Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa
File:                     614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa (raw, json)
Hash identifier:          dPtJdn5F9uGPaiwVPxjHvqb27lfiPOWh3zUbpTj3nwY=
Subject key identifier:   89:17:60:B4:D9:68:52:F8:88:C3:6E:36:A5:C0:DA:0C:49:AE:EC:3C
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451A159047B2E6F38B3791D600
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        161.69.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:90:47:b2:e6:f3:8b:37:91:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=31421ec9-34ab-4511-b386-fb4d88bcd18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:d6:97:e1:f8:12:68:0d:96:65:60:fa:67:
                    bc:23:71:2e:38:80:fa:c5:6d:29:49:70:3a:3b:ac:
                    2a:7b:4b:78:0b:53:02:f8:82:c1:25:f6:04:00:ae:
                    55:42:59:b9:6d:8d:cd:80:2f:e5:ad:ea:b0:b0:f1:
                    b9:47:b8:c1:10:d8:ae:15:2f:c2:a6:fc:fb:77:ad:
                    76:67:19:33:56:d2:c3:43:8f:33:95:a1:14:ce:e8:
                    8b:4b:0a:b5:b2:c1:78:b3:37:c6:2d:ad:da:8c:62:
                    55:94:78:30:d9:00:87:e2:0c:6b:af:5e:06:9d:f3:
                    81:9c:0e:de:5b:45:64:65:77:b0:38:ae:8c:eb:98:
                    11:88:74:a1:e6:25:75:60:c6:26:65:5b:8c:85:3f:
                    55:52:35:ea:e1:d5:3e:59:03:e1:47:cf:05:23:4b:
                    78:8e:e3:69:59:ce:e5:ed:2c:e4:5e:06:1f:13:23:
                    bb:63:fe:7f:b6:34:5c:55:98:d0:15:25:d0:65:c6:
                    70:41:32:5e:4b:ca:6e:6b:32:de:f0:c3:9c:5a:c4:
                    0d:f7:60:8d:78:1e:e8:4c:ff:1a:2f:43:52:fd:fe:
                    55:85:98:62:9a:f8:03:3d:d3:5d:d4:dd:88:a1:03:
                    3d:d6:a3:9b:14:e2:5a:cd:e7:6f:0e:31:25:7c:b3:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:60:B4:D9:68:52:F8:88:C3:6E:36:A5:C0:DA:0C:49:AE:EC:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2d:0a:e9:8b:13:f1:67:7f:3b:d6:70:9f:30:cf:06:84:0a:
         c7:24:87:16:c4:de:01:ea:8e:b4:e7:7f:0d:f6:74:df:c1:f6:
         74:96:be:07:df:fd:0e:a5:c0:e9:ed:25:64:d4:52:16:0c:23:
         0b:f5:83:94:ec:48:11:88:7a:7c:80:64:96:84:f3:bb:19:7f:
         b2:8e:7b:9b:dc:f2:fd:a1:b9:7b:2e:77:b2:9f:89:c7:32:ba:
         12:73:fc:7a:d7:33:9b:51:83:71:44:97:28:f3:aa:dc:75:a5:
         61:95:bd:f3:a9:74:bc:19:da:32:81:b6:5f:a1:a6:ef:cb:a5:
         32:27:9b:68:45:6a:c2:4e:c4:42:51:fd:44:db:b4:ce:c1:3c:
         b1:09:21:3c:25:07:66:32:40:aa:17:f0:78:49:fd:5d:17:98:
         7d:e7:8c:ad:b1:0b:74:5e:5e:9e:fa:96:43:c8:c5:f2:47:eb:
         a5:45:64:0f:9c:e0:d2:69:3e:c7:0c:a4:cd:8e:84:e9:67:82:
         84:4c:bd:d9:90:1f:9d:3b:cf:f6:9d:c1:d7:60:74:b8:e9:dd:
         fb:f3:03:fa:f9:14:4f:32:1a:b3:cc:66:63:d3:00:12:fd:66:
         9c:bc:9e:40:d7:48:ee:b0:c4:7d:89:87:4e:86:48:ed:b2:c5:
         ab:7f:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:31 2024 by rpki-client on console-ams.rpki-client.org