Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa
File:                     67d064b2-9899-36ce-80d6-ef6fd43df579.roa (raw, json)
Hash identifier:          S4cfH6ET1hW3OYMC+usoMd7/TvdWXFCrOw/CLRlH558=
Subject key identifier:   3F:47:C1:A7:77:DA:B0:0D:79:E7:F5:C7:C9:32:29:A5:F4:D5:DE:1A
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451A158CC459314E8358742B40
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     203724
IP address blocks:        161.69.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8c:c4:59:31:4e:83:58:74:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=60dd99f9-8563-41d4-9f70-328822a8579e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:c2:cb:72:ba:9d:5f:f5:e4:44:ef:c9:28:
                    e1:22:48:ac:1f:12:f2:df:d1:43:d0:5e:43:43:47:
                    67:9f:a5:e3:7b:c6:8f:49:19:e4:cf:bd:68:d6:15:
                    4d:6f:11:1c:87:21:04:80:42:c0:56:24:ee:2c:48:
                    62:33:b7:b5:fb:58:f5:e3:65:7a:95:0c:68:e3:30:
                    8a:50:90:dc:2a:2c:c3:21:0d:ac:64:9f:78:10:87:
                    9c:c1:a7:34:d6:24:81:d6:63:c7:b0:a9:e8:3e:d4:
                    01:95:40:93:06:c0:8e:9c:a7:f4:ce:75:40:e7:5e:
                    94:b6:d5:70:e0:91:cd:86:ec:b0:93:c6:77:6b:aa:
                    5d:78:3c:68:b7:f8:e6:b3:d3:54:f1:a9:b2:83:a2:
                    f3:2f:74:51:74:b1:28:c8:f4:72:f9:f4:bc:2c:5c:
                    cb:1f:d1:91:c2:52:bc:81:5a:0c:0e:24:96:38:8d:
                    c9:f9:9b:01:78:32:16:4a:02:60:3d:1a:98:07:be:
                    7c:25:f7:48:44:15:63:2e:8f:1c:ac:be:1d:1e:40:
                    61:28:c6:33:40:a8:a8:c7:c5:53:eb:f8:59:aa:9a:
                    b4:ff:01:4c:c5:39:da:b2:26:96:fc:dc:46:b0:85:
                    f0:4c:70:0d:0d:e9:dc:7a:cf:b8:8a:44:c2:1c:62:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:C1:A7:77:DA:B0:0D:79:E7:F5:C7:C9:32:29:A5:F4:D5:DE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:da:93:7c:5d:eb:0b:3c:17:87:1c:d5:d1:cd:2e:b8:f3:87:
         71:e0:1c:84:2f:cc:8c:8b:06:42:35:0e:79:82:89:8a:ab:3d:
         e8:f9:2b:5a:46:2b:39:23:23:78:e4:ec:23:8e:9a:2b:5d:a4:
         d7:c4:77:4c:24:c3:73:08:50:ca:de:70:18:17:a2:46:6a:87:
         d4:3f:62:4b:0e:cc:d8:96:20:02:ac:fd:9e:71:85:6a:11:8b:
         66:89:7b:a8:a8:07:1e:c4:58:dc:01:5a:2a:cc:19:3f:14:55:
         42:01:7d:53:35:5a:ec:55:c5:fd:84:5e:fe:de:3f:cc:c5:b1:
         3f:2c:db:0b:a9:3b:f7:d9:a8:eb:30:c4:5a:61:a5:a8:d7:75:
         c6:35:9c:f1:13:5d:9b:30:f7:d8:fb:92:6e:6b:11:5c:75:80:
         7f:0b:db:2e:22:6e:b4:12:63:16:49:d2:f0:8e:24:90:22:2d:
         ad:2a:7b:25:cb:a0:78:48:c9:51:99:8a:a4:6c:5f:bf:bc:a8:
         82:d8:65:90:d3:43:77:b5:63:03:89:a3:d8:29:8b:76:21:c0:
         02:7a:54:9a:bf:b9:21:05:28:84:54:e5:d4:62:97:f4:a9:91:
         c6:4c:ca:22:1d:dd:26:eb:21:51:0a:3e:b9:55:9f:dd:2c:7f:
         5f:e2:af:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUaFYzEWTFOg1h0K0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk
NjBkZDk5ZjktODU2My00MWQ0LTlmNzAtMzI4ODIyYTg1NzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU3Cy3K6nV/15ETvySjhIkisHxLy39FD0F5D
Q0dnn6Xje8aPSRnkz71o1hVNbxEchyEEgELAViTuLEhiM7e1+1j142V6lQxo4zCK
UJDcKizDIQ2sZJ94EIecwac01iSB1mPHsKnoPtQBlUCTBsCOnKf0znVA516UttVw
4JHNhuywk8Z3a6pdeDxot/jms9NU8amyg6LzL3RRdLEoyPRy+fS8LFzLH9GRwlK8
gVoMDiSWOI3J+ZsBeDIWSgJgPRqYB758JfdIRBVjLo8crL4dHkBhKMYzQKiox8VT
6/hZqpq0/wFMxTnasiaW/NxGsIXwTHANDences+4ikTCHGJa2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9Hwad32rANeef1x8kyKaX01d4aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNjdkMDY0YjItOTg5OS0z
NmNlLTgwZDYtZWY2ZmQ0M2RmNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLak3xd6ws8F4cc1dHNLrjzh3HgHIQvzIyLBkI1DnmCiYqrPej5K1pG
KzkjI3jk7COOmitdpNfEd0wkw3MIUMrecBgXokZqh9Q/YksOzNiWIAKs/Z5xhWoR
i2aJe6ioBx7EWNwBWirMGT8UVUIBfVM1WuxVxf2EXv7eP8zFsT8s2wupO/fZqOsw
xFphpajXdcY1nPETXZsw99j7km5rEVx1gH8L2y4ibrQSYxZJ0vCOJJAiLa0qeyXL
oHhIyVGZiqRsX7+8qILYZZDTQ3e1YwOJo9gpi3YhwAJ6VJq/uSEFKIRU5dRil/Sp
kcZMyiId3SbrIVEKPrlVn90sf1/ir5I=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:31 2024 by rpki-client on console-ams.rpki-client.org