Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f4d19d16-7f5e-3b04-b659-1d55ad55af57.roa
File:                     f4d19d16-7f5e-3b04-b659-1d55ad55af57.roa (raw, json)
Hash identifier:          jUjCjBNV3hpQ2qV25q7yOAlH3b3t/+yh5rR/Xdi1bTc=
Subject key identifier:   76:22:6C:A4:9C:67:94:27:F8:F2:9C:3E:F2:A3:CE:08:27:DB:17:51
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285845612851EC085E66A4D3F79080
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f4d19d16-7f5e-3b04-b659-1d55ad55af57.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     31898
IP address blocks:        161.69.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:51:ec:08:5e:66:a4:d3:f7:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=949bb09f-fa52-4718-9fb9-7fb1ea0d5f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:8b:61:63:af:b6:c4:9f:6e:80:52:e8:57:
                    be:3b:be:69:97:6e:37:57:df:6c:c5:16:0a:f6:cb:
                    95:f0:23:99:45:8e:d9:cc:8a:90:75:22:b7:72:dc:
                    5e:ad:96:41:d0:a4:a3:10:29:0b:36:f1:e5:ba:77:
                    a0:e8:4b:8d:fb:c6:ab:c9:af:47:b2:bf:a9:e6:21:
                    8f:67:82:4a:0d:9d:4f:92:9b:7e:88:78:cc:13:a7:
                    91:76:5f:f9:2b:eb:5f:9c:3e:f6:30:cc:63:6b:94:
                    d0:f1:3a:c1:0f:9f:b0:9f:e0:2a:14:b5:fc:7d:06:
                    f5:b9:9b:3c:23:3a:37:f3:35:53:c9:3a:c8:cf:2a:
                    2d:2d:68:27:2e:b6:d4:88:5a:f7:e2:e1:d2:15:64:
                    18:6c:af:40:6b:b1:af:9c:94:bb:cb:9a:ae:68:c7:
                    dc:9c:a1:36:af:30:80:34:6e:c0:e1:4b:0b:1b:69:
                    81:17:b5:86:70:17:21:05:b4:b2:3e:57:de:97:15:
                    02:74:64:f3:2b:3e:df:cb:83:2e:1c:60:dc:c9:87:
                    84:c2:5e:99:97:90:70:47:ac:db:01:2c:43:79:c2:
                    5b:ce:38:79:9d:b9:dd:db:0a:ce:47:69:10:de:3d:
                    62:b8:74:35:fc:82:e2:7f:62:5d:d1:0c:b5:af:8c:
                    a1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:22:6C:A4:9C:67:94:27:F8:F2:9C:3E:F2:A3:CE:08:27:DB:17:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f4d19d16-7f5e-3b04-b659-1d55ad55af57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:14:bc:46:34:1f:c5:3a:0b:38:b7:52:65:ea:a1:84:8d:c1:
         3f:33:bd:e2:21:5b:c8:da:d8:2e:11:1b:eb:36:02:e4:f3:cd:
         67:85:19:4b:a0:99:0f:4c:de:c1:a0:42:1d:82:56:d7:a2:b0:
         b7:43:e0:21:e7:cf:f5:c4:8d:db:2b:61:8c:ea:fb:91:b6:d9:
         5a:f3:5d:c4:a8:cc:76:f2:51:41:11:bd:82:bd:5a:4a:24:4c:
         e0:37:71:af:17:9f:65:81:c6:8d:19:6a:22:e0:47:73:9b:16:
         25:d5:91:21:18:33:47:65:46:46:b3:f1:65:3b:70:25:d2:39:
         a9:3f:8d:72:e7:d6:31:cd:a1:89:2a:b1:06:53:2a:ac:be:10:
         bf:45:16:9f:2a:8c:89:5b:ae:b3:18:5d:88:18:bf:d1:94:d6:
         2d:4a:6f:04:63:61:6d:a3:dc:9a:7f:80:f4:65:8a:f4:f3:e6:
         03:33:ee:98:6a:cc:9d:b0:9e:69:0b:a7:c9:e2:b1:61:33:55:
         63:fa:b6:76:e2:47:a9:84:28:4c:e0:11:9c:ca:4f:30:2d:c2:
         e1:91:6d:f5:b4:18:c6:7d:2d:01:9f:3d:71:6d:7f:9b:cf:50:
         d9:19:b0:3c:e8:b4:2f:f5:02:c8:85:ab:51:4c:45:a2:90:a2:
         2d:25:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:32 2024 by rpki-client on console-ams.rpki-client.org