Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/529fce39-910b-3bf7-a1c6-1c3330938dd6.roa
File:                     529fce39-910b-3bf7-a1c6-1c3330938dd6.roa (raw, json)
Hash identifier:          0/gAdAUv9kZ2qjo0ZJG0WA2pj+M7vEHRy+y5xn/LLnk=
Subject key identifier:   21:08:F5:3F:D3:68:14:31:4E:56:FB:B6:9F:8B:00:EF:8C:1F:D3:9A
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858455E5D970FAB82F4B1D23683C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/529fce39-910b-3bf7-a1c6-1c3330938dd6.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     203724
IP address blocks:        161.69.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:97:0f:ab:82:f4:b1:d2:36:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=1c96900f-3288-48fe-8511-34e4a1d9b934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:42:85:c0:96:e4:98:b3:6b:fe:74:40:4c:
                    1f:a5:0a:5a:6f:0f:55:13:e6:a0:c9:eb:f6:18:be:
                    47:5e:72:88:52:67:2e:e2:a4:90:b1:a4:66:e8:70:
                    65:7a:d8:18:f3:5b:aa:8e:92:b2:6b:1f:0b:59:52:
                    c5:03:3e:06:76:6f:2b:ea:3f:42:ae:d4:11:d9:72:
                    bc:4d:65:ff:2b:03:d0:ef:fb:07:5b:ad:63:db:db:
                    76:c0:a2:f0:2a:20:de:c5:2a:1d:50:9a:38:26:67:
                    db:c0:da:dd:1f:16:aa:f0:bf:f0:6c:d9:78:57:a8:
                    2d:9b:4f:92:b9:e8:ec:ec:45:7f:60:16:72:94:e0:
                    5b:ae:ab:c6:63:b1:79:fe:29:09:8d:ea:e0:ef:64:
                    0c:09:84:b6:43:47:65:16:0b:1a:a7:da:c2:6d:a0:
                    07:a1:a0:30:1e:95:8f:9b:a1:89:6c:65:2a:00:91:
                    6f:8d:4f:df:e3:d0:86:cc:4e:59:9a:81:64:7e:35:
                    95:ca:55:97:10:33:c1:ea:b5:04:d7:b2:32:52:bb:
                    a1:9b:38:3c:28:f6:29:33:d5:73:7c:f1:42:41:0f:
                    84:1a:31:eb:df:a0:d6:00:c2:89:15:77:a7:89:6a:
                    81:95:ba:7b:ab:00:60:fa:89:8c:86:3d:37:bf:84:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:08:F5:3F:D3:68:14:31:4E:56:FB:B6:9F:8B:00:EF:8C:1F:D3:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/529fce39-910b-3bf7-a1c6-1c3330938dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:77:e1:72:76:ac:56:6e:10:24:92:d6:84:a0:f6:6b:88:21:
         5e:9e:c3:d0:28:5f:95:78:dd:80:98:39:d2:35:45:96:d5:b8:
         1a:94:d5:34:c5:58:b8:31:a1:11:c8:36:48:18:55:cf:67:0f:
         64:bc:16:5d:0d:cf:e4:e3:01:38:85:0c:bf:96:60:20:74:49:
         bf:49:98:c1:f9:6e:96:d7:48:cf:d3:73:55:50:e9:0f:6b:5d:
         35:70:61:f9:db:fd:17:98:ab:0d:36:1e:ad:5a:42:e7:78:ba:
         b5:c1:09:eb:55:1c:ea:00:3d:40:38:1e:6e:e7:e5:b3:9a:a4:
         30:b9:98:9e:19:4c:20:cb:e0:b6:6f:85:e3:ef:37:e2:48:0f:
         a8:2d:3d:8e:fa:cc:9e:0b:eb:dd:d3:79:b1:96:d5:85:f5:56:
         a6:0d:91:f9:21:7c:41:cb:e2:44:98:c8:53:74:6d:bd:2b:1f:
         51:a8:95:2b:51:84:ae:80:ae:b8:19:17:f6:61:66:de:aa:73:
         da:a1:cb:3d:10:6e:9a:3e:c1:4a:03:55:65:cf:f3:50:b9:c0:
         b0:dc:91:59:4e:6e:50:7e:4f:98:58:3d:f6:21:6c:00:39:b6:
         23:24:a6:6b:79:3e:e6:42:29:f3:53:98:18:b5:6d:ae:ed:33:
         72:ce:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:43:01 2024 by rpki-client on console-ams.rpki-client.org