Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3381e410-5050-3295-b0fa-e4f36ad0b8ba.roa
File:                     3381e410-5050-3295-b0fa-e4f36ad0b8ba.roa (raw, json)
Hash identifier:          kp1J9iS2RvLhYyEXyXPxscKGkZKxWhlw2JTL3Ad4br8=
Subject key identifier:   D0:22:E1:CE:C5:88:65:B6:4F:05:49:95:E3:E3:B0:A8:E8:56:24:A3
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B9616F4D6A05F4297DC529C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3381e410-5050-3295-b0fa-e4f36ad0b8ba.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        161.69.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6f:4d:6a:05:f4:29:7d:c5:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=b94a6d53-818e-45f5-a7b0-c29b7961eea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:72:ee:1c:6c:ad:5e:a9:7f:ad:e8:52:7f:
                    05:55:c4:88:4a:08:c0:68:cf:fc:a9:c0:09:8c:b8:
                    8a:1f:a3:12:57:a7:dc:b8:9c:70:c1:ff:7c:17:55:
                    fc:03:cd:8e:3c:3b:46:a2:41:ba:56:9b:39:c0:26:
                    95:eb:cc:51:1d:1f:f0:2f:44:d8:9f:71:6f:5d:19:
                    21:26:4b:00:0e:59:08:89:fd:0d:5e:47:82:34:d3:
                    47:65:7a:5e:bc:7e:c8:9d:cb:a8:35:49:61:26:10:
                    ef:a1:84:22:c9:9c:56:14:c2:89:5c:a0:32:48:39:
                    3f:23:d8:22:77:71:b7:73:65:d8:71:68:84:03:7b:
                    27:df:62:8f:11:54:6f:df:f8:0d:2e:eb:0f:58:b1:
                    d6:44:bd:08:bc:e5:f3:d4:93:fb:87:1e:be:27:a0:
                    80:49:2f:dc:69:35:99:39:c6:d3:99:59:00:61:9f:
                    03:34:e3:da:cf:49:88:4b:c1:9a:fc:86:ab:22:d6:
                    71:c5:52:24:b7:7e:30:9e:78:c9:77:07:43:17:42:
                    36:2f:d5:06:e2:cb:5b:16:a3:8b:cd:4f:d8:e1:88:
                    62:3e:17:ed:16:0a:ac:ff:de:5d:09:fb:77:b9:cf:
                    ac:6d:1b:5c:8a:33:28:8c:a0:e4:66:30:08:28:e2:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:22:E1:CE:C5:88:65:B6:4F:05:49:95:E3:E3:B0:A8:E8:56:24:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3381e410-5050-3295-b0fa-e4f36ad0b8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7c:e4:78:75:94:44:72:93:7d:d4:de:8f:1a:1d:55:24:2d:
         8a:4b:59:be:2a:62:a3:c5:42:77:77:9c:ed:24:25:66:fa:1d:
         f8:70:f6:22:66:0f:15:a4:2d:2c:54:da:a3:a2:9a:85:29:f0:
         16:e1:f6:74:38:a2:91:37:5e:e5:98:53:b4:f5:7b:bb:af:70:
         d1:7c:81:b3:0f:0c:b0:c5:52:20:a6:79:6b:6a:04:b6:5a:ab:
         b9:e3:54:15:99:1f:0d:52:91:48:a2:fe:80:20:36:9d:89:82:
         2c:88:f2:b7:f5:ad:71:72:c2:66:b8:b7:8b:da:7c:26:62:e5:
         d1:20:c3:1d:ff:d9:96:d4:19:94:76:51:ad:ff:46:ca:73:9a:
         e0:c0:78:60:96:d9:02:22:ef:63:56:e1:61:50:76:1b:6a:24:
         ec:37:27:42:01:ae:36:dd:fd:d6:f0:20:1b:13:2c:15:0b:7b:
         29:8f:84:f0:5b:b3:98:63:03:36:ec:70:a7:f7:59:ad:d8:c2:
         32:67:11:b0:34:e5:e8:a5:82:44:9a:56:fd:bd:f1:91:b5:46:
         a4:56:2a:ed:3c:e8:d1:65:3b:86:d5:0e:ed:10:7e:31:56:43:
         e4:24:11:ca:bf:81:e2:ee:22:d3:f4:a4:aa:93:2b:2e:ca:1b:
         5e:d9:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org