Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e933d057-ecba-343a-b296-defb404b9834.roa
File:                     e933d057-ecba-343a-b296-defb404b9834.roa (raw, json)
Hash identifier:          c9ZGzzGqRuAwHZkje2/XNCaOXStQ/4xNEfkL9wplEzo=
Subject key identifier:   14:AA:96:EF:4A:E7:67:02:17:D3:62:95:D4:C5:1D:42:6E:A9:64:51
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858454D9D7D2CC0C213F5A5CE2800
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e933d057-ecba-343a-b296-defb404b9834.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     31898
IP address blocks:        161.69.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7d:2c:c0:c2:13:f5:a5:ce:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=880ecc4b-73fd-436b-af32-122312075cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:c2:77:6b:28:03:9c:b5:a6:fe:df:e0:26:
                    78:b2:f2:02:a4:1d:a2:2b:a9:02:b5:54:43:11:86:
                    24:9d:74:fd:00:0b:bf:2e:5a:39:52:e8:e8:c5:c6:
                    de:7f:f5:61:52:51:e5:6e:1e:19:97:7a:aa:58:e2:
                    f4:d4:3a:11:dc:11:00:26:3e:93:51:bb:16:0a:1e:
                    8c:25:72:11:be:9a:a3:e1:59:55:e6:af:68:bb:1f:
                    ee:01:77:95:6d:16:13:18:e8:17:cf:8f:41:cb:10:
                    8c:4e:7f:48:47:8d:5f:fc:31:25:b7:1d:93:ad:bd:
                    f5:2e:ad:20:e0:a2:15:ff:b9:32:ff:f8:e0:c6:1a:
                    41:7e:61:fb:e6:64:4b:77:1d:98:41:fa:48:de:0a:
                    39:86:a8:62:74:67:ca:70:44:95:5a:95:e9:30:b7:
                    42:35:4c:9f:ce:80:b4:c0:64:83:22:e1:6b:35:84:
                    04:8b:1b:cf:cf:05:49:9c:a9:cf:35:ae:2e:fe:2c:
                    13:cc:e0:fd:91:1e:24:20:f3:d8:f6:f6:4c:50:ab:
                    10:79:6b:e5:02:62:14:ab:a4:eb:3b:40:a5:4a:24:
                    5d:1d:99:0b:ff:0e:45:70:b1:f9:c3:69:b7:05:47:
                    7e:8d:cd:b8:d1:b6:1f:38:de:6d:16:5f:a3:4b:0b:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AA:96:EF:4A:E7:67:02:17:D3:62:95:D4:C5:1D:42:6E:A9:64:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e933d057-ecba-343a-b296-defb404b9834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e1:9c:0b:e6:ee:9f:60:8c:b0:15:96:e6:df:14:24:5b:b8:
         fd:87:85:4a:a9:cb:b1:52:ed:b7:b6:3a:a4:64:9b:47:d4:47:
         07:8f:18:24:38:fc:c8:e3:05:ea:67:94:cd:be:d3:8c:c1:c9:
         ac:01:a9:50:61:eb:d6:c2:3d:f4:7d:4e:4f:ad:11:80:3b:b0:
         1d:0b:8f:86:0b:74:b5:be:41:b6:0c:13:0d:2e:6e:64:1b:67:
         1a:9e:25:52:6a:ac:85:f9:1a:0a:57:10:b2:62:52:f8:93:2b:
         24:42:73:c4:39:b6:33:8d:cf:83:bb:ad:cb:a0:6c:dc:87:c5:
         8f:fc:31:44:ab:1a:5e:51:23:28:1f:a7:3c:d9:65:10:7f:c7:
         7d:4e:78:77:2f:24:74:2b:9e:88:9b:5e:ff:d2:3f:d5:49:ee:
         5e:b4:70:fa:ce:f4:b3:26:35:be:15:8d:b6:c8:a9:72:4b:c1:
         3f:5a:fc:fd:38:04:ce:12:60:00:76:ab:cd:c2:ae:a2:4b:61:
         a8:c7:d0:db:1f:e3:c5:07:1e:4f:15:74:3e:c5:78:9c:d2:dc:
         b7:7b:02:2c:64:e3:d6:9c:fe:ae:09:94:fc:ee:c8:63:1a:b5:
         be:5d:20:ec:91:ae:dc:2d:bc:b7:07:de:32:c0:64:7c:78:e6:
         a2:cc:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:15:38 2024 by rpki-client on console-fra.rpki-client.org