Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa
File:                     19c7d435-0191-3d18-9f33-8c7a4026904c.roa (raw, json)
Hash identifier:          uQRahjOrdYRFOGkduQ/n49C7LtnmAVdWluvIG/1HXqY=
Subject key identifier:   07:6C:80:14:70:7A:16:CA:1E:9A:A3:EE:D3:80:1D:0F:BD:7C:8F:37
Certificate issuer:       /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
Certificate serial:       010D0C9F432858471775B85CB3674CA7691F5FC0
Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     16509
IP address blocks:        161.199.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:b8:5c:b3:67:4c:a7:69:1f:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=9bf1c575-4b96-4591-884f-3bbfb9a9db37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:0e:e1:74:b9:d6:d8:7a:81:36:ec:cc:80:
                    93:15:e1:60:3b:6e:a9:a0:1f:28:e8:84:6a:6c:f6:
                    7e:bd:f4:a6:22:c3:3e:29:54:26:95:c2:88:fe:b2:
                    08:e7:d7:ee:a6:c5:6e:6a:90:6a:ca:1f:0a:22:de:
                    1b:e3:d8:fe:67:1a:ef:83:1a:ef:f7:22:78:b4:57:
                    fb:53:62:bf:fe:75:54:99:4c:45:09:6a:6e:f4:fe:
                    6a:86:e8:47:d6:05:2c:f3:d4:32:c8:e2:aa:98:fb:
                    76:6a:99:00:c6:eb:c3:d5:80:f9:d4:9e:ec:3a:54:
                    59:71:30:8c:ed:8d:17:20:e9:44:16:9a:1b:5d:fd:
                    89:33:6f:3e:61:3d:14:c4:4d:0b:31:c8:36:6e:5e:
                    e7:2e:15:0a:86:71:cd:66:0c:a4:83:bb:ab:7d:8c:
                    6c:11:90:37:d1:c7:38:d1:c4:18:3e:88:37:b4:53:
                    00:b5:8e:a6:f6:42:10:11:fb:c9:25:c9:77:03:b7:
                    0f:36:13:a4:ab:7e:8e:e1:f1:6d:21:7c:d8:47:8c:
                    5e:2a:3b:29:19:d0:24:79:48:49:e2:32:a8:45:b6:
                    19:67:12:7b:4a:e6:ba:ea:db:d8:7b:37:71:3d:c8:
                    38:68:4d:ec:82:16:cb:70:7d:cf:17:7a:7c:46:12:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6C:80:14:70:7A:16:CA:1E:9A:A3:EE:D3:80:1D:0F:BD:7C:8F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2f:0d:65:bd:4a:91:7f:8c:b8:a7:de:6f:d9:db:d8:8d:89:
         af:11:2e:87:23:ea:1e:ab:6a:4e:8a:4f:55:34:61:1d:0a:09:
         12:8d:d5:31:46:c3:26:08:7f:24:4d:03:e8:79:9e:ae:ab:ed:
         b1:77:77:f6:b9:59:72:c5:d5:24:b7:70:d0:88:c3:ef:16:db:
         81:c0:f1:19:8e:4f:af:7b:d4:f5:1a:33:1d:0e:90:0d:00:c8:
         a3:e8:b5:1a:aa:09:64:5d:96:40:f1:b2:29:ad:9a:e9:e9:27:
         fb:c7:5a:fa:8d:d3:e0:b4:60:9a:26:bb:6a:80:fd:49:08:06:
         06:03:2f:af:f9:9b:ec:21:b7:6a:70:54:70:36:f8:97:c1:14:
         74:7c:39:25:06:84:e7:25:74:07:b3:3a:d2:03:e0:ec:bf:9f:
         a2:b5:92:06:a8:29:1f:9a:f7:85:9f:dd:f0:57:d4:0b:1d:6d:
         4b:53:26:01:c7:03:44:72:2f:20:9b:8b:0e:f7:65:da:72:34:
         92:bc:a1:2a:bb:97:b5:e6:0e:31:0b:ca:02:21:74:58:b8:9e:
         51:c0:e4:09:45:81:f5:5b:76:ce:12:ea:6a:32:75:c3:67:a9:
         a8:19:53:53:8e:0c:f5:5a:3d:e7:aa:d7:ab:7a:58:dd:48:18:
         22:a5:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:49 2024 by rpki-client on console-fra.rpki-client.org