Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f6c85390-cb48-35e1-b9d3-bf536d58de42.roa
File:                     f6c85390-cb48-35e1-b9d3-bf536d58de42.roa (raw, json)
Hash identifier:          DjPo1gtikygiFrMv6CYtE6D2scmvMNMVYjBeR5EfgN0=
Subject key identifier:   DF:A6:06:EB:F9:E7:40:E2:E3:90:FA:3B:08:06:CB:74:59:94:5F:95
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858473D25DC664DF89D1DDDFF0F40
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f6c85390-cb48-35e1-b9d3-bf536d58de42.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     203724
IP address blocks:        161.69.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:dc:66:4d:f8:9d:1d:dd:ff:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=50334aed-50b2-45b9-8f3e-a9302b1f508d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bf:c7:10:3e:d3:75:46:43:83:7b:3d:56:fd:
                    20:a1:63:32:b5:fe:40:e6:4b:09:e7:cf:0e:ba:72:
                    80:73:3f:94:8c:ff:83:05:1d:fe:e3:c0:66:ca:aa:
                    90:d3:f0:1f:54:e3:d2:48:fa:d3:ab:79:f4:29:4a:
                    b5:96:f1:e9:43:ca:12:94:e3:1b:19:78:af:60:a9:
                    03:69:42:dd:59:21:d8:0f:17:60:72:02:4a:9c:c3:
                    4e:33:c7:ec:81:68:fe:4d:c2:c4:be:c3:35:ff:a9:
                    dc:5e:30:da:7c:db:73:35:3d:5b:4c:2e:e9:47:40:
                    b3:53:9e:ed:4e:08:1b:d2:b7:37:43:33:51:08:68:
                    8d:9e:67:13:67:42:20:52:fe:3c:1f:d0:a4:75:0f:
                    a2:1d:9d:e3:19:73:6d:f1:7b:ff:e4:0b:e5:28:ae:
                    1f:5f:34:2e:e3:5d:fd:cf:40:30:77:7b:d9:11:10:
                    0a:64:dd:26:2c:a3:d9:96:77:dd:e2:36:3a:0f:60:
                    3b:12:7d:b5:17:3c:52:d2:36:08:97:db:ec:56:73:
                    66:0d:ee:f4:56:55:63:4f:8e:60:b0:ff:bb:d3:d4:
                    80:df:e7:5c:a0:84:09:4e:d2:26:66:39:f5:77:ff:
                    ef:80:5f:b0:0a:d5:ef:f5:eb:df:0d:82:09:ae:31:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:06:EB:F9:E7:40:E2:E3:90:FA:3B:08:06:CB:74:59:94:5F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f6c85390-cb48-35e1-b9d3-bf536d58de42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:39:ce:08:2e:0e:e5:d0:d8:1d:d9:90:fb:7f:92:a4:d1:8c:
         15:a1:8b:79:65:fc:3f:64:a3:e1:53:1a:18:ab:21:58:84:1a:
         7b:fa:2c:c1:12:7b:c4:4d:6d:06:10:06:ab:fa:ac:d4:4e:ea:
         10:e9:76:26:1c:07:46:c5:39:b4:40:88:9e:16:11:3d:cc:62:
         74:0d:36:34:0f:62:3c:a6:8b:e2:80:1c:67:d1:6e:28:55:ec:
         ba:a3:47:3e:7d:73:d0:61:c6:83:b2:93:90:fb:6d:93:47:c7:
         35:25:4d:bb:9e:56:11:d9:fa:b2:58:52:69:18:23:63:77:0d:
         fc:73:49:7d:6b:33:ae:19:e3:1b:fa:f3:c2:e3:07:1e:f7:a6:
         e0:ff:96:bd:e7:2d:12:94:65:49:ce:ec:01:78:99:e5:70:f1:
         2b:78:e8:3b:24:13:6d:1f:9d:1f:43:d7:1f:95:29:b6:3d:fd:
         49:ca:ec:e1:59:11:2d:78:e0:a3:ff:32:8c:b5:38:11:c4:f7:
         88:5e:f6:61:82:bf:ad:f1:57:35:b0:8c:54:af:75:1e:b0:df:
         10:b7:f8:49:69:1e:1c:5e:4c:85:24:8b:01:44:2c:eb:33:eb:
         8d:59:73:fd:5c:0a:0d:2b:ae:1e:c5:8c:ff:79:5f:1b:bc:c2:
         87:59:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org