Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ff115079-aff9-352c-a7c3-cdc4a0deb181.roa
File:                     ff115079-aff9-352c-a7c3-cdc4a0deb181.roa (raw, json)
Hash identifier:          yhJDambyS2AqCKLa1NRKa+og4PSFphLzkMvLz6Bi/X4=
Subject key identifier:   5B:59:13:26:94:D6:FA:BA:31:70:47:C2:29:3E:57:BC:76:F6:5F:D0
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858451B7AF08C41F3BECF63659448
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ff115079-aff9-352c-a7c3-cdc4a0deb181.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        161.69.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:f0:8c:41:f3:be:cf:63:65:94:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=4e80a055-4728-408c-a1e4-3529664a1da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:16:88:19:a0:a8:92:dc:1f:2d:7a:f2:b0:
                    71:39:92:f9:f9:3a:56:c9:94:67:8b:c6:41:4a:37:
                    82:60:87:8e:bf:e2:7b:55:eb:9c:e8:3b:e5:53:45:
                    bf:b4:b1:83:29:a3:41:d6:44:c6:d5:f0:51:3a:0f:
                    26:0b:66:60:54:23:f8:b0:99:94:e4:aa:41:ed:c7:
                    f6:da:c8:37:e3:b2:43:15:bb:de:29:ae:aa:c4:a6:
                    26:3d:ad:47:a6:1d:46:89:43:ff:51:cd:6e:52:67:
                    2a:fc:d2:0f:f6:e3:6d:d5:0e:5c:1d:94:c2:7a:0a:
                    ee:87:0f:8d:f9:21:08:a2:d1:9a:03:ed:8f:2f:43:
                    f7:6c:05:2e:a5:81:7f:fa:2c:a5:03:4a:1a:64:55:
                    de:b5:ed:9a:a6:b7:d9:55:89:31:04:c6:dc:c8:79:
                    0c:85:d6:04:7c:f4:e1:c4:38:ec:74:4a:8a:dd:1e:
                    61:fa:cd:d5:45:bb:90:6a:f6:b3:aa:be:79:ad:20:
                    cd:fd:3b:2a:d4:08:7b:c8:df:d2:bb:78:3a:62:9d:
                    75:b0:ab:68:e5:64:fd:91:9d:48:19:b8:b5:00:15:
                    a6:27:fe:e5:f3:01:38:c8:4e:20:ca:cb:06:41:a0:
                    d1:02:91:26:d0:e1:bb:a2:39:10:1c:cb:25:4d:93:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:13:26:94:D6:FA:BA:31:70:47:C2:29:3E:57:BC:76:F6:5F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ff115079-aff9-352c-a7c3-cdc4a0deb181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d2:df:25:a6:68:90:e7:27:3e:9e:31:e4:14:e9:44:1b:b7:
         c5:dd:56:1e:e3:33:25:27:55:84:87:f2:bc:ab:fe:c2:40:b7:
         b9:6b:e4:bd:c3:46:0f:8e:35:8a:21:e0:b1:82:93:6d:08:8b:
         53:5c:06:ec:77:98:20:20:ac:80:90:29:ef:08:ef:ab:d0:84:
         cf:d1:93:4d:52:e6:a9:5c:00:4a:00:7f:43:34:7e:38:9d:5f:
         7b:7e:fa:5b:86:1c:81:ca:09:e5:0e:52:23:19:0a:9a:76:0a:
         51:43:65:aa:91:21:5e:66:1b:67:87:fe:19:6e:b9:48:7e:60:
         51:71:6c:05:3b:44:99:b5:a7:a7:10:54:b7:b3:c6:05:bc:1b:
         9b:9d:97:23:69:4c:10:db:b0:05:20:17:de:63:3a:66:6c:12:
         7a:50:3e:5a:6f:c0:ff:dc:97:f0:83:72:ae:91:12:a3:27:ab:
         15:cb:a9:7e:e9:89:01:ca:f1:ff:bb:95:74:53:f3:94:b3:71:
         c5:94:e3:ec:ba:06:55:c6:f0:da:aa:bc:c5:15:44:39:80:84:
         98:2b:11:a8:ea:12:46:af:ef:fd:71:8a:e2:fb:0c:a3:b1:23:
         d1:6b:fb:12:5a:fc:78:e3:77:ae:8a:bd:8a:c6:6b:32:7b:9b:
         57:63:d8:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUbevCMQfO+z2NllEgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk
NGU4MGEwNTUtNDcyOC00MDhjLWExZTQtMzUyOTY2NGExZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JQWiBmgqJLcHy168rBxOZL5+TpWyZRni8ZB
SjeCYIeOv+J7Veuc6DvlU0W/tLGDKaNB1kTG1fBROg8mC2ZgVCP4sJmU5KpB7cf2
2sg347JDFbveKa6qxKYmPa1Hph1GiUP/Uc1uUmcq/NIP9uNt1Q5cHZTCegruhw+N
+SEIotGaA+2PL0P3bAUupYF/+iylA0oaZFXete2aprfZVYkxBMbcyHkMhdYEfPTh
xDjsdEqK3R5h+s3VRbuQavazqr55rSDN/Tsq1Ah7yN/Su3g6Yp11sKto5WT9kZ1I
Gbi1ABWmJ/7l8wE4yE4gyssGQaDRApEm0OG7ojkQHMslTZPPswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtZEyaU1vq6MXBHwik+V7x29l/QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZmYxMTUwNzktYWZmOS0z
NTJjLWE3YzMtY2RjNGEwZGViMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvS3yWmaJDnJz6eMeQU6UQbt8XdVh7jMyUnVYSH8ryr/sJAt7lr5L3D
Rg+ONYoh4LGCk20Ii1NcBux3mCAgrICQKe8I76vQhM/Rk01S5qlcAEoAf0M0fjid
X3t++luGHIHKCeUOUiMZCpp2ClFDZaqRIV5mG2eH/hluuUh+YFFxbAU7RJm1p6cQ
VLezxgW8G5udlyNpTBDbsAUgF95jOmZsEnpQPlpvwP/cl/CDcq6REqMnqxXLqX7p
iQHK8f+7lXRT85SzccWU4+y6BlXG8NqqvMUVRDmAhJgrEajqEkav7/1xiuL7DKOx
I9Fr+xJa/Hjjd66KvYrGazJ7m1dj2Ik=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:26:32 2024 by rpki-client on console-ams.rpki-client.org