Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/66aacdc2-6980-3211-ba4e-e1695d84a3b9.roa
File:                     66aacdc2-6980-3211-ba4e-e1695d84a3b9.roa (raw, json)
Hash identifier:          ZEtxp64T2PX7KPZxInz8R8GCAr6Jt3iYI8z2dpvHEPs=
Subject key identifier:   20:00:25:C5:82:E2:FE:B6:0F:28:59:DD:31:63:7B:2F:37:6D:DF:FE
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858471E7069B57AD992DBBB36AF80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/66aacdc2-6980-3211-ba4e-e1695d84a3b9.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     203724
IP address blocks:        161.69.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:69:b5:7a:d9:92:db:bb:36:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=87dd0d14-eaa6-44e6-95f8-8933a5ac03bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:49:c0:b0:e5:cc:1d:b5:8b:14:0d:36:12:
                    a0:f3:d2:0e:f9:31:d0:e4:86:6d:a6:a5:0e:97:ae:
                    b4:86:37:99:80:85:c9:8a:25:86:fe:db:9e:d1:f1:
                    be:57:b3:b1:5f:86:9d:65:50:3c:66:3c:90:5a:f6:
                    0c:9e:c2:d3:f4:a0:a1:04:db:95:4f:68:c5:ac:02:
                    4e:bb:cb:f0:da:f9:cd:d8:bf:6a:e5:19:81:00:c4:
                    c8:92:fd:fc:a5:33:30:17:7f:6c:3b:8e:70:f1:86:
                    4d:d7:39:ba:11:95:4d:b9:99:37:7c:e8:f2:6a:f6:
                    83:d9:35:df:be:4f:4e:b6:34:ae:f3:d7:9c:1f:c9:
                    ac:c4:fc:5c:73:e8:b9:ec:31:2b:1d:d4:51:13:0c:
                    04:a7:cf:95:67:b0:62:c9:a6:7d:ff:9a:4d:14:cd:
                    20:0b:35:c4:6d:b2:ad:b5:cf:6a:ea:bb:e1:ea:09:
                    02:46:a8:ce:29:f5:20:a5:8b:ec:d4:3a:cb:19:bb:
                    1d:59:38:b3:34:a2:15:d4:0a:ad:8b:de:6c:89:d2:
                    b8:5d:f6:98:bd:81:30:40:d0:1a:08:f6:f7:1c:c7:
                    6a:db:34:6a:78:c2:ba:5e:7d:15:4f:3b:2c:28:7e:
                    65:52:c8:5b:0e:f3:6d:51:34:00:29:06:df:69:a0:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:00:25:C5:82:E2:FE:B6:0F:28:59:DD:31:63:7B:2F:37:6D:DF:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/66aacdc2-6980-3211-ba4e-e1695d84a3b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:96:c6:74:a1:7c:ee:e0:8c:3b:9e:d1:0f:61:b5:21:5f:a1:
         f4:68:46:8f:07:83:c0:76:c0:c1:94:48:48:67:98:6b:1f:86:
         e2:a6:9f:66:30:19:4c:ae:9f:c5:8b:74:c3:08:b1:31:d7:62:
         8a:3c:36:d6:ad:5d:33:8c:58:69:43:78:97:86:31:cc:b5:74:
         7c:72:f4:70:94:09:a3:81:e5:79:30:3a:6f:f0:8b:01:a7:cf:
         d7:f6:02:1a:49:ae:a5:f1:50:73:b2:32:c5:53:17:95:93:97:
         6b:e4:91:ee:8c:ff:78:91:b7:67:f1:87:be:91:c4:9d:fc:e7:
         30:80:f8:d8:f8:67:a5:67:a4:0c:98:dd:2b:5b:93:25:af:9a:
         58:11:25:77:25:bf:64:2e:41:2c:0b:14:ee:82:93:0a:54:02:
         9f:fc:cf:32:6f:06:45:d4:a2:df:2b:6d:e7:15:ab:fc:47:c1:
         4f:b7:8e:0d:c1:6e:ad:14:16:bb:f9:eb:46:f8:3a:c4:bd:03:
         8f:92:7f:a4:2c:d6:cb:26:0c:cc:61:6a:02:b0:fe:67:7d:92:
         b0:17:5f:1c:06:62:0b:c5:1f:30:ec:58:b5:69:b3:d9:07:da:
         5d:be:51:d3:3e:fb:bd:f4:1d:ca:66:47:5d:ff:7d:ca:f9:60:
         39:79:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org