Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa
File:                     9bc1236b-7372-3b11-93cd-1762f91ca362.roa (raw, json)
Hash identifier:          iPwrIMuQGUf/DTAG6QxZ5RweSZ+v5cZn1m3AkvJNP2Q=
Subject key identifier:   27:5F:A6:03:F6:0F:8B:52:38:05:2C:1D:C6:73:0E:A7:EF:0B:74:D3
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847D999F022DD09107A36209300
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     203724
IP address blocks:        161.69.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f0:22:dd:09:10:7a:36:20:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=2fa5831b-98ee-4692-ae68-71218e59b2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:c4:3a:5c:2d:3b:8c:a5:cb:df:59:21:80:
                    dd:9d:11:40:aa:60:43:a7:45:70:cc:78:63:58:58:
                    a0:bd:69:4d:f5:2b:65:44:37:af:b2:ad:a6:d9:eb:
                    26:b7:53:5a:5f:40:3f:b3:d8:ff:8a:51:ad:60:d9:
                    44:79:28:e7:79:85:9a:51:aa:9a:09:4b:a6:7d:76:
                    55:72:d2:e0:49:9c:b5:25:1d:04:a2:81:af:25:25:
                    38:ef:04:a6:a7:7f:64:bf:72:0b:ba:ca:a8:17:7f:
                    69:b6:3a:e3:ad:cb:dc:d9:04:27:8d:39:5d:d5:b1:
                    17:7e:c4:55:6b:82:c3:1e:8a:3c:77:a5:6f:9c:5c:
                    36:68:b6:d3:56:72:e6:89:cf:4c:e0:d5:6a:38:dc:
                    05:a1:3c:41:3c:4e:0c:d4:f4:0f:57:ce:3b:86:dc:
                    77:45:67:00:e0:27:ee:69:f7:df:4c:44:c4:c6:b6:
                    73:e3:79:3c:cb:47:d4:46:21:ca:36:8a:ce:2e:d6:
                    2e:51:74:78:7a:cb:2b:f9:57:05:b2:5b:c0:3a:2c:
                    c4:6e:03:41:a0:22:76:b3:78:ae:e7:d9:f4:a6:0e:
                    69:9a:4c:0c:63:b5:18:c0:70:0d:9a:f8:0a:41:21:
                    18:d9:b9:4b:39:f8:4e:13:fb:b3:f2:69:f0:8b:ab:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5F:A6:03:F6:0F:8B:52:38:05:2C:1D:C6:73:0E:A7:EF:0B:74:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:bc:ec:a9:bb:48:94:d3:92:09:70:7b:89:d7:f0:8b:ea:
         48:5e:ee:10:13:f4:4d:ed:3f:7c:ba:9e:b5:72:ab:8c:16:a1:
         ee:f6:b3:b6:c6:42:0a:d9:e0:8a:da:00:5c:ec:11:25:e5:65:
         35:1e:a0:16:d2:81:6d:e4:d2:6e:a9:09:2f:67:4b:db:80:f2:
         c1:56:d6:02:78:5b:ee:f5:97:5e:79:b7:bd:aa:4d:85:ef:3f:
         e0:f1:65:5c:58:47:bc:ff:39:48:a3:1a:9a:c1:f9:da:50:4e:
         00:15:fd:da:e7:73:2c:c2:f1:d1:3e:43:63:99:4b:b2:8c:31:
         48:ce:16:1a:a9:23:8f:e4:67:00:a1:36:c1:13:15:94:36:24:
         ea:e8:07:e3:a1:78:31:0a:15:24:c0:f0:99:ef:26:6c:6b:8e:
         57:43:76:fe:1e:86:ed:7f:69:7d:1a:37:34:f9:3a:d3:51:23:
         93:f0:86:a8:04:99:2d:a8:b7:20:bd:02:b1:5a:cf:59:2b:1b:
         cc:20:9a:1e:1a:07:1d:ec:54:c0:c1:bc:a6:0f:df:ba:f2:52:
         35:d5:79:e1:8b:c7:59:f3:8d:08:7e:cf:93:9f:15:3d:7d:a0:
         ab:35:75:cb:e9:a3:44:b0:39:03:05:9f:3a:a8:31:c3:09:0e:
         8d:0b:6a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org