Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4c0346e5-8fd4-33b2-b08d-b1037ef8b8a5.roa
File:                     4c0346e5-8fd4-33b2-b08d-b1037ef8b8a5.roa (raw, json)
Hash identifier:          o3xGxUMKHFFoygq3M4VZEUul8vhHkgpyG4AK0hyMz9I=
Subject key identifier:   E6:1A:AD:1C:ED:2D:84:71:F7:EC:F7:4A:9A:12:E5:00:A0:DB:FD:B7
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451A158D140893059B63852940
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4c0346e5-8fd4-33b2-b08d-b1037ef8b8a5.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     203724
IP address blocks:        161.69.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8d:14:08:93:05:9b:63:85:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=e761fa7e-3902-4f0f-a3dc-e849a3c00cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:c4:d6:3c:3d:95:73:16:da:a4:a1:05:00:
                    91:a8:cc:b8:db:4f:cc:71:a9:8d:e9:0d:4a:56:36:
                    8d:6a:37:62:b2:d5:83:4b:70:74:70:b8:45:73:99:
                    ac:cd:19:1a:37:e9:26:f8:03:89:2e:d9:f7:60:18:
                    d1:1a:80:32:9d:62:f7:93:1b:cc:69:2d:32:8c:c5:
                    81:04:7c:8f:d1:21:d8:18:50:bc:65:ab:53:b1:d7:
                    d9:52:57:d2:20:a5:94:0a:be:c5:32:30:83:46:c6:
                    f0:42:e2:78:4c:d0:30:59:60:1b:19:fc:f4:b1:eb:
                    77:70:b2:9f:c0:e1:33:d3:a4:3c:bf:29:0b:9a:5b:
                    03:14:e6:8e:d4:e0:4c:26:b2:31:c0:e6:79:bf:19:
                    03:44:d8:33:17:bd:c1:99:ee:f1:3c:e4:9a:a8:58:
                    74:a6:dc:27:34:2b:87:f2:c7:07:0b:31:18:ea:0b:
                    43:5b:f9:ae:15:43:0c:b8:ec:73:3e:e7:e4:90:11:
                    06:8e:4e:f8:06:9b:2d:81:7c:f8:d9:5b:d6:e6:9b:
                    6c:ba:87:95:13:6a:f8:8f:f4:25:32:11:e7:62:67:
                    43:8a:0f:85:69:2c:d8:d3:45:26:d1:a2:ad:ca:e1:
                    8f:d7:b0:0c:68:13:3b:af:37:87:cc:f2:3a:1b:d7:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1A:AD:1C:ED:2D:84:71:F7:EC:F7:4A:9A:12:E5:00:A0:DB:FD:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4c0346e5-8fd4-33b2-b08d-b1037ef8b8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:90:02:8d:db:a7:d3:11:01:c0:71:85:cd:59:1b:8e:c1:84:
         c0:09:5b:22:b4:80:06:2a:4b:c9:0d:3e:63:ec:96:a9:6e:3b:
         16:e6:df:89:6b:45:47:ca:58:6c:21:e9:ab:68:ba:63:3d:b1:
         f4:36:76:69:17:38:86:1a:bd:b5:e3:60:29:97:35:4e:23:30:
         82:e2:b3:15:89:7f:49:62:79:76:7f:0e:41:11:6c:0a:d5:0e:
         d6:7d:83:35:f4:16:58:ae:b6:cf:93:21:6e:d9:55:7d:e3:89:
         55:67:8d:c0:32:ed:e6:e1:0a:ad:03:37:a4:09:a3:74:48:28:
         f4:a1:20:6b:9f:e5:ea:3a:17:30:39:b8:53:d2:b4:2f:04:26:
         6f:d4:61:d8:b3:42:13:b3:bc:50:32:53:1e:b2:2e:77:9b:be:
         75:b5:4f:25:7d:4d:36:da:4a:db:88:3f:e1:a0:87:80:57:aa:
         1c:0c:7c:0e:66:6a:f1:f9:2c:92:e4:3b:d4:5d:ce:12:24:db:
         1f:bb:35:e5:b5:88:93:9b:41:34:54:55:92:9b:f9:91:18:39:
         66:e3:49:59:f6:c8:bf:26:8f:b8:e6:cd:71:cc:eb:49:67:cd:
         0d:90:69:7b:bf:a2:c8:0f:71:8a:26:bc:bd:1f:82:8c:f0:ae:
         d8:3e:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:31 2024 by rpki-client on console-ams.rpki-client.org