Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/808a5b99-919b-3c77-9762-700b47864ec0.roa
File:                     808a5b99-919b-3c77-9762-700b47864ec0.roa (raw, json)
Hash identifier:          QbBesNOOHPl7tsKWdJhhWN5Li4/poQloLHRBdftLwkU=
Subject key identifier:   73:DF:F2:B6:A7:D3:04:69:70:01:C5:3C:19:64:17:07:56:D3:83:B5
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285848CC7B93BBA2FEB75037A37180
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/808a5b99-919b-3c77-9762-700b47864ec0.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     203724
IP address blocks:        161.69.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:93:bb:a2:fe:b7:50:37:a3:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=ea11c8a2-8fa9-404c-9b8e-84ef5eafca80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:37:ab:c8:3a:64:54:eb:93:fd:53:6f:ef:
                    7e:1b:b6:e7:ed:9b:76:7c:25:d6:93:6d:4c:00:e1:
                    a6:64:41:94:1d:78:06:fb:85:31:5c:7b:cf:3a:09:
                    f2:5e:67:96:d6:b3:95:74:4b:ca:6d:d8:e5:2b:42:
                    1c:b2:c8:4e:72:e0:2c:42:3a:66:36:64:d1:b3:2f:
                    ff:fd:c7:4e:8f:20:c8:68:af:db:32:db:6f:73:4d:
                    47:15:36:5e:03:e9:f8:04:03:1a:90:3a:73:33:ed:
                    61:0f:d3:c1:59:50:1b:4b:6b:70:fb:55:02:04:a1:
                    70:f7:f1:d3:b6:4c:41:07:69:3d:c2:83:76:38:7f:
                    fc:df:43:28:bb:a0:31:76:54:b5:c5:79:1a:f0:51:
                    2c:ac:76:1a:fa:8c:3e:ff:55:a4:d9:ff:b0:83:90:
                    5a:09:dc:59:e1:d4:bb:9d:d5:82:ff:c6:e3:43:06:
                    d5:29:b6:37:b8:6f:9f:26:6a:b2:38:4e:fb:71:c5:
                    ee:84:b5:ec:06:97:09:a7:a9:af:a0:ca:e5:e7:08:
                    bd:96:31:8f:74:87:ac:bf:61:60:08:eb:b5:13:30:
                    b9:7f:60:c0:53:05:a1:96:1e:16:df:de:c8:69:84:
                    22:69:19:6f:c8:1c:bc:16:bf:3d:b5:97:65:e2:fc:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:F2:B6:A7:D3:04:69:70:01:C5:3C:19:64:17:07:56:D3:83:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/808a5b99-919b-3c77-9762-700b47864ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:63:db:bc:4c:a2:57:ab:6d:6f:9f:71:44:46:ce:4d:9c:
         af:3e:16:c2:67:0b:30:19:96:b1:6b:dc:be:9c:12:99:d9:2a:
         04:a3:42:fe:2b:b7:18:9b:63:14:40:37:b1:5a:60:fa:3c:50:
         b1:0f:b8:78:08:9c:f7:3d:84:65:18:30:09:f4:44:bc:33:31:
         f2:18:1e:b3:f2:4e:02:09:a8:66:bb:c7:79:fb:e6:17:60:10:
         7c:4c:79:45:18:e8:2d:41:b9:61:20:21:a0:f5:74:5b:c6:91:
         80:38:6f:cc:13:bb:a6:b4:f1:cd:2f:f1:21:ea:43:29:8a:86:
         48:29:06:63:a8:10:03:14:ec:55:e8:f7:70:f9:57:37:02:b1:
         c2:28:0e:51:55:7d:24:f1:ac:08:7c:71:62:5e:be:07:fb:55:
         78:fc:f4:fc:c4:58:5f:d0:76:6c:7f:99:57:cc:ee:73:7a:dc:
         41:0d:a9:da:28:f6:12:e4:70:d2:05:1b:09:d8:16:f5:4f:bc:
         71:68:cf:17:e0:21:bd:9d:b5:3c:f4:96:ce:03:02:39:cd:3c:
         33:fb:28:2c:74:a9:0c:72:3f:87:ff:e1:6c:9b:26:1b:67:bc:
         50:01:1d:41:9b:58:8f:62:f9:46:85:a1:37:98:6e:9e:66:8e:
         43:a5:1d:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5O7ov63UDejcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
ZWExMWM4YTItOGZhOS00MDRjLTliOGUtODRlZjVlYWZjYTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yM3q8g6ZFTrk/1Tb+9+G7bn7Zt2fCXWk21M
AOGmZEGUHXgG+4UxXHvPOgnyXmeW1rOVdEvKbdjlK0IcsshOcuAsQjpmNmTRsy//
/cdOjyDIaK/bMttvc01HFTZeA+n4BAMakDpzM+1hD9PBWVAbS2tw+1UCBKFw9/HT
tkxBB2k9woN2OH/830Mou6AxdlS1xXka8FEsrHYa+ow+/1Wk2f+wg5BaCdxZ4dS7
ndWC/8bjQwbVKbY3uG+fJmqyOE77ccXuhLXsBpcJp6mvoMrl5wi9ljGPdIesv2Fg
COu1EzC5f2DAUwWhlh4W397IaYQiaRlvyBy8Fr89tZdl4vxoQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPf8ran0wRpcAHFPBlkFwdW04O1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvODA4YTViOTktOTE5Yi0z
Yzc3LTk3NjItNzAwYjQ3ODY0ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFylY9u8TKJXq21vn3FERs5NnK8+FsJnCzAZlrFr3L6cEpnZKgSjQv4r
txibYxRAN7FaYPo8ULEPuHgInPc9hGUYMAn0RLwzMfIYHrPyTgIJqGa7x3n75hdg
EHxMeUUY6C1BuWEgIaD1dFvGkYA4b8wTu6a08c0v8SHqQymKhkgpBmOoEAMU7FXo
93D5VzcCscIoDlFVfSTxrAh8cWJevgf7VXj89PzEWF/Qdmx/mVfM7nN63EENqdoo
9hLkcNIFGwnYFvVPvHFozxfgIb2dtTz0ls4DAjnNPDP7KCx0qQxyP4f/4WybJhtn
vFABHUGbWI9i+UaFoTeYbp5mjkOlHcs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:10:51 2025 by rpki-client