Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/76ce67b4-2255-38ff-8868-b6557c3e94ab.roa
File:                     76ce67b4-2255-38ff-8868-b6557c3e94ab.roa (raw, json)
Hash identifier:          zW9+GzZUC43OhbrRcx9Uo1MTtA/cPzeSBfxrBs3tSUw=
Subject key identifier:   75:9B:86:4D:EA:D7:E8:0D:41:9F:1D:FB:D8:10:CA:A2:EB:11:F3:F9
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847C8D9E87C7C094C17FB9D3F80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/76ce67b4-2255-38ff-8868-b6557c3e94ab.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     203724
IP address blocks:        161.69.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e8:7c:7c:09:4c:17:fb:9d:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=8e1bcc56-2a68-4e11-ba89-ae70616e113b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:3a:e4:8f:e5:9a:59:2c:76:0a:21:1a:7f:
                    bb:d6:f7:a8:c1:ed:13:08:f3:8c:99:a9:3d:98:9e:
                    fd:54:9d:24:58:21:d3:5e:2e:4a:37:11:f4:a8:88:
                    84:ab:69:ba:fd:50:ca:47:59:57:45:33:56:e4:20:
                    f2:c6:22:a3:46:55:50:2b:96:46:0d:42:5a:d0:67:
                    b6:8d:90:7a:6e:f3:4b:d6:f6:f5:be:9e:40:31:fc:
                    03:28:33:f7:0a:4b:d0:cd:59:4f:0d:15:36:51:ad:
                    4d:41:54:bc:04:62:b4:14:3b:ff:fe:dd:8d:6e:80:
                    66:3f:82:80:57:f7:66:70:4f:f4:10:e5:c6:b1:b5:
                    9e:c2:47:88:c6:eb:c1:25:7e:43:c0:60:81:42:f0:
                    84:c8:37:61:89:41:2d:8c:65:f8:f5:8e:92:95:3e:
                    52:89:5f:dc:db:cb:a1:49:2f:f4:56:f9:82:fb:b0:
                    a0:ab:0d:e7:c8:64:07:48:dc:55:0e:db:4b:34:55:
                    cc:4e:33:94:dd:ac:34:c2:e9:87:fa:8c:de:89:f3:
                    43:d8:ef:85:87:33:01:50:3f:65:d4:f6:eb:b4:74:
                    1a:f9:72:85:4e:20:43:07:4b:88:3c:c5:90:57:f3:
                    77:f3:44:08:57:95:55:1f:91:8a:62:5b:8a:24:f5:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:86:4D:EA:D7:E8:0D:41:9F:1D:FB:D8:10:CA:A2:EB:11:F3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/76ce67b4-2255-38ff-8868-b6557c3e94ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:dc:a1:95:db:2f:80:67:a6:34:ad:b8:ed:58:53:44:b0:20:
         fc:f8:f9:1c:b5:6c:5e:df:78:c5:5c:1e:80:5b:93:69:7a:fb:
         fb:01:3e:5f:7e:da:4b:e7:4c:59:a7:df:78:b8:20:d7:f2:69:
         28:6d:4f:e7:e7:03:0f:1e:b3:56:f3:73:62:d6:f9:2e:03:61:
         08:03:f5:7b:0a:f1:ad:fe:b9:2f:f1:97:96:a3:94:26:fb:8b:
         55:5d:6d:a2:ad:6c:68:71:c9:bc:58:93:42:a6:53:b0:d0:fa:
         b6:bc:91:70:d6:97:39:28:96:3f:0f:61:36:6e:66:f1:71:2a:
         3a:6f:61:8f:67:a2:09:22:80:58:ff:bb:6f:c6:8f:19:f6:e5:
         61:dd:9b:70:d3:25:40:88:30:7f:ef:6e:4f:b1:14:81:58:13:
         89:4a:59:ca:8b:82:6d:c3:50:fc:70:4a:c2:2a:6c:fb:f1:8c:
         aa:a6:00:fb:0b:06:c5:c8:a8:1c:1e:08:5c:51:94:8e:9c:25:
         af:fb:3b:3f:11:20:47:83:a0:62:60:91:dc:16:70:e0:d2:54:
         af:9c:95:f3:ec:8f:b0:ff:bb:ed:cf:68:6d:a4:7b:2e:e4:ac:
         02:76:e1:f8:59:28:fd:0a:2a:16:b6:fa:e8:9d:ff:aa:0a:56:
         6d:32:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org