Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/65485b9e-0107-3a09-ad0a-a5f6be081648.roa
File:                     65485b9e-0107-3a09-ad0a-a5f6be081648.roa (raw, json)
Hash identifier:          nj1e0gz+tSCW76trUgQQCihu+Abn2ZVWEahEWo1yEo4=
Subject key identifier:   C1:1B:D7:4E:C0:FA:79:C1:42:DF:58:C6:BA:BC:6F:2B:3C:19:D3:04
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285845280AF29FCA525A4B8089E280
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/65485b9e-0107-3a09-ad0a-a5f6be081648.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     203724
IP address blocks:        161.69.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f2:9f:ca:52:5a:4b:80:89:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=c0667b27-ecd4-4440-8fde-fa67e0a2613e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:1d:de:96:cb:45:20:7b:f6:40:6c:5a:22:
                    de:17:61:4c:a4:05:c7:c0:af:af:85:5d:86:65:07:
                    04:a3:21:9d:f7:75:5c:99:1e:1b:61:24:f5:23:14:
                    ac:dd:61:6a:af:63:aa:44:cc:c5:8b:ee:f4:bc:ba:
                    62:84:09:ea:12:a3:2b:a8:a1:37:45:e4:af:3c:df:
                    26:95:c9:16:0d:15:d9:a5:1d:3c:b2:cb:b9:fb:2a:
                    f0:8d:ed:5d:c0:ac:39:0a:ca:14:de:0c:04:7d:f9:
                    19:ba:90:6a:09:db:9f:ba:20:95:00:ed:c7:be:0e:
                    d8:ba:46:80:d6:a4:76:7c:f1:fc:81:a9:17:c1:e9:
                    4d:94:b9:d5:c7:1b:0a:f4:c7:85:b8:a7:c1:e9:8f:
                    53:6f:43:e9:fb:08:7e:5c:12:00:01:19:c3:cd:85:
                    e5:d1:6f:6a:c2:c4:cc:18:44:b1:bc:48:53:bd:49:
                    be:b0:ec:92:58:59:f8:99:cf:44:2a:17:11:44:3e:
                    aa:88:61:33:94:5d:ae:71:35:c6:ac:87:d3:7b:9d:
                    c1:5d:9b:15:75:b1:f5:ba:07:4c:1d:bf:b5:ae:8a:
                    64:34:8a:c6:f2:1f:18:04:dd:c8:79:17:e9:39:0c:
                    a0:3d:c5:76:26:bb:6c:78:8e:ee:cd:11:61:06:60:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:D7:4E:C0:FA:79:C1:42:DF:58:C6:BA:BC:6F:2B:3C:19:D3:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/65485b9e-0107-3a09-ad0a-a5f6be081648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b4:25:d5:e7:c0:27:fc:cb:0d:d3:13:12:b6:bb:bc:ed:1b:
         7c:6a:de:34:6a:97:f5:2f:29:2c:13:78:0c:7c:7a:76:fd:d9:
         fd:c9:43:cf:6c:d9:84:9f:c6:93:2b:2f:05:2c:9d:37:60:59:
         f4:ea:ee:14:3a:df:ad:63:f0:06:45:56:30:94:e9:04:20:71:
         da:af:94:7b:20:d2:35:fb:7a:ad:28:c3:90:d4:ce:1f:0d:c7:
         49:aa:57:88:c7:ab:ca:13:14:15:6c:67:b8:60:9a:29:dd:e2:
         84:e4:1f:ac:8b:ac:3b:c8:80:ed:9e:18:78:50:f0:d4:27:94:
         2e:16:b2:97:4e:52:43:0d:5a:2e:09:ec:19:c3:41:4a:69:e8:
         d5:a5:fd:4f:1a:ad:f0:38:69:2c:ea:fa:71:6a:66:ba:e7:e9:
         b3:b8:0a:ec:22:0d:5a:12:68:54:78:2f:ef:c3:c3:cb:9d:ae:
         52:27:7a:e2:25:33:5e:53:3d:67:17:d8:f0:b2:8e:79:da:0e:
         6c:0a:cf:c1:f3:a8:5a:cd:66:bf:c9:bc:ef:7d:49:52:09:05:
         11:ec:29:36:3b:61:e2:50:40:3d:d9:9b:72:0c:bd:f1:39:d2:
         ff:3a:84:2d:2c:c9:0c:2a:5d:ae:b7:ec:7e:b3:f0:a6:43:27:
         ea:83:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:31 2024 by rpki-client on console-ams.rpki-client.org