Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
File:                     bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa (raw, json)
Hash identifier:          dAu8Ce4y36ZcEbsCKs4AXSrh17Cr2eoS5XfJ3cj+CFY=
Subject key identifier:   D1:5B:76:D7:53:09:F3:71:48:F9:D1:C5:2C:46:CD:50:49:D8:BF:F9
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451A158776EFA744B8D52EA780
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     203724
IP address blocks:        161.69.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:87:76:ef:a7:44:b8:d5:2e:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=76414609-6a49-4e63-96a4-86fb3238e578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:99:7c:98:de:3b:13:44:fc:34:b0:5e:d6:
                    8f:63:8a:60:ea:9b:97:d8:28:ee:18:29:b4:74:c6:
                    2f:ea:d9:9a:36:ce:1f:8e:b2:77:65:e8:c4:67:4d:
                    9e:3b:61:07:0e:06:5b:53:07:97:45:50:24:b6:13:
                    c6:41:87:78:da:c1:20:5d:e1:8a:ea:6d:3e:91:30:
                    99:99:dc:90:87:84:7d:63:57:a5:db:78:da:bb:96:
                    d8:82:5a:04:b9:b1:c1:46:6a:c4:10:54:06:da:7c:
                    a6:2c:f8:bf:ad:c9:44:6f:9d:51:80:30:30:20:c8:
                    9e:4e:27:f6:a0:bd:1d:fb:85:65:1e:5a:da:24:f7:
                    c7:f3:b2:ad:e0:67:48:66:e9:71:12:68:d6:06:59:
                    41:5c:b0:92:7c:4e:64:a0:4d:de:8b:b9:1a:2a:61:
                    dc:cc:a7:2b:ae:12:52:ae:81:55:a3:4e:dc:70:bd:
                    c9:17:13:6f:76:c9:71:1c:11:d6:88:73:b4:18:68:
                    14:e4:24:c6:3f:7d:35:d2:43:71:4f:55:75:68:f2:
                    d4:ca:a4:06:f9:6a:9f:04:c5:56:23:e4:04:75:84:
                    7d:4c:b4:9f:de:3b:69:fb:7b:d4:83:e5:9e:8d:bb:
                    20:f4:29:a0:d8:8d:a2:93:fd:16:7a:77:b1:68:96:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:76:D7:53:09:F3:71:48:F9:D1:C5:2C:46:CD:50:49:D8:BF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bbc5851c-a6e5-3349-8c6c-5203d0eba535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:3a:17:19:66:13:9e:f4:3b:ce:35:9e:a1:d9:d5:9f:7b:
         4e:da:91:72:1f:15:70:14:51:b1:14:31:29:74:4e:e5:d8:b5:
         99:45:a7:5f:e8:fc:20:b1:8f:91:b0:55:e2:ad:59:f1:ac:b5:
         55:ce:43:f3:e4:81:02:02:84:6f:29:1d:e4:2c:1e:2a:58:34:
         4c:1d:43:66:a6:25:a4:52:42:8f:ef:2c:1c:53:d9:df:19:d0:
         80:61:5a:7a:58:81:5b:0e:38:48:72:86:41:fa:ab:64:c9:08:
         e4:48:e2:cf:38:04:19:0e:92:5f:74:a7:e1:ff:d1:4a:03:0c:
         b4:db:89:64:40:ab:e3:dc:3e:b8:1e:39:1f:d8:10:0f:86:a0:
         42:ac:e5:b8:a5:14:57:d9:bc:e8:f1:d2:cb:dc:04:38:da:4e:
         40:68:0b:4a:cf:59:54:fe:37:78:6c:ac:11:ab:fd:4e:ac:37:
         2d:50:79:ef:cf:de:a7:b1:06:d7:9f:5a:fd:37:6a:46:1a:61:
         16:f6:63:f5:d1:b9:b0:2b:a9:c3:0c:bd:1d:8b:3d:81:f0:f5:
         ec:1f:3c:0b:0e:33:14:e7:e7:20:72:ed:7f:38:0c:6c:02:0c:
         05:50:fc:b3:fe:2a:33:25:1d:3b:ba:a6:bc:2b:ca:c5:3e:64:
         e8:ac:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:32 2024 by rpki-client on console-ams.rpki-client.org