Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/76ccd9c1-24da-3569-b61d-222bcb907f83.roa
File:                     76ccd9c1-24da-3569-b61d-222bcb907f83.roa (raw, json)
Hash identifier:          ZJ2SV7BMjFgd2dPNT1uLEMGqCydHc16S1C2cC9aMuFc=
Subject key identifier:   69:A1:BD:81:62:6B:71:F0:4C:3F:88:1A:4F:64:6A:5C:10:F7:57:47
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B9616F25527F224ECFF88C00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/76ccd9c1-24da-3569-b61d-222bcb907f83.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        161.69.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6f:25:52:7f:22:4e:cf:f8:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=7693dae8-bbe2-4413-947c-66047971b90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:5f:a8:18:fd:98:61:39:19:fe:db:48:d3:
                    08:b5:16:1f:8d:b1:40:00:2a:96:db:ff:90:65:0b:
                    46:3f:a0:67:54:91:bd:4c:b3:56:28:93:aa:90:7c:
                    02:5f:07:96:1a:e1:f4:6f:08:99:0d:92:f2:58:cd:
                    a7:7d:f6:87:65:a6:9b:f6:70:bd:95:7a:6b:ec:f6:
                    9b:b6:52:6e:5d:fb:fc:0d:53:a5:d9:e3:7a:12:fd:
                    ec:c5:f6:a2:be:6e:14:4d:ed:7c:a1:1b:64:6b:92:
                    ca:f6:86:b0:48:4b:0a:a3:f8:78:b3:25:0c:f2:ac:
                    13:71:48:d4:3f:14:30:0d:aa:08:7b:56:84:8d:7d:
                    0f:7a:ab:57:4d:e2:7b:80:8c:f3:75:28:fd:aa:03:
                    d7:8f:f9:c2:19:75:79:5b:36:22:64:9b:2f:f1:26:
                    1f:81:15:4e:f2:e3:03:ce:0c:63:3d:2e:da:19:2e:
                    f8:e4:8c:3f:a1:ec:2c:45:3f:79:13:de:6c:3c:77:
                    f4:4e:12:4f:b3:eb:6c:4d:9a:a3:2b:eb:40:11:98:
                    2b:c4:74:7a:ce:6b:ca:b7:7d:f0:09:dc:55:f2:de:
                    31:64:ff:5c:d5:23:c5:6a:98:fc:14:e1:54:d2:2c:
                    01:f4:25:c0:ba:d5:60:c5:62:16:38:ac:85:d6:c6:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A1:BD:81:62:6B:71:F0:4C:3F:88:1A:4F:64:6A:5C:10:F7:57:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/76ccd9c1-24da-3569-b61d-222bcb907f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7b:6e:81:7e:b9:85:63:18:9e:aa:31:91:c4:5f:13:df:02:
         66:e8:13:46:25:50:7d:0c:99:28:7e:3f:54:ef:cd:dd:77:09:
         56:6f:69:af:62:3e:93:a1:bf:cb:d1:f8:e9:8d:a2:98:8b:57:
         5f:53:0c:70:5d:57:f7:26:7e:32:21:1d:7d:de:9f:b2:94:84:
         07:6a:02:32:eb:2a:af:f4:b9:32:51:3b:44:d5:c3:ca:d2:f6:
         5d:46:22:fa:35:5b:f9:a6:b0:d4:24:fc:2f:f2:71:8c:bc:6b:
         6f:7b:73:89:6b:dd:24:ec:d6:55:bd:8f:52:68:8a:a9:61:0e:
         47:2f:37:5d:79:eb:9b:22:d6:50:b5:ad:20:ca:25:bf:d4:c5:
         79:92:a4:d7:98:f7:28:f6:50:8f:40:52:10:7a:fa:2e:00:fa:
         42:96:63:94:76:ea:7a:de:f5:4c:bb:d8:c9:e9:d4:6e:d5:47:
         8f:01:d8:f0:2b:a3:2d:7b:a8:3d:05:9f:00:9b:ca:41:3f:6c:
         77:7a:3c:c3:b1:03:2e:22:50:1d:aa:ce:7d:31:b3:2a:f8:56:
         99:5c:2b:f4:ab:bb:8c:40:dc:6b:59:7d:99:63:d5:4f:c7:48:
         eb:2e:49:49:a2:eb:81:10:98:81:a5:93:87:15:e2:2b:6b:72:
         36:30:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org