Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b927398a-65c5-3cbb-a086-61bd25151dab.roa
File:                     b927398a-65c5-3cbb-a086-61bd25151dab.roa (raw, json)
Hash identifier:          y37HD9Rpf3TW8D00SEHnm81dwuOic89fjUnUmHfr0xo=
Subject key identifier:   BD:B3:4C:47:35:89:FD:C4:5D:30:67:C8:5B:D8:7B:F8:4A:CD:8A:CC
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858454D9D7D8031E28375871F9D90
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b927398a-65c5-3cbb-a086-61bd25151dab.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     31898
IP address blocks:        161.69.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7d:80:31:e2:83:75:87:1f:9d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=8b906503-b1f2-4ae0-8434-7cf0a8223e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:c1:b9:b6:81:4b:12:b3:b4:2e:6c:64:32:
                    00:8e:88:be:64:ab:67:6a:04:04:45:e0:5e:06:dd:
                    93:e4:9c:be:00:3b:b7:67:b2:f1:e2:70:df:a1:a6:
                    19:6a:21:3f:68:14:7b:02:dc:71:e3:a7:7a:87:da:
                    b0:e9:3b:87:c8:19:04:ea:b6:ce:4e:1a:90:84:67:
                    74:51:33:15:b8:66:62:54:3d:3c:a0:81:30:39:c4:
                    c4:2d:3c:11:f8:a4:66:f3:f3:36:86:d1:ac:8b:41:
                    a2:05:80:ba:b7:35:7e:35:a0:f3:2e:30:b1:b5:8f:
                    a3:ed:d6:53:bd:19:7a:00:eb:f6:57:ef:97:cb:9c:
                    a8:1f:52:b9:7e:ab:2f:b2:0c:51:cc:4b:36:dd:d2:
                    95:21:27:88:83:38:07:04:1b:9b:e5:82:2d:2e:de:
                    ce:e4:82:5b:b7:60:c0:d9:73:b1:17:7f:f4:b6:3e:
                    d5:84:a6:02:81:01:f3:aa:e0:6f:45:26:61:be:fc:
                    44:ff:1b:ce:74:6e:ab:de:46:b2:7e:ae:ff:07:b9:
                    3e:61:35:26:eb:b8:4d:ac:4e:4a:9e:d0:c7:f3:ea:
                    8f:53:c7:77:62:34:1d:2a:89:56:ce:0e:4c:2b:d1:
                    f9:9d:ac:e8:2e:80:5a:0a:92:5d:5d:81:47:a2:14:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B3:4C:47:35:89:FD:C4:5D:30:67:C8:5B:D8:7B:F8:4A:CD:8A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b927398a-65c5-3cbb-a086-61bd25151dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:18:fa:c6:33:10:2d:eb:50:03:23:97:74:ad:e7:bf:ef:
         d7:39:b7:39:0e:56:a4:a2:17:c6:f9:52:01:d9:a9:f0:c6:f9:
         19:78:f7:e0:16:8d:09:13:a3:3c:b5:f8:3b:41:a7:b9:df:4f:
         a5:1a:6e:bd:39:cd:d7:89:74:f5:7e:3c:1a:1a:91:29:12:f9:
         ec:8f:d7:36:ce:2b:ac:54:55:91:89:dd:1e:e3:6f:d6:8c:3a:
         73:2b:f3:8f:61:38:50:c9:fd:9f:b2:7c:33:aa:9f:3c:55:18:
         11:8a:c9:4b:ea:5c:36:37:9d:fc:5e:b4:ae:cf:27:52:f3:5a:
         f5:72:b5:22:c3:5f:af:52:67:ad:45:4e:98:f5:98:78:27:d8:
         22:ff:ad:00:a5:2f:71:69:c2:0b:86:0f:e5:17:b3:f8:1f:1e:
         9e:7d:99:fa:25:18:08:e7:97:f1:22:74:dc:e9:c5:27:f7:10:
         98:78:32:b0:d2:d7:ec:6e:d1:00:db:3c:33:69:0f:01:b1:67:
         a8:e5:a1:ef:c5:8b:e5:50:69:17:79:2b:45:af:84:0a:1e:e6:
         1c:40:38:ba:65:65:f6:8b:6e:0f:b8:4b:17:63:ab:6f:21:95:
         c3:13:2f:aa:28:a5:f1:0e:93:bc:5c:94:33:81:f8:a0:5b:e8:
         fc:af:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:32 2024 by rpki-client on console-ams.rpki-client.org