Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4caedd40-d07c-3b26-aab0-3b6fb3599d13.roa
File:                     4caedd40-d07c-3b26-aab0-3b6fb3599d13.roa (raw, json)
Hash identifier:          +0vDO/RZVDsYwR5amE19Jv8JOFlJMHQ1ae7mzwVIEd8=
Subject key identifier:   02:8B:22:12:DE:35:73:CE:ED:4B:08:4F:62:A4:EC:CF:D4:57:6E:AA
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451B7AE9C58F85547A0DBB4580
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4caedd40-d07c-3b26-aab0-3b6fb3599d13.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        161.69.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:e9:c5:8f:85:54:7a:0d:bb:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=af5c284c-e149-4175-8cee-578bff2a7f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:fd:1a:cb:35:b4:bf:d3:17:b8:02:61:6e:
                    53:f8:51:df:fe:fd:ad:77:ae:77:2f:15:42:c7:82:
                    fc:aa:ce:18:4a:8b:25:c2:61:99:57:93:67:5a:69:
                    ba:01:cd:97:48:a3:35:de:76:7f:fd:bf:88:f5:a5:
                    26:31:20:ad:89:d8:60:b9:43:45:5e:6a:5a:19:67:
                    ad:20:59:59:d6:38:44:2f:b8:64:7d:8d:0d:f1:31:
                    61:91:c3:67:c5:59:bf:d1:c6:66:5f:69:17:6d:4b:
                    e5:84:46:da:ca:d9:be:2e:d6:e3:0d:9c:4c:c0:da:
                    94:f4:47:da:ed:32:9f:c9:8e:3a:df:69:c5:5a:20:
                    d0:86:d8:1e:b2:91:04:29:5c:02:0f:7d:49:90:8b:
                    da:4e:b4:20:e0:17:ac:2a:c5:34:7f:89:f9:b1:1b:
                    40:f8:21:61:21:70:45:c4:be:cd:f5:be:0c:e5:37:
                    e6:c1:18:32:71:99:9b:da:44:53:5f:f1:b2:fe:06:
                    fe:5d:d7:86:2d:e0:08:f9:d5:c6:2f:0c:44:15:c3:
                    57:77:7e:aa:26:46:d8:9d:3f:1f:00:93:66:28:16:
                    e2:05:cc:1f:87:c9:72:54:02:9b:92:e0:c4:d6:4d:
                    6b:43:ec:51:6e:c8:2b:5e:ce:ee:ef:1f:07:80:cd:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8B:22:12:DE:35:73:CE:ED:4B:08:4F:62:A4:EC:CF:D4:57:6E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4caedd40-d07c-3b26-aab0-3b6fb3599d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e7:c6:1f:d0:30:34:b1:35:29:50:61:d4:96:c6:bf:1e:ee:
         0d:66:91:6d:4c:5c:3d:e7:7c:59:35:17:1b:d5:3d:60:8a:c0:
         2b:be:bf:66:93:e7:6d:b7:f4:99:4a:f7:f6:ba:bf:15:3c:63:
         25:73:64:9b:ad:c1:c2:43:72:a1:29:df:4d:d4:90:1d:a4:25:
         bb:ac:4a:5a:4e:b0:f5:1b:c7:48:09:95:e6:6a:f9:5a:4a:4b:
         e9:39:1f:bd:0c:65:f6:51:06:92:e8:0e:fc:c9:ba:f7:d4:40:
         94:cc:b9:23:51:4b:7c:ef:3e:93:e8:4b:14:98:5a:f7:a9:75:
         3e:ca:2c:25:0d:7c:38:90:67:e2:7d:72:4a:8e:45:55:21:fc:
         54:9b:96:53:06:7d:60:e1:ac:2b:ac:db:5a:07:92:12:67:b2:
         a6:e9:34:83:5f:d7:7c:7c:08:7b:e0:cd:0c:d3:a2:65:76:93:
         a3:02:dc:41:b1:85:d1:b0:78:7e:6c:9c:a0:18:0b:36:74:f1:
         95:67:4b:5c:29:33:95:75:22:29:5d:7c:4d:19:3b:07:ed:0c:
         3f:a7:0c:32:5f:09:26:de:42:4e:1e:9f:ad:58:18:b7:f9:bb:
         af:1c:16:4f:d0:e8:9d:47:be:a4:50:d3:07:ea:c6:b2:9c:4d:
         40:ad:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:11:06 2024 by rpki-client on console-ams.rpki-client.org