Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa
File:                     67d064b2-9899-36ce-80d6-ef6fd43df579.roa (raw, json)
Hash identifier:          64xQAkNhOP+BRuG1p41HaPCrkwQt5BbEaq5+Clx/mEE=
Subject key identifier:   A0:28:30:78:1D:CD:80:9A:7D:77:BC:9B:49:CF:89:8F:FD:0F:3D:51
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B9616C9442DD4012548C7B10
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        161.69.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6c:94:42:dd:40:12:54:8c:7b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=64b2d01c-1082-4d69-98d4-770c8bdf3253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:84:40:69:09:9a:a5:3d:25:7c:30:da:1b:
                    a9:0e:67:f5:52:36:32:dc:8e:27:ff:1a:c0:41:43:
                    58:8a:65:81:dc:43:16:56:ad:9d:a7:75:12:f6:d8:
                    de:63:8a:58:0b:8b:78:6e:42:2a:25:17:df:66:1b:
                    8d:b8:e1:fe:f7:be:69:04:b2:13:a2:71:fd:66:82:
                    09:7c:c1:7c:e0:e4:b9:93:89:2c:78:e3:78:d1:56:
                    45:7b:dc:93:a6:da:73:20:a0:40:04:18:a7:31:2a:
                    ed:c1:2e:98:45:30:71:63:c5:d0:1c:3b:79:a4:1f:
                    93:d2:7b:ec:30:ae:53:13:f4:11:c4:a9:42:ea:5a:
                    04:24:9c:4f:69:44:90:5c:c8:76:81:35:b1:45:37:
                    8c:a7:34:b2:e7:28:43:22:aa:d8:37:59:75:31:6c:
                    19:6b:83:ce:05:a9:14:80:ef:4f:32:24:23:4d:5a:
                    29:d3:4a:d8:3f:00:fd:18:90:fb:e4:0e:c8:3d:d7:
                    69:05:c1:a7:07:56:fd:86:65:11:85:47:1f:be:b7:
                    d7:0e:ef:f4:ef:95:48:04:31:e8:b0:df:66:69:83:
                    59:3c:67:43:4c:3c:47:52:c9:2c:dc:b5:e9:1c:28:
                    98:38:7e:4b:38:9b:7e:16:68:6a:c6:c8:e9:0a:48:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:28:30:78:1D:CD:80:9A:7D:77:BC:9B:49:CF:89:8F:FD:0F:3D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/67d064b2-9899-36ce-80d6-ef6fd43df579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0d:a2:70:c3:95:8c:92:e1:a7:2c:af:98:ce:e1:97:1d:2c:
         a3:4e:72:89:96:06:38:f7:3e:f8:f2:3c:18:e8:12:47:68:da:
         8d:47:2c:d5:71:eb:af:5a:32:63:85:9c:aa:f3:d8:66:40:bf:
         53:97:cd:72:a5:b3:74:11:f6:80:ab:78:a9:3f:06:51:69:1e:
         6c:2a:2f:45:12:88:ce:66:e4:df:eb:bd:91:be:20:5f:5a:6c:
         36:4d:ce:8d:7f:a5:b9:aa:8b:eb:14:0b:a7:39:41:6f:d2:79:
         74:4d:c0:78:b1:9e:e9:7a:d7:a5:dc:5d:6b:ea:e9:e3:29:15:
         e7:8a:c5:17:98:00:8c:f9:3f:6b:6d:87:94:c5:a5:94:f8:dd:
         43:d7:61:15:d7:3c:9a:e4:3a:4a:c0:a7:63:c2:9b:aa:93:b5:
         27:fa:72:d7:c5:12:47:30:e1:11:1d:0c:e4:18:c1:d2:8f:d8:
         51:1a:7f:63:8c:a5:01:f8:2c:16:41:83:01:34:8f:d9:93:dd:
         40:54:43:c2:03:72:86:db:62:60:25:dd:ea:92:99:e9:e9:36:
         65:9d:06:84:00:c6:ff:e3:f3:3c:19:dc:5a:3e:9d:e5:c5:71:
         e4:e8:c1:fa:24:9c:e9:c6:71:29:95:b2:5f:08:b9:ab:0b:89:
         ec:51:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org