Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa
File:                     53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json)
Hash identifier:          YDF93tkl05uyFkPMEjx+kxJVI8rezVqIGDA0wfK7uEU=
Subject key identifier:   AF:2E:88:FA:FD:4A:82:06:5E:35:05:EF:96:E3:0C:D1:36:02:D2:D0
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584574B3167EC1EEBC492CAD0C00
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     25649
IP address blocks:        161.38.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:16:7e:c1:ee:bc:49:2c:ad:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=13ffefc0-b11a-4132-92f1-d888db953437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:c8:cc:6a:2d:27:d7:08:1e:76:dc:30:c2:
                    f2:25:7a:33:36:2d:65:2c:33:45:70:e1:f7:3e:ca:
                    30:09:03:38:26:59:f0:c1:6b:ec:dc:d6:8a:68:c1:
                    87:d2:23:4e:29:58:3e:3b:03:52:fe:95:e5:6f:bf:
                    de:93:de:61:4b:78:63:70:4a:1b:e1:0b:ba:f6:de:
                    8b:11:db:5b:d3:89:5b:b5:d5:5a:ed:a6:15:15:ce:
                    6c:56:03:22:41:be:ba:4c:df:5f:af:f5:cd:f0:31:
                    e4:09:f0:9b:6f:89:de:df:8b:68:9c:af:a0:2f:ed:
                    9d:4c:31:e2:ba:30:5e:3e:db:70:44:ce:a9:3c:9a:
                    18:cc:1a:97:13:d5:31:bf:1a:22:44:3c:ea:33:3d:
                    68:05:29:bd:60:d2:74:db:23:b1:27:c7:09:08:fb:
                    0e:df:3f:92:17:da:34:c9:9d:ac:84:b6:39:ba:43:
                    8d:a4:b8:17:3e:42:41:8b:d5:aa:e4:af:fa:ec:bc:
                    ba:0f:55:dc:6e:1f:e5:ff:c7:d6:f3:d9:2e:7a:f2:
                    4b:00:5b:db:29:58:a2:ce:23:ec:c9:9d:f0:b4:41:
                    a2:14:d7:f0:84:bd:7f:f8:73:8e:83:c0:51:81:14:
                    2d:7a:79:14:85:d6:ae:3b:a3:2b:32:be:c8:56:e8:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2E:88:FA:FD:4A:82:06:5E:35:05:EF:96:E3:0C:D1:36:02:D2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:14:97:f8:7f:1f:64:da:16:af:00:d8:84:3c:3f:7c:f9:f2:
         be:97:e0:c7:bb:61:67:b9:be:7c:41:d0:02:8e:15:e4:fe:57:
         f0:dd:9c:72:da:ce:24:55:84:0c:e0:81:66:f3:a3:da:fe:fa:
         cf:02:c1:11:38:c0:6f:8e:9e:5a:d4:c3:dc:d6:5e:d1:79:2b:
         53:a4:53:62:6d:eb:f2:c1:80:2e:94:6a:4a:93:f6:2a:85:22:
         bf:49:be:de:b7:ce:69:10:c0:0c:d7:cc:5e:67:14:dd:44:2b:
         9c:ab:25:c6:36:b3:8b:ba:ef:2c:b0:93:16:3f:df:46:52:85:
         a5:60:e4:3e:89:e1:8f:e7:58:0a:0c:39:b5:c3:10:8c:ba:a7:
         41:3b:af:33:f8:d9:d0:c3:7d:5b:a7:32:50:db:a5:7f:68:71:
         cc:c7:fc:46:d4:91:43:f1:8b:61:f8:1a:c4:1e:9e:55:18:14:
         6d:05:94:91:2a:92:bc:4d:f7:62:03:e7:17:5a:05:b1:e9:e6:
         df:24:b3:a5:1a:aa:d1:1e:55:da:f0:e6:cb:af:38:3d:56:da:
         7c:e3:cb:a1:6d:20:a4:9c:57:e9:a0:33:80:7e:ac:21:3f:b7:
         7b:27:38:8c:e9:6d:23:74:5b:55:d3:dc:b7:8b:90:9d:81:dc:
         dc:e4:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:45 2024 by rpki-client on console-fra.rpki-client.org