Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/62a974d3-eea9-3a6c-be54-d1e8d03130b4.roa
File:                     62a974d3-eea9-3a6c-be54-d1e8d03130b4.roa (raw, json)
Hash identifier:          UjAKN6o801UdMkNR6XWQu4ltAl64rm33RbeAkcs0RcM=
Subject key identifier:   DC:37:1A:F1:B1:34:72:7A:15:78:63:AA:E6:FE:17:54:13:33:A5:C5
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451B7AE9DCE268E7E48DD96A00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/62a974d3-eea9-3a6c-be54-d1e8d03130b4.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     203724
IP address blocks:        161.69.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:e9:dc:e2:68:e7:e4:8d:d9:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=207676df-a7da-4c8f-bd95-0f30b6911e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:f0:2c:67:4d:50:6c:63:e9:58:0a:7d:a7:
                    e2:97:66:2b:6f:36:fd:ae:43:d4:c5:e0:d0:ef:e9:
                    d9:e2:ff:6b:a2:1a:9d:79:e0:8f:36:25:9a:a8:f3:
                    59:96:95:54:b1:cc:99:fc:e9:5f:a9:cf:40:3a:64:
                    df:a3:7c:dd:06:d8:b2:c2:78:00:8a:41:59:dd:45:
                    de:b5:a4:cd:c2:23:6b:4e:91:26:f4:15:c6:66:36:
                    93:59:35:72:2d:77:c2:2c:d5:71:fb:7f:3c:6f:ce:
                    31:2f:c3:81:86:31:8e:b8:fd:66:fd:06:c9:51:49:
                    97:87:83:d0:a5:f9:31:d6:97:e6:19:e4:c6:db:53:
                    40:07:c6:11:06:e4:78:64:9d:40:cc:69:1b:bf:9b:
                    21:16:06:cd:c5:43:79:d9:78:fd:c0:66:b4:b5:7d:
                    01:6a:98:0e:61:55:95:7f:f0:18:89:86:ea:d4:5c:
                    5f:64:86:e6:02:4e:9b:fc:16:7f:d2:cc:a4:bc:61:
                    50:e8:a5:42:28:b3:18:bb:cd:7e:74:fa:ae:fa:67:
                    b6:91:91:85:e4:b8:53:a3:51:f4:ee:0b:db:37:09:
                    ce:f5:0d:ed:14:f6:c9:e2:0d:10:08:6a:0f:e5:46:
                    e5:c6:78:a6:e7:3e:53:13:26:d0:3c:cc:2c:98:9f:
                    57:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:1A:F1:B1:34:72:7A:15:78:63:AA:E6:FE:17:54:13:33:A5:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/62a974d3-eea9-3a6c-be54-d1e8d03130b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:13:77:95:01:a5:93:ce:ea:ca:96:f2:50:2f:2d:af:22:f5:
         49:80:9a:89:01:44:69:02:34:58:ec:dd:80:4e:3f:2a:9a:10:
         74:b9:b2:c6:b8:88:7d:4d:6b:48:2b:80:d9:0b:ca:16:a4:84:
         f3:ec:b7:79:65:a0:f4:18:a6:15:f3:3c:2f:c7:6b:6f:56:af:
         12:e9:7b:b4:56:9a:08:8b:89:1d:b8:f1:dc:08:65:e3:64:2e:
         fd:70:b0:c6:30:50:6b:69:55:fe:05:b9:ab:c7:d8:83:ee:87:
         64:f2:9a:66:14:f2:fc:79:ed:5e:56:16:b7:4c:24:0f:0f:f6:
         0b:6a:26:3c:af:40:57:17:17:2f:35:4e:3f:db:71:d5:87:41:
         1f:b3:21:dd:e9:49:a7:ba:d0:72:9b:84:91:78:a6:e4:c4:7c:
         14:7f:d1:b9:42:f1:a0:d5:ee:7c:34:b3:6a:5d:d9:b7:97:e5:
         0a:94:a6:f8:22:b8:cc:c2:9b:e4:46:cf:5a:3c:a1:6d:49:84:
         1f:4b:b7:b8:6b:3e:8e:3b:0f:d5:1e:af:65:44:bd:c2:fc:cb:
         30:0a:17:76:8d:af:f6:cf:2c:6f:ef:2d:a0:fd:dc:68:dd:41:
         0e:7e:fb:db:80:b4:47:9b:4a:96:49:b4:51:48:e2:a8:d3:9c:
         99:12:fd:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUbeunc4mjn5I3ZagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk
MjA3Njc2ZGYtYTdkYS00YzhmLWJkOTUtMGYzMGI2OTExZTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJfwLGdNUGxj6VgKfafil2Yrbzb9rkPUxeDQ
7+nZ4v9rohqdeeCPNiWaqPNZlpVUscyZ/Olfqc9AOmTfo3zdBtiywngAikFZ3UXe
taTNwiNrTpEm9BXGZjaTWTVyLXfCLNVx+388b84xL8OBhjGOuP1m/QbJUUmXh4PQ
pfkx1pfmGeTG21NAB8YRBuR4ZJ1AzGkbv5shFgbNxUN52Xj9wGa0tX0BapgOYVWV
f/AYiYbq1FxfZIbmAk6b/BZ/0sykvGFQ6KVCKLMYu81+dPqu+me2kZGF5LhTo1H0
7gvbNwnO9Q3tFPbJ4g0QCGoP5Ublxnim5z5TEybQPMwsmJ9XqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNw3GvGxNHJ6FXhjqub+F1QTM6XFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNjJhOTc0ZDMtZWVhOS0z
YTZjLWJlNTQtZDFlOGQwMzEzMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEATd5UBpZPO6sqW8lAvLa8i9UmAmokBRGkCNFjs3YBOPyqaEHS5ssa4
iH1Na0grgNkLyhakhPPst3lloPQYphXzPC/Ha29WrxLpe7RWmgiLiR248dwIZeNk
Lv1wsMYwUGtpVf4FuavH2IPuh2TymmYU8vx57V5WFrdMJA8P9gtqJjyvQFcXFy81
Tj/bcdWHQR+zId3pSae60HKbhJF4puTEfBR/0blC8aDV7nw0s2pd2beX5QqUpvgi
uMzCm+RGz1o8oW1JhB9Lt7hrPo47D9Uer2VEvcL8yzAKF3aNr/bPLG/vLaD93Gjd
QQ5++9uAtEebSpZJtFFI4qjTnJkS/Vk=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:31 2024 by rpki-client on console-ams.rpki-client.org