a9:ad:eb:c4:32:25:0e:41:c4:0c:ce:c2:2c:d6:
         3c:08:03:5b:7b:b6:31:22:26:74:9e:89:33:97:3c:f7:ad:3c:
         d7:55:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org