Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0449ee45-1da4-3ea0-a619-3d20097dcc7b.roa
File:                     0449ee45-1da4-3ea0-a619-3d20097dcc7b.roa (raw, json)
Hash identifier:          93iRYbXQ4NvvsNBMaHg6uQJ7nOvUyGtuZCp+k8Sft60=
Subject key identifier:   0A:50:DB:6F:F1:7C:C1:79:2C:18:FC:EA:1F:31:EE:E4:FE:F4:A4:ED
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462B43DCE5C83D3716FE9280
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0449ee45-1da4-3ea0-a619-3d20097dcc7b.roa
Signing time:             Wed 20 Mar 2024 20:59:50 +0000
ROA not before:           Wed 20 Mar 2024 20:59:50 +0000
ROA not after:            Tue 18 Jun 2024 20:59:50 +0000
asID:                     36492
IP address blocks:        162.120.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2b:43:dc:e5:c8:3d:37:16:fe:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:59:50 2024 GMT
            Not After : Jun 18 20:59:50 2024 GMT
        Subject: CN=8615a129-86ce-4d54-ae8c-66b39b6c4366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:8b:6d:24:0c:80:31:19:b6:b3:02:cf:c3:
                    70:22:50:16:8a:54:60:48:99:16:e2:49:16:2b:b7:
                    a6:ff:7b:43:d1:30:79:f8:62:a6:7c:66:79:7b:97:
                    e3:c0:cc:55:90:32:53:be:28:b4:9e:47:01:02:07:
                    08:bf:5c:36:48:03:a7:56:e9:ae:a1:d4:d2:a4:67:
                    59:01:a6:71:5c:bb:26:7f:60:ab:62:32:11:c7:43:
                    2c:a5:05:4d:f7:73:2e:62:99:85:fd:38:50:d7:d5:
                    ff:5e:64:15:1b:f9:ee:94:76:ff:c0:26:8e:01:49:
                    09:dd:9a:a7:8d:e4:d7:94:db:62:e4:7f:4a:1d:e1:
                    57:4b:73:05:fe:43:4b:ea:de:83:96:e7:1a:09:87:
                    44:61:87:d8:d2:2d:75:69:f2:70:b6:31:a3:06:df:
                    c2:be:40:84:e8:ca:2f:56:d9:25:42:ad:d6:db:46:
                    6e:1f:24:fe:9c:63:fb:0c:04:f1:39:9f:85:26:a9:
                    d9:6d:78:73:01:a1:50:89:a7:cc:1b:2a:2c:9f:e2:
                    e7:02:ab:66:14:40:e2:72:a9:18:02:0f:68:b4:2d:
                    01:28:51:67:ba:39:df:45:51:95:3f:93:08:3e:75:
                    fe:90:1f:6d:d2:fe:e5:8f:d5:86:f6:b2:08:3a:26:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:50:DB:6F:F1:7C:C1:79:2C:18:FC:EA:1F:31:EE:E4:FE:F4:A4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0449ee45-1da4-3ea0-a619-3d20097dcc7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f9:89:0b:75:7e:d3:04:52:fb:a4:c4:9b:46:bb:c4:29:0b:
         b3:2c:8f:e9:b0:f1:3f:80:d0:f5:3e:a5:c9:50:2f:fe:f7:a2:
         90:13:13:90:14:2d:94:c4:e6:88:ed:65:4a:42:d5:d5:68:3b:
         1b:bf:04:84:32:0f:ef:cf:df:12:59:76:a7:80:1d:3c:c0:c5:
         1a:cb:05:c3:46:53:09:c3:cf:f9:18:78:0f:78:b3:94:42:43:
         ab:cf:8d:2a:fb:58:5c:1a:a7:d6:2f:fd:db:1b:3f:c7:c1:32:
         c7:6b:3d:a0:94:fb:72:97:f6:13:bb:94:4f:a0:5c:f2:0d:65:
         7f:79:8e:da:58:dd:cd:93:e8:9e:ca:84:8c:3a:35:79:f7:99:
         f5:b5:93:23:a5:06:17:1f:62:4b:3d:20:6d:f0:5b:b5:f7:25:
         eb:71:8a:5f:9e:51:cb:4f:d9:f5:a5:a8:d2:c2:ed:50:43:bf:
         16:77:5f:55:2c:ee:a4:fa:e9:af:a5:4b:cf:50:a3:5d:d1:22:
         7b:48:a0:66:5d:d4:03:23:d4:29:47:15:5e:14:96:93:2d:3a:
         51:7e:f0:1d:51:50:e4:01:0a:be:b9:3e:e0:64:06:91:ea:bf:
         38:01:21:09:25:92:5f:00:d2:ce:60:a4:02:ca:c4:88:5f:4b:
         17:55:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:01 2024 by rpki-client on console-fra.rpki-client.org