Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/318d2637-ea2a-364a-b872-74f213a23c0f.roa
File:                     318d2637-ea2a-364a-b872-74f213a23c0f.roa (raw, json)
Hash identifier:          Z3HoUrkuFOfQykeok1CMk/undl+WEJzIdR0xP1N1dAU=
Subject key identifier:   42:53:DB:87:75:83:6F:8F:54:9A:64:16:7A:D2:F6:14:D7:6B:59:B3
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847E0AD3766BA067B05D52B96B0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/318d2637-ea2a-364a-b872-74f213a23c0f.roa
Signing time:             Thu 14 Nov 2024 14:50:02 +0000
ROA not before:           Thu 14 Nov 2024 14:50:02 +0000
ROA not after:            Wed 12 Feb 2025 14:50:02 +0000
asID:                     203724
IP address blocks:        161.69.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:ad:37:66:ba:06:7b:05:d5:2b:96:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Nov 14 14:50:02 2024 GMT
            Not After : Feb 12 14:50:02 2025 GMT
        Subject: CN=6b810e25-34d8-4684-be04-ca072faa87eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:e8:32:c5:40:f0:64:05:f6:03:ab:11:0c:
                    62:d0:59:84:d5:d5:27:8a:b6:01:cb:62:88:5d:29:
                    f8:ec:42:ac:1f:a0:00:d1:8d:78:46:52:b8:e5:bc:
                    c5:5c:6e:4e:aa:79:ba:bd:b5:ef:ef:10:73:db:69:
                    2f:59:9f:a2:6d:2b:03:33:66:bd:4d:fb:28:48:60:
                    f9:55:0e:39:4d:d5:6f:aa:76:02:69:c9:73:28:03:
                    10:9b:ab:f3:6f:8b:18:a5:d7:10:1e:ca:06:ba:cf:
                    c1:9d:7e:08:b4:73:43:e3:95:cb:57:5b:ef:af:ed:
                    24:08:1d:e3:64:81:3e:2f:58:b9:59:ae:02:99:2e:
                    f0:04:02:39:e1:6e:c5:bb:f3:e0:7a:ec:10:46:fc:
                    1e:28:3f:50:58:be:2e:c5:a0:13:fb:e9:d7:09:b4:
                    bf:2a:61:2e:a4:95:ea:93:4d:29:2e:c8:ac:23:74:
                    11:04:66:c7:12:d3:6d:77:79:aa:cf:dc:15:5f:5e:
                    2c:b5:f0:e0:d2:ad:69:3e:85:2a:af:ec:c8:e9:28:
                    30:25:48:68:13:da:3f:b6:97:8e:24:6b:0a:80:30:
                    17:41:6b:e4:8e:20:6e:05:68:e7:a2:c0:aa:92:a5:
                    f2:49:e5:d6:a9:bd:83:ae:06:71:f1:05:8f:ce:32:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:53:DB:87:75:83:6F:8F:54:9A:64:16:7A:D2:F6:14:D7:6B:59:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/318d2637-ea2a-364a-b872-74f213a23c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:ac:1e:7a:ec:c1:a2:4f:a2:fd:6d:cf:9d:c3:83:1e:47:
         97:8c:7a:61:78:4c:b7:e0:30:52:90:9d:71:42:dd:32:64:60:
         88:2b:da:3c:4d:36:53:0c:5a:06:d6:ee:e0:3b:24:d4:e5:9e:
         79:08:2f:94:7f:b6:67:e7:f0:bd:f7:6c:e6:f1:a8:bb:b8:41:
         23:4f:ac:b4:b4:e9:f1:6d:32:4b:b7:ad:ae:80:44:af:b8:20:
         de:91:6d:93:7d:c9:1c:e1:4c:9b:58:e5:1d:d0:6a:e1:4d:d1:
         ea:78:a8:a1:a7:05:ca:3e:d5:98:21:68:52:55:19:b6:d7:c5:
         6e:43:e8:db:ce:8d:b5:54:cf:4c:15:4c:f1:c4:0c:bf:67:17:
         9f:2e:f6:82:c2:77:2a:d1:4e:b8:6c:2d:6a:15:8e:12:a9:7e:
         06:ff:8f:f0:b4:65:4b:88:eb:f9:77:64:81:f6:9e:af:05:89:
         6c:c5:6e:ef:94:74:36:8f:fe:03:d1:7b:dc:e6:eb:e0:49:89:
         51:d8:f3:e6:ac:00:a3:5d:e8:1a:1b:62:c2:75:76:8b:15:6f:
         5c:d2:b7:7c:35:25:28:67:5d:39:5b:0d:bf:f9:b9:d9:f3:27:
         39:28:f6:a7:11:bf:4d:20:32:d3:8b:17:a4:05:9f:65:d3:55:
         58:ab:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org