Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa
File:                     2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa (raw, json)
Hash identifier:          zg57E6Nz0JD08SrFchN94SnBW5kfVU0SoEkEVIQLFy0=
Subject key identifier:   BF:96:DE:97:94:B2:7B:04:0C:8B:D7:C8:99:12:30:73:89:53:9D:13
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584898D607FEFBB13B4D7F709980
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     203724
IP address blocks:        161.69.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:07:fe:fb:b1:3b:4d:7f:70:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=0f10035c-bece-4e39-93d3-9d481eba1860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:eb:b9:cc:aa:f1:ec:90:d1:25:96:11:bc:07:
                    d7:2d:20:55:2c:0d:07:3c:6f:33:f5:4d:39:20:ae:
                    30:82:cf:14:3d:f0:54:5f:aa:f8:3f:cb:98:cb:55:
                    70:24:a6:e4:e6:3c:43:1c:1e:26:8c:87:59:92:dc:
                    7f:2d:d0:2f:86:b5:b6:f3:db:65:1e:cd:63:77:95:
                    b1:26:3e:22:53:b5:e9:a1:d7:55:6e:4c:dc:9a:fe:
                    59:86:ba:f9:e1:51:31:e3:47:ad:fa:19:98:87:17:
                    af:e6:b3:1c:67:58:39:45:58:89:85:3f:f9:ea:b1:
                    93:41:26:7c:37:5d:af:ff:52:f1:58:79:e1:56:85:
                    7d:a9:34:c7:c1:97:32:9e:37:4f:9c:f0:07:f3:4e:
                    73:e2:27:33:9c:9d:16:ee:95:ad:8d:08:ae:04:55:
                    0e:0a:76:7f:8e:a3:98:dd:aa:cd:eb:6d:90:e2:1e:
                    79:27:c2:e2:11:8c:a3:b2:35:86:0a:b8:b4:f4:f4:
                    02:a8:02:68:03:a5:d7:27:88:d0:16:ed:1a:b2:eb:
                    7b:89:77:69:9a:d4:a3:b2:22:08:4f:27:8a:b8:1b:
                    6d:03:84:80:4a:61:9f:79:a7:f9:bd:30:6f:93:7e:
                    9e:80:03:3c:21:1c:8b:76:89:af:ca:e1:33:df:81:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:96:DE:97:94:B2:7B:04:0C:8B:D7:C8:99:12:30:73:89:53:9D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ed:a2:df:72:ec:ae:21:43:52:b9:41:14:5e:c9:22:db:29:
         ab:b1:b5:5d:8c:9d:a9:c6:de:11:a2:64:84:2e:23:73:3c:a6:
         5b:d0:de:c3:cb:3c:88:2e:72:b6:53:3d:f6:7b:14:ed:26:74:
         d0:86:15:7c:f5:dd:b5:36:9f:98:d6:7e:c7:16:81:ec:30:2e:
         68:ca:ec:87:66:a8:e1:1c:3e:07:d7:49:be:45:84:57:fb:57:
         6b:ea:71:eb:0d:5d:66:ae:47:11:0c:ba:25:63:c4:ce:ef:b4:
         0d:c7:09:28:ff:30:12:c1:b4:68:cf:e2:2a:76:86:89:c7:fb:
         6c:33:98:a5:02:ce:31:94:cf:b5:cc:05:7b:9e:f4:0b:74:b0:
         3f:1a:0e:23:f6:33:fd:7c:00:1d:ee:94:b2:67:f9:50:67:09:
         f5:b4:fc:97:b0:3f:c6:a4:1f:28:e7:75:af:90:03:e5:9d:e4:
         36:49:77:28:92:66:77:b4:7b:98:be:9b:fb:c1:ac:b2:3b:ae:
         74:9d:6c:df:18:f2:01:05:4e:6b:c4:f5:65:04:9d:61:ec:43:
         ef:0d:10:9c:d8:7b:46:24:35:f9:f0:69:05:b1:84:46:4c:df:
         97:0a:87:ef:fb:6d:e9:85:5d:34:59:f9:95:51:f5:d3:ed:ab:
         9b:48:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:48:31 2025 by rpki-client