Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/43dcf424-bcc1-3b39-b2e3-de116d5d97f1.roa
File:                     43dcf424-bcc1-3b39-b2e3-de116d5d97f1.roa (raw, json)
Hash identifier:          JZi5t5h6nQn8sJohWqi/NK4zpKt82Do+eeKHQenqKE8=
Subject key identifier:   D6:94:1D:B1:48:FE:72:FD:3C:09:7D:7B:F5:EF:C7:4C:D1:08:EF:D0
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B9616DBDE64A89CDAEF7B500
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/43dcf424-bcc1-3b39-b2e3-de116d5d97f1.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        161.69.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6d:bd:e6:4a:89:cd:ae:f7:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=4c9482bb-8f11-44a2-a684-8025357559d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:bc:c5:08:39:ab:05:fb:7b:45:ef:fe:9b:
                    6c:d8:4a:a2:9a:2b:01:39:40:db:83:b5:3d:aa:03:
                    45:38:89:7f:6e:50:3b:99:9f:4e:29:ad:f3:a5:e4:
                    bf:c6:3a:c0:b7:53:15:9d:5f:46:a9:0e:52:15:83:
                    8b:44:55:67:f5:e9:42:2d:fc:99:ce:49:00:79:30:
                    b8:df:d7:9f:37:60:10:aa:bc:db:6f:c9:c2:c3:3b:
                    c6:1f:71:b3:01:42:43:15:7b:a3:b3:1b:c1:fa:36:
                    64:4e:ef:e5:c9:35:74:b8:9c:f0:cf:85:15:65:91:
                    fa:39:0e:8d:cb:06:78:2e:2d:97:d1:56:a0:79:96:
                    96:c4:f2:c4:a4:d3:0c:fc:05:fa:02:dd:56:a6:5b:
                    23:ef:1d:bf:3e:fb:74:c5:74:af:96:b2:33:ff:66:
                    b2:95:27:4f:6a:8d:fa:8e:86:53:b5:be:04:b3:a5:
                    af:53:69:85:2f:3d:cf:1e:15:2f:b6:66:38:34:d6:
                    5e:68:61:4b:70:2e:ae:bc:d3:65:15:03:56:0f:c1:
                    20:1f:7e:e1:d7:68:2f:69:24:e4:68:35:ee:55:c7:
                    6e:1f:d8:45:a6:36:6e:04:c6:44:e4:1c:16:cd:10:
                    38:b5:c8:6d:10:17:a1:ef:10:2a:1f:82:12:de:6b:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:94:1D:B1:48:FE:72:FD:3C:09:7D:7B:F5:EF:C7:4C:D1:08:EF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/43dcf424-bcc1-3b39-b2e3-de116d5d97f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:85:73:da:03:0b:d7:b1:c8:53:f6:dd:ad:81:d6:8c:5d:
         44:b2:c9:03:a1:a3:17:07:27:1c:0d:a8:5f:20:b2:82:b1:87:
         eb:ad:30:19:4f:f7:11:69:d9:75:7f:d1:a8:cb:ad:03:28:2c:
         65:63:7e:47:67:56:ea:fc:17:38:bd:93:32:ec:b1:c5:03:04:
         88:05:ca:dd:af:9e:a9:07:81:61:49:34:14:a8:5a:b7:ad:00:
         fd:a8:d1:e7:ed:1c:97:d6:63:05:37:3d:2d:2c:7d:5f:06:28:
         32:c9:c6:c6:7b:b3:9c:7e:68:8c:d7:de:3f:b8:56:b0:31:35:
         42:87:23:e7:a9:e1:d7:e9:6e:1b:70:d8:e9:b3:04:53:fa:47:
         2d:27:a6:37:27:ce:db:29:7b:b0:25:f1:b1:4e:78:44:82:42:
         82:c9:d3:5f:53:9a:09:3f:e8:80:aa:b5:d6:b8:d0:e9:30:f5:
         42:81:b5:da:84:fc:ee:e7:4f:46:2a:96:81:ce:3d:86:8e:ef:
         8e:4e:c2:90:45:77:8c:a4:60:16:5e:65:37:d6:a1:0e:05:2e:
         9a:b6:cf:fd:3a:e8:55:9f:a3:e2:58:53:12:8c:f0:93:dd:38:
         bf:bd:77:d9:84:e8:97:ce:a5:e0:ea:d3:a0:dd:c0:e0:99:95:
         f1:e7:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org