Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa
File:                     132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json)
Hash identifier:          BZNEOpxX+7BlWIc8fVYeHlB2OzrGpar+KXocgST+WYg=
Subject key identifier:   9B:9C:B3:BD:B9:87:DA:7F:0F:5D:0E:73:CF:B5:CC:F0:C4:34:D8:CC
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F432858454808199D15D031A75275D3A0
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     16433
IP address blocks:        161.38.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:19:9d:15:d0:31:a7:52:75:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=fd66c854-b753-49bd-8423-403256f88917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:65:c7:4a:b3:9d:63:9f:e9:c5:c1:93:e9:
                    cb:ae:aa:ef:02:e7:07:8e:f2:30:fa:00:b6:af:45:
                    59:6b:ee:0f:0e:da:52:89:6c:b0:de:dd:00:dc:2a:
                    6b:6c:44:b0:10:16:ba:e3:f3:01:fe:37:ce:09:b6:
                    3c:e7:b6:9a:87:1d:b1:0f:5e:ec:76:c2:7e:af:67:
                    2f:df:ca:62:1d:1e:83:02:92:80:4c:1a:dd:98:d7:
                    a0:f3:8a:23:8e:4f:3d:ac:75:52:a0:3e:8f:58:1a:
                    c3:0d:92:90:11:74:2f:b9:28:75:33:dd:dd:1c:d6:
                    4f:60:10:f4:5a:7b:d7:eb:af:c3:ae:88:f3:0e:65:
                    84:36:b0:3f:3c:45:3f:5a:5f:14:c9:06:58:fa:61:
                    96:52:74:fa:cf:9f:fb:43:73:82:3f:99:78:c3:09:
                    09:d7:a5:b1:9c:ea:50:36:34:10:94:9e:58:94:25:
                    22:b7:4d:53:ae:18:88:f1:e5:64:c4:7b:87:6b:77:
                    5d:aa:1f:95:4c:50:97:23:bc:10:66:e9:73:03:25:
                    c6:4d:2d:ca:c0:d7:aa:68:54:55:b2:b4:6d:35:ad:
                    af:aa:83:e2:5f:6f:c5:e7:54:01:fe:94:14:da:d5:
                    89:a7:cc:e5:bb:89:f0:db:4c:a5:69:01:c5:33:7d:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9C:B3:BD:B9:87:DA:7F:0F:5D:0E:73:CF:B5:CC:F0:C4:34:D8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:62:d1:76:d8:d3:14:85:eb:55:52:8a:d6:12:ba:26:c0:b7:
         59:61:70:db:43:e1:cc:2f:43:7a:c9:08:a5:40:aa:5b:ce:73:
         39:56:c4:57:54:76:22:83:7d:01:ab:92:3e:2d:c8:74:08:20:
         af:3d:55:1a:15:41:25:44:e8:83:9a:97:c9:b2:83:6a:0e:ff:
         ef:9a:e8:40:5d:9a:4f:0d:1e:26:f5:aa:45:fb:55:8a:e7:c3:
         28:63:0e:8c:b6:0c:6e:c5:0e:66:b9:ea:ab:39:b5:74:11:88:
         60:cd:25:06:89:f0:95:9c:b9:d2:c2:9c:b2:4a:9c:fe:d8:97:
         08:ae:31:ca:88:34:79:7d:40:77:85:f8:6f:98:da:ee:8d:48:
         c6:2b:83:1e:d0:79:c0:4e:df:c7:55:15:8c:89:4c:0f:6c:bf:
         45:dd:19:3c:7c:7c:e1:e9:e1:79:c8:50:90:ab:ac:75:bd:24:
         4c:5c:1c:dc:7b:0d:77:b7:18:09:9c:53:0a:34:94:87:e4:77:
         6b:cb:ac:64:de:70:e9:cc:63:e0:9d:db:4d:7c:51:86:2b:7a:
         14:28:9d:03:37:9f:af:52:33:c5:e6:45:28:2a:8a:d8:8d:07:
         85:17:52:21:70:85:06:8a:d7:33:29:01:9d:1e:e3:9c:ee:ba:
         84:cd:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 06:43:21 2024 by rpki-client on console-fra.rpki-client.org