Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5772069d-5081-37ac-98ad-09ef7ab25303.roa
File:                     5772069d-5081-37ac-98ad-09ef7ab25303.roa (raw, json)
Hash identifier:          kZYIxDZPz+48PSB6Cxm7LF5v4T1efIMADcMZbk5InFM=
Subject key identifier:   2E:AA:3D:65:0D:BF:B7:A3:0E:29:D3:E7:7F:1B:25:08:45:4E:61:4E
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B9616C1A4A4A91B2248D73A0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5772069d-5081-37ac-98ad-09ef7ab25303.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        161.69.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6c:1a:4a:4a:91:b2:24:8d:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=b8997abc-9e9b-4a72-8e51-3670ce006ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1f:16:70:ad:3d:63:b8:ad:e5:d0:d3:0d:b0:
                    68:23:07:be:b1:e9:4e:96:fd:f5:ad:01:27:b2:1f:
                    cd:53:4b:e6:26:60:46:fc:68:d2:71:f2:be:ea:1a:
                    5e:ea:0e:49:b1:e2:89:d9:96:07:77:bb:aa:e7:60:
                    e4:5e:ab:90:ea:a7:72:db:e1:11:71:66:d9:28:76:
                    80:d9:83:d3:2c:26:a1:20:7c:24:60:2f:c3:00:d3:
                    3d:0f:61:e6:47:33:b6:27:90:0b:52:4b:f4:df:8c:
                    1b:83:48:a1:ba:49:d1:7b:d3:ec:d2:00:55:2d:c3:
                    6e:e5:a3:e3:ef:de:8d:75:b5:0a:63:aa:24:e2:d6:
                    de:e0:fd:c8:ac:83:fa:2b:b2:50:6b:36:a7:c7:8d:
                    0a:d8:04:ed:b7:f2:ed:ca:c5:ca:7e:05:1b:2d:24:
                    42:26:b7:f6:79:0a:a4:3c:78:fe:e7:58:04:57:0d:
                    3d:84:45:4a:76:d8:0c:6c:54:fc:57:c8:68:6b:b2:
                    42:fd:87:25:4b:9a:9d:65:ae:65:1a:7b:3d:35:61:
                    d4:ac:66:41:bd:9c:34:fc:39:f9:61:ec:30:a1:46:
                    38:42:db:85:4b:62:64:e2:36:0d:c0:ea:f0:44:74:
                    37:4a:f2:ac:42:6a:82:47:1a:c8:56:ce:26:9c:7d:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AA:3D:65:0D:BF:B7:A3:0E:29:D3:E7:7F:1B:25:08:45:4E:61:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5772069d-5081-37ac-98ad-09ef7ab25303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:83:93:11:f3:83:b7:54:d2:a4:06:12:02:90:76:b3:2e:a3:
         b0:63:3a:d6:ca:a7:a8:2c:78:b8:65:f7:3b:9a:9b:7a:95:be:
         8b:61:da:7a:90:7d:f7:4a:01:6b:3c:d6:b5:75:08:88:28:53:
         b6:20:b1:05:69:87:95:2d:a4:db:b6:5b:47:40:28:17:22:0b:
         f8:8e:aa:f6:bb:04:fa:70:86:b2:77:dc:2d:ec:47:91:60:65:
         68:35:62:34:fa:8c:e2:5a:a6:90:37:15:5f:1d:e7:a2:d9:a3:
         e5:05:2d:f4:25:15:34:ca:88:5e:0b:29:b6:c5:10:fd:93:53:
         3a:e7:54:b3:37:7f:b6:2b:e9:56:d0:9a:98:0a:26:70:f3:29:
         33:27:b0:2c:f7:52:55:99:c2:c4:31:5e:0e:03:41:72:95:6d:
         81:73:8e:1a:67:fb:f2:01:97:3e:a4:74:36:de:87:a1:57:13:
         2c:fc:89:a9:65:2d:f5:ee:0e:5f:78:22:1a:5a:41:1f:76:d6:
         60:2b:85:4d:9e:7d:10:e3:bb:68:1b:cb:ea:35:20:4e:65:bc:
         8a:c0:d5:6f:b2:d7:94:71:65:e9:a3:6d:91:25:d3:e3:78:7e:
         46:0b:12:65:36:87:7a:cf:b0:fc:57:08:c7:5d:e0:b1:9a:96:
         d3:28:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org