Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/41518b64-6a9b-3ec3-9c91-ec6dc2885d43.roa
File:                     41518b64-6a9b-3ec3-9c91-ec6dc2885d43.roa (raw, json)
Hash identifier:          lxx9a/AHODtyTe1lkYcg19xPIrXwx/SH9/ZTpm195F4=
Subject key identifier:   89:4E:EC:BF:85:55:AA:A7:61:0D:19:C2:4A:D9:F2:3D:A1:34:6F:39
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B961746161113CC77D531740
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/41518b64-6a9b-3ec3-9c91-ec6dc2885d43.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        161.69.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:74:61:61:11:3c:c7:7d:53:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=7ac87513-23a1-4cab-b2c9-9f60d7e0040e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:04:71:1b:ae:50:96:ad:b8:99:3b:33:6e:
                    fd:42:e3:b9:31:18:82:01:4e:8d:b9:a1:7d:3b:36:
                    c7:e3:5f:2e:fd:98:e1:4d:97:be:f3:75:2c:6c:18:
                    cb:d4:16:95:12:31:d0:67:22:e7:ab:a5:03:20:bc:
                    c3:2e:a1:1c:2b:57:fa:67:a2:b7:b8:28:68:99:0f:
                    ad:ae:59:54:c3:4c:e5:24:5d:d4:75:7f:e5:3f:8f:
                    f0:4b:50:81:0e:5f:55:5f:fe:02:cb:8d:b9:c1:d5:
                    cb:20:67:68:61:ba:ea:41:0d:4e:f9:d6:f1:5d:69:
                    80:1a:2d:15:f7:71:00:13:44:05:b2:fe:d7:4e:7a:
                    38:cc:8f:ba:e0:7b:6f:a6:6f:f9:ab:61:2d:1d:5b:
                    34:31:c2:f9:78:d7:07:9b:3d:b6:22:64:45:aa:39:
                    91:e1:53:96:ff:e8:c0:e3:99:48:d0:84:be:35:28:
                    af:68:25:23:04:55:88:45:30:39:85:0c:61:2e:84:
                    a7:e5:f8:69:2e:77:38:06:df:18:6c:e9:e5:14:f0:
                    d0:b9:0e:95:a7:7f:bd:1e:c6:fe:cd:eb:ea:15:9a:
                    1d:37:7d:e4:32:bf:04:81:79:89:87:58:f0:23:6c:
                    7a:b6:71:25:a1:80:d6:59:c1:d1:18:bc:83:af:d9:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4E:EC:BF:85:55:AA:A7:61:0D:19:C2:4A:D9:F2:3D:A1:34:6F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/41518b64-6a9b-3ec3-9c91-ec6dc2885d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:a1:99:62:4e:a8:79:1c:3f:d5:b2:5f:64:a7:b3:5e:4a:
         f1:58:d0:f9:84:1f:48:42:07:d5:18:42:36:35:e1:91:93:e2:
         4b:18:24:6f:cd:e3:83:f8:f1:8e:08:74:92:48:d4:c2:33:09:
         57:35:a1:41:74:18:50:c8:0a:2e:96:5e:44:e8:a4:9c:b5:ce:
         04:cb:ed:9a:32:88:d1:63:29:a4:db:a6:06:03:58:cd:ec:70:
         43:75:d5:5b:08:1f:4b:fa:99:5e:d5:41:76:32:6e:03:4a:d2:
         a1:dc:6e:7e:5e:8d:a0:b1:ce:4e:77:6d:7e:c7:08:bd:b8:87:
         d1:c7:80:88:29:1f:f1:60:89:6e:cf:6c:4d:94:9c:9c:5e:07:
         54:7d:d4:85:09:ae:94:f4:38:cb:9a:42:da:c5:5a:a4:cc:a6:
         4e:0c:78:19:49:ba:f6:22:04:19:aa:d9:23:f5:69:c4:e5:07:
         c5:c6:c4:9c:37:48:f7:b9:76:67:07:f5:4f:ff:e6:0a:8d:c7:
         88:68:22:52:71:30:b0:b5:58:54:aa:58:db:f0:d5:71:ab:9f:
         7e:29:20:d5:46:0c:42:8d:1b:f7:88:75:0b:21:a1:d7:16:f0:
         5e:b4:ff:89:5e:be:85:f2:de:33:f3:23:4c:d6:f5:ae:44:14:
         2a:3f:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org