Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa
File:                     16b192af-4e6b-3d27-84c1-f5a3af373424.roa (raw, json)
Hash identifier:          Xeh76EbFGKzlHGNMXaxXzrevY2AJ1Mjr9bHBAU3SiLk=
Subject key identifier:   1C:BA:AE:A2:97:59:47:88:49:DE:C7:F1:60:7A:33:7B:AA:B1:F7:60
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B96173C1FDAE20FC79C5F340
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     205272
IP address blocks:        161.69.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:73:c1:fd:ae:20:fc:79:c5:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=9e8e5dae-e632-4196-8a65-b3754f49da64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:50:5f:e8:d4:3f:01:1c:05:94:be:46:d5:
                    25:33:cc:c1:a2:c3:11:02:6a:7f:14:67:6f:f9:ea:
                    89:3a:4e:b3:75:72:0f:ac:74:0e:51:22:3d:df:3a:
                    8b:44:09:ac:5f:f2:4a:b2:5f:77:ca:7a:10:ca:ea:
                    15:e6:70:7a:d5:15:41:1a:cc:79:1b:dd:63:54:96:
                    14:7d:0d:88:4a:c1:6f:65:e1:83:b8:15:7f:48:ad:
                    e1:ea:b1:04:e8:13:17:59:db:0a:8a:a4:d2:d0:af:
                    26:67:0b:02:b9:10:94:2c:bb:4d:6f:20:88:9a:f5:
                    b9:1c:5c:4b:87:c4:37:9e:fd:21:ef:ff:61:26:d2:
                    78:32:c9:6b:df:31:17:1f:d5:0a:6a:cc:6f:c2:b2:
                    6c:41:21:4e:f4:e3:bb:fd:00:ed:64:ee:1a:d1:10:
                    df:2d:54:ae:a4:5a:ad:26:6c:64:e2:69:f2:0e:bf:
                    86:d9:50:88:eb:8a:0d:7b:29:ca:2e:cd:fa:95:68:
                    02:31:1b:22:dc:0f:b8:99:45:9a:17:71:48:bd:ba:
                    b7:06:8b:03:5f:ed:22:b4:da:4b:0c:63:05:dc:ba:
                    3b:d1:37:67:75:c8:30:72:83:c0:20:75:1c:5f:f1:
                    49:71:43:bc:ab:cf:23:58:b8:f0:a2:f8:5b:bc:8d:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BA:AE:A2:97:59:47:88:49:DE:C7:F1:60:7A:33:7B:AA:B1:F7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:66:77:66:ed:51:7d:97:62:5b:cf:50:14:9e:f4:41:83:07:
         1e:09:00:13:dc:36:38:ab:e2:16:8a:cc:a4:4c:59:b4:70:8c:
         95:d2:b0:67:ed:49:00:75:ea:35:db:6e:97:d6:c0:86:ca:cf:
         e9:6d:85:e9:02:47:68:24:50:4a:18:e0:5c:2a:5f:78:48:84:
         3d:74:fa:50:37:fb:fb:97:98:44:1b:a5:ce:6c:5b:8e:fe:f0:
         c7:4c:1c:2d:28:c8:6e:b9:ea:f8:aa:97:1f:03:54:b4:12:06:
         0c:c4:22:9e:81:68:d1:99:e6:ac:08:c4:65:d1:32:9e:51:aa:
         d0:f4:83:e1:10:99:3b:28:f4:c1:70:e4:55:d0:a9:d3:37:7a:
         27:d7:09:e1:e2:b3:db:2b:f1:41:f6:b7:1a:9f:de:38:27:9a:
         a9:da:45:e6:10:6d:fb:21:c8:15:c3:6d:73:39:55:f5:56:08:
         1e:a0:2e:ad:3a:66:e2:d7:3b:95:fc:83:e4:fd:12:f9:3b:11:
         fa:27:ea:c4:7c:2a:da:ba:f2:c8:3e:48:ac:13:a9:f5:33:66:
         ae:a3:35:0e:05:ef:02:ff:92:3b:af:d5:99:b1:23:1b:79:92:
         a0:2a:c5:60:ed:bc:55:ee:30:35:db:ed:17:2b:15:38:84:a3:
         17:74:78:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXPB/a4g/HnF80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk
OWU4ZTVkYWUtZTYzMi00MTk2LThhNjUtYjM3NTRmNDlkYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptdQX+jUPwEcBZS+RtUlM8zBosMRAmp/FGdv
+eqJOk6zdXIPrHQOUSI93zqLRAmsX/JKsl93ynoQyuoV5nB61RVBGsx5G91jVJYU
fQ2ISsFvZeGDuBV/SK3h6rEE6BMXWdsKiqTS0K8mZwsCuRCULLtNbyCImvW5HFxL
h8Q3nv0h7/9hJtJ4Mslr3zEXH9UKasxvwrJsQSFO9OO7/QDtZO4a0RDfLVSupFqt
Jmxk4mnyDr+G2VCI64oNeynKLs36lWgCMRsi3A+4mUWaF3FIvbq3BosDX+0itNpL
DGMF3Lo70TdndcgwcoPAIHUcX/FJcUO8q88jWLjwovhbvI39yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBy6rqKXWUeISd7H8WB6M3uqsfdgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMTZiMTkyYWYtNGU2Yi0z
ZDI3LTg0YzEtZjVhM2FmMzczNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdmd2btUX2XYlvPUBSe9EGDBx4JABPcNjir4haKzKRMWbRwjJXSsGft
SQB16jXbbpfWwIbKz+lthekCR2gkUEoY4FwqX3hIhD10+lA3+/uXmEQbpc5sW47+
8MdMHC0oyG656viqlx8DVLQSBgzEIp6BaNGZ5qwIxGXRMp5RqtD0g+EQmTso9MFw
5FXQqdM3eifXCeHis9sr8UH2txqf3jgnmqnaReYQbfshyBXDbXM5VfVWCB6gLq06
ZuLXO5X8g+T9Evk7Efon6sR8Ktq68sg+SKwTqfUzZq6jNQ4F7wL/kjuv1ZmxIxt5
kqAqxWDtvFXuMDXb7RcrFTiEoxd0eLg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org