Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/96809d51-ff71-3a3c-afdd-298e290ff6fa.roa
File:                     96809d51-ff71-3a3c-afdd-298e290ff6fa.roa (raw, json)
Hash identifier:          VWtPIwbDCSsym9s3MhKEpYitrZxU4cCO+kUq1yVcloA=
Subject key identifier:   52:7B:08:E1:DD:A9:E2:BE:75:87:E7:54:A2:27:74:F8:56:E5:59:CA
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B9616DD1692CBF27CF5B9980
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/96809d51-ff71-3a3c-afdd-298e290ff6fa.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     203724
IP address blocks:        161.69.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6d:d1:69:2c:bf:27:cf:5b:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=80aeb31c-7f92-4ca0-bd96-9ffd333205fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:6c:d5:d7:9c:4b:b3:32:dd:67:e2:63:5d:
                    0f:23:fe:5e:cb:7e:5e:6e:ed:3d:ca:7c:3c:34:04:
                    c8:ca:77:5a:19:bc:d2:b9:b4:ed:56:62:46:30:80:
                    71:ec:1a:3a:30:d1:b4:66:56:6c:f9:bb:18:bc:8b:
                    5b:2c:23:f7:b1:63:8f:e1:50:ce:8d:05:07:f0:7e:
                    e2:05:9d:3f:fa:22:57:c9:89:99:71:82:57:c3:f1:
                    3b:6f:13:c9:81:df:c6:ac:78:42:6b:fc:6c:e0:8a:
                    48:d7:68:1d:37:a9:87:78:ab:e2:30:09:e7:1d:28:
                    02:a6:b7:8c:14:a4:3c:2e:12:93:be:21:1d:73:f3:
                    f9:fc:c0:3a:d9:ca:c1:4b:99:59:24:f9:91:cd:aa:
                    45:ea:af:f5:cf:fb:b4:91:93:65:e0:80:7c:ec:14:
                    63:cf:f9:e5:01:2e:a0:71:6a:ca:51:68:0f:5e:68:
                    a4:56:8a:37:a8:97:44:95:2e:67:5a:4a:ef:e3:79:
                    90:17:f6:e6:f0:04:95:35:8a:a0:5c:dd:4b:d1:b1:
                    c0:24:e2:5a:2c:6a:f1:05:fa:89:8f:9c:39:02:74:
                    cf:0e:49:1c:e7:63:49:7a:88:3e:ca:e0:d7:a7:44:
                    65:9a:5d:42:cd:55:86:2c:d5:8f:9f:f1:a3:b6:f2:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7B:08:E1:DD:A9:E2:BE:75:87:E7:54:A2:27:74:F8:56:E5:59:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/96809d51-ff71-3a3c-afdd-298e290ff6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:34:78:b9:c8:fd:cf:2c:7c:1f:06:04:23:e2:75:7c:89:4c:
         ea:25:64:02:b0:13:e1:87:7e:1f:3e:4a:18:86:78:01:0d:f0:
         b8:ea:64:11:41:d0:a0:c9:03:b5:17:38:5a:23:77:c8:0d:b5:
         59:2e:fa:56:0d:f9:a2:41:a2:1a:fa:85:6c:f0:46:05:78:ee:
         e8:f9:44:b2:3e:40:8f:a7:04:76:aa:e2:3d:10:39:0f:14:cf:
         8d:cb:c5:e5:1f:b3:c7:bb:e5:c2:92:d4:16:f3:05:c6:26:40:
         9a:55:a3:20:02:ab:88:57:c9:a8:42:af:91:d9:db:2d:dd:ee:
         a9:2f:57:e8:3d:c4:0a:9f:43:b5:92:87:0c:74:b7:34:81:a3:
         91:f8:f1:d4:9e:fd:c7:d7:21:f2:2c:9f:b8:5c:5c:ec:13:30:
         b3:d3:b8:e5:b5:0f:6b:b2:d6:9b:41:b8:ec:d9:29:50:11:94:
         f0:17:e6:f3:c3:65:ad:d4:8f:9a:f8:e3:56:b7:65:54:a5:7c:
         9e:3d:8c:01:db:ad:5a:06:8d:f1:b7:3a:56:bf:d9:5e:1a:8e:
         ad:42:13:b0:cd:33:3f:d1:4a:89:c0:e7:29:c9:b4:39:e4:0e:
         cb:6b:d7:79:70:04:09:90:7f:12:85:84:ef:f0:99:18:8f:b4:
         5b:c3:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org