Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1e4d53d2-931e-3df5-9ec5-c5069adaf561.roa
File:                     1e4d53d2-931e-3df5-9ec5-c5069adaf561.roa (raw, json)
Hash identifier:          wD0sh7/nsP/vuMrk0Aq2Y1TBzRMcwhKGHWTceF5UQEw=
Subject key identifier:   A9:D5:F3:CB:C8:C9:E1:4F:29:EA:26:F3:8F:9E:F9:9F:6A:65:1C:96
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584898D60042AC4029646B41BC80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1e4d53d2-931e-3df5-9ec5-c5069adaf561.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     203724
IP address blocks:        161.69.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:00:42:ac:40:29:64:6b:41:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=80cfe374-58af-4984-b16a-2fd30263a446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:bb:a0:3a:ce:dd:e6:db:56:0e:5e:ab:1c:
                    f3:74:05:84:5b:3d:bd:8e:c6:7e:ed:32:62:0c:e4:
                    6b:9f:72:3f:fc:c7:8f:17:37:ff:2d:25:d6:15:8b:
                    67:2a:76:9e:6c:22:f2:d7:30:89:66:17:bf:ae:83:
                    72:67:42:6e:ef:55:fb:cf:16:78:21:49:b8:1a:ad:
                    6a:6d:f7:f9:a0:97:70:fc:e6:6d:08:d3:eb:15:ae:
                    a9:16:b1:f8:f4:c4:b3:31:03:e1:84:c5:c1:01:d0:
                    85:dc:f3:ac:e1:ea:f0:4c:11:4c:d0:3b:8f:4a:3d:
                    b4:b4:e6:cc:10:d0:02:f1:34:78:11:75:43:fb:8c:
                    91:e8:03:53:f7:03:ff:d8:08:eb:89:be:fd:cd:da:
                    15:d5:c5:9d:a2:95:a1:28:1e:07:20:8c:14:5d:89:
                    1a:07:cf:82:fc:ee:8a:b6:a8:da:d7:ac:75:1f:b5:
                    2d:ba:8b:e9:1b:f8:88:4c:e6:fa:19:28:fa:6f:c4:
                    81:32:bb:a1:4b:dc:18:7b:d5:c4:13:79:25:dd:9a:
                    2f:eb:24:19:41:19:28:2e:9e:d2:ef:61:75:1b:d2:
                    f3:94:8f:54:96:95:92:8d:4d:86:b0:90:60:c3:08:
                    b7:69:bc:df:40:c6:0f:ac:ed:62:0f:2b:2f:35:fd:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D5:F3:CB:C8:C9:E1:4F:29:EA:26:F3:8F:9E:F9:9F:6A:65:1C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1e4d53d2-931e-3df5-9ec5-c5069adaf561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:33:74:3a:a6:1a:70:ed:da:48:9f:dd:d7:14:9e:9c:d5:b8:
         bf:19:14:99:72:fc:77:c8:80:7d:e7:52:08:ec:49:19:e1:60:
         e5:33:c0:da:9f:ee:64:34:45:f6:74:99:bb:a0:fc:5a:06:05:
         9c:cf:9d:80:24:82:61:a9:59:87:06:18:79:7e:cc:54:c7:83:
         e1:8b:40:ce:08:71:dd:01:80:74:8f:d7:23:35:1b:b5:05:2a:
         d1:5e:1f:e7:fa:07:d4:10:93:d8:08:06:17:96:f2:78:39:83:
         a9:7f:b4:a8:18:33:21:80:e6:59:1c:25:cc:59:dc:1d:cc:3a:
         39:98:c2:de:88:06:f5:c5:30:0e:bf:5e:5b:21:46:3d:c1:54:
         62:fd:64:60:1f:33:40:07:b8:ab:67:67:40:6a:dd:e0:f0:5a:
         67:06:f7:66:9c:d5:95:19:f0:4a:ae:10:24:87:78:5d:94:55:
         c0:3f:de:ec:79:d4:51:ff:88:0f:cf:f9:eb:bd:7e:a0:31:c6:
         01:c1:9d:62:2f:5e:ca:95:c1:5f:3c:9f:6a:13:a2:74:f6:e4:
         71:75:0a:17:f7:75:43:e8:ad:9c:0b:4a:f3:f4:a3:8f:52:d3:
         a4:57:30:fe:2f:62:b7:5f:b6:3f:9a:7a:9a:7e:2c:04:46:a2:
         b2:39:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:10:33 2025 by rpki-client