Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa
File:                     fa2860a7-d29d-3110-bb18-5cced3c2733a.roa (raw, json)
Hash identifier:          jc1m+o0sNeC41VFV9CvD101Zp+ZYgJQtqcXcO1KjAP4=
Subject key identifier:   38:18:EA:D9:5A:8F:04:31:C7:9B:19:10:FE:79:94:09:7F:8A:A3:12
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451B7AEF79F7A22FCAEB1B7D80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     205272
IP address blocks:        161.69.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:ef:79:f7:a2:2f:ca:eb:1b:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=e827e103-3b84-4cef-ad2d-cf4f099cbef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:8d:48:cb:ad:9c:de:2f:00:b0:71:bd:ec:
                    ad:df:ec:37:de:69:d9:72:c8:96:74:84:66:71:3e:
                    ff:33:23:2a:16:6e:21:2a:5e:30:38:33:97:3b:e9:
                    ea:66:a3:35:c5:26:33:1c:49:93:0d:11:47:65:89:
                    8d:d3:4f:0b:3c:c5:09:8b:36:f8:60:3e:6a:10:b9:
                    ac:67:e9:3b:3d:01:2f:dc:42:76:32:f3:09:4e:d9:
                    39:8d:9d:e6:12:ec:35:f8:de:d5:3e:46:cc:c4:13:
                    f2:10:9e:20:26:f9:b5:63:93:17:16:63:bc:4d:93:
                    26:f3:18:9e:dc:34:a5:75:5d:b2:8a:0c:45:f7:4f:
                    c1:13:05:1c:85:ef:65:a0:81:ce:8c:3e:f9:50:53:
                    83:69:f6:5d:e8:0b:de:e9:eb:00:78:03:6a:a0:3a:
                    5f:6a:a6:fc:10:85:40:e7:a3:da:a2:56:57:62:d4:
                    e5:3a:9d:62:b4:33:83:93:30:c5:94:7e:9a:a7:1e:
                    fe:e3:c0:36:30:ff:fb:b2:76:6f:fe:92:d0:38:e9:
                    38:b4:9f:45:ed:47:ad:5b:48:11:61:7f:bd:38:d2:
                    2a:29:24:dc:2c:b7:f4:ab:81:5d:a7:e3:bf:e0:e6:
                    b5:3e:33:0c:2e:7b:2a:00:8e:2b:f8:6c:c8:30:4e:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:18:EA:D9:5A:8F:04:31:C7:9B:19:10:FE:79:94:09:7F:8A:A3:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa2860a7-d29d-3110-bb18-5cced3c2733a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:41:2e:3e:26:09:03:34:8f:6c:d4:93:a9:96:7c:07:09:cf:
         02:e6:1d:19:54:5e:17:ba:48:ab:32:38:2f:f4:c5:88:ec:82:
         a7:d0:12:9c:b6:30:e6:99:98:1c:87:22:70:a9:4f:a1:14:1e:
         95:a8:1f:15:72:43:e0:88:66:68:78:f3:eb:69:5c:48:e1:f0:
         6f:d5:da:ed:4f:76:0b:4f:cd:23:b4:5e:12:c4:1b:db:ee:bf:
         f5:a2:c9:ee:7c:18:ad:52:01:26:38:e3:cc:d3:a3:88:12:7f:
         96:12:bf:59:b6:f8:04:ad:3c:de:11:ce:7e:83:e1:91:fd:90:
         54:b4:c2:b0:40:0d:9f:c5:1a:ad:1d:89:79:70:6e:7c:26:63:
         b6:73:07:a5:8d:7d:50:5c:0d:be:63:86:68:ca:9a:6d:21:04:
         83:c9:c8:5b:60:f2:d6:97:7c:ae:b0:61:02:4a:00:5f:03:f1:
         a8:d6:ef:6c:8a:fc:b0:c3:31:e2:37:39:6b:f7:68:f9:92:52:
         3c:e3:27:d3:cb:e5:f9:10:ef:65:9a:d1:a7:4c:69:88:d6:80:
         af:30:4a:ac:0c:4e:21:f6:1f:a9:20:ff:26:88:5d:fb:d8:93:
         58:8e:5e:a4:4e:01:00:a9:7e:cb:47:36:8b:63:18:1f:a9:81:
         09:75:ec:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUbeu9596IvyusbfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk
ZTgyN2UxMDMtM2I4NC00Y2VmLWFkMmQtY2Y0ZjA5OWNiZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysyNSMutnN4vALBxveyt3+w33mnZcsiWdIRm
cT7/MyMqFm4hKl4wODOXO+nqZqM1xSYzHEmTDRFHZYmN008LPMUJizb4YD5qELms
Z+k7PQEv3EJ2MvMJTtk5jZ3mEuw1+N7VPkbMxBPyEJ4gJvm1Y5MXFmO8TZMm8xie
3DSldV2yigxF90/BEwUche9loIHOjD75UFODafZd6Ave6esAeANqoDpfaqb8EIVA
56PaolZXYtTlOp1itDODkzDFlH6apx7+48A2MP/7snZv/pLQOOk4tJ9F7UetW0gR
YX+9ONIqKSTcLLf0q4Fdp+O/4Oa1PjMMLnsqAI4r+GzIME4FjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgY6tlajwQxx5sZEP55lAl/iqMSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZmEyODYwYTctZDI5ZC0z
MTEwLWJiMTgtNWNjZWQzYzI3MzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhBLj4mCQM0j2zUk6mWfAcJzwLmHRlUXhe6SKsyOC/0xYjsgqfQEpy2
MOaZmByHInCpT6EUHpWoHxVyQ+CIZmh48+tpXEjh8G/V2u1PdgtPzSO0XhLEG9vu
v/Wiye58GK1SASY448zTo4gSf5YSv1m2+AStPN4Rzn6D4ZH9kFS0wrBADZ/FGq0d
iXlwbnwmY7ZzB6WNfVBcDb5jhmjKmm0hBIPJyFtg8taXfK6wYQJKAF8D8ajW72yK
/LDDMeI3OWv3aPmSUjzjJ9PL5fkQ72Wa0adMaYjWgK8wSqwMTiH2H6kg/yaIXfvY
k1iOXqROAQCpfstHNotjGB+pgQl17OE=
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:34:32 2024 by rpki-client on console-ams.rpki-client.org