Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa
File:                     b382ef6d-a70e-34fc-a854-25e1353abdf6.roa (raw, json)
Hash identifier:          Fh7wvQqPyNvoJ1braB/uUw/nlAwPL8romy24m0V3GR4=
Subject key identifier:   14:C9:F3:DB:EC:8B:25:CE:AA:30:83:AA:DB:00:4F:F8:30:AF:E9:D7
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285847B9616E20028687F7DBF71680
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        161.69.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6e:20:02:86:87:f7:db:f7:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=1e7faab8-bb0d-4962-a205-97330c65b016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:3a:1d:a0:2d:da:bf:8f:24:5c:7b:5b:5d:
                    d2:c3:fc:76:b2:4b:dc:fe:d7:fa:67:c1:b2:44:a6:
                    37:3e:8c:50:54:c0:ff:ae:77:cb:60:c6:bf:70:37:
                    91:c6:1a:b7:ae:50:46:cb:97:4c:90:9e:f1:d4:bf:
                    aa:99:84:b0:5c:3e:89:51:58:b5:e5:cb:b3:44:a0:
                    c8:b9:ef:49:64:4f:8d:42:8f:17:77:ef:34:fd:02:
                    5d:61:32:4e:d6:1e:66:18:54:24:98:c3:3b:e3:c1:
                    4a:29:93:8c:e8:cf:4e:5c:54:8c:d4:9a:11:1d:86:
                    49:c2:4c:6b:f1:11:86:7b:2c:61:ea:45:dc:4b:bb:
                    2b:3a:c1:03:9f:d5:8f:c2:7e:57:6c:cb:a1:22:3c:
                    9a:36:42:0b:6c:92:b3:cc:ac:87:92:bb:0c:51:86:
                    c1:69:b2:1e:d9:7c:f7:da:7e:5a:b1:db:48:78:81:
                    01:3a:d7:db:76:35:19:3b:18:16:6f:b5:16:4b:3a:
                    fe:10:ef:21:f1:76:11:ec:bc:eb:23:21:c5:c7:bd:
                    9d:6c:02:db:22:41:d8:28:f2:ab:6c:c4:4b:12:3c:
                    4b:4a:f1:69:d6:6f:bb:3b:68:51:e1:b0:f2:62:9f:
                    83:58:51:9c:59:a7:5a:b1:dd:10:6c:d7:cd:62:f6:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:F3:DB:EC:8B:25:CE:AA:30:83:AA:DB:00:4F:F8:30:AF:E9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:03:e1:c9:0b:13:8b:52:56:4c:79:97:8f:d3:e2:d3:b5:
         68:cd:35:76:ef:78:80:ae:af:80:81:7a:b9:18:44:fc:81:88:
         a5:02:6d:f1:9d:e4:cc:3e:22:cf:4f:6e:48:75:f3:a2:09:7e:
         48:b3:95:44:77:01:d0:cd:22:ba:83:b7:f0:f3:28:0d:cb:29:
         05:2a:4c:0d:34:1c:d2:78:30:f7:17:9f:de:22:d7:ba:28:71:
         2f:a4:bd:2c:f8:4a:7e:26:c2:6a:46:1e:19:2c:c9:ff:de:75:
         ea:5d:7a:9d:17:74:4f:65:e7:55:1c:0a:16:af:ec:56:2e:fe:
         e7:14:6f:c1:39:57:55:de:3e:ae:43:d2:3c:a8:1d:d4:72:f2:
         ae:4b:57:c5:23:bb:7b:54:6a:52:3c:3b:6f:d2:9f:1d:9e:0a:
         60:4c:ee:b4:8d:74:cd:6c:8d:f6:ee:69:30:15:e3:c8:59:b3:
         d2:28:5c:49:5a:07:fe:4f:47:e0:70:7f:a4:55:6b:6b:97:27:
         16:4a:9c:fc:a8:55:e6:e3:bb:ba:bb:ae:c8:53:ed:7b:7e:8e:
         f8:9a:9d:41:9d:4f:53:7b:37:99:b8:08:49:e8:84:2a:97:ee:
         f7:fc:5b:a7:67:a6:12:1c:48:07:1b:3a:83:a6:bb:08:c6:91:
         0c:0b:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:41 2024 by rpki-client on console-ams.rpki-client.org