Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1447d451-b3b7-331a-a7bf-14e07e74e7c0.roa
File:                     1447d451-b3b7-331a-a7bf-14e07e74e7c0.roa (raw, json)
Hash identifier:          XrX2roF0wAgUw20/VqYGZvDN4m0FoyBPavlbiU+J2vE=
Subject key identifier:   34:46:A9:83:BF:5E:FF:D4:7C:4C:24:46:23:79:2D:E2:42:D5:90:32
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B3FDE77D2BE1B0C930D40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1447d451-b3b7-331a-a7bf-14e07e74e7c0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:3f:de:77:d2:be:1b:0c:93:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=11b665df-95c3-4493-8e0a-374eaf32f9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:65:8f:b5:6b:03:f9:06:36:8e:b3:78:63:
                    ad:71:95:7b:8e:80:99:a6:1d:2c:60:80:fe:06:13:
                    c8:c9:8a:1b:59:e0:46:f2:22:2b:4e:24:b8:51:e4:
                    e0:fd:8e:7a:29:74:92:8b:40:bc:de:95:0d:5c:a2:
                    d9:c2:ad:1d:79:b2:b9:ad:4f:e2:d1:07:7a:cb:60:
                    18:ee:1b:04:2c:7b:bf:d0:74:0f:e6:49:62:00:88:
                    5c:3e:92:38:d9:4a:72:25:06:32:7a:54:17:2f:0f:
                    10:64:dd:35:73:08:61:c8:12:3c:2a:2f:6f:c1:dd:
                    93:d8:84:77:78:b1:7d:1e:28:b4:2a:0c:8c:af:b8:
                    ee:db:90:e3:c6:30:19:0c:ec:0d:86:0b:03:9f:58:
                    6c:f0:ac:e0:56:3a:cf:51:9f:4a:ec:40:62:64:ea:
                    4a:1e:6b:c2:e7:57:5b:c5:5a:2b:a5:99:69:d5:28:
                    39:5a:7d:19:cd:67:29:c7:94:cc:94:c9:90:6d:a8:
                    05:aa:f7:1b:e3:d5:ba:3d:ec:30:7d:00:ef:6f:db:
                    40:e3:d2:0f:ad:1c:5b:23:22:fa:0e:b3:1e:f6:51:
                    8a:0e:f1:fc:ec:25:0d:12:7d:56:f7:1d:bb:22:f7:
                    07:5f:3d:97:09:0c:0f:81:3d:34:8f:1d:71:99:37:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:A9:83:BF:5E:FF:D4:7C:4C:24:46:23:79:2D:E2:42:D5:90:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1447d451-b3b7-331a-a7bf-14e07e74e7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:25:c2:ac:d7:69:9e:e7:d0:ae:c2:9f:13:c8:9b:e9:42:ab:
         f1:9c:5a:10:e8:6f:bd:4f:0a:0b:09:b6:d1:97:3d:fd:a6:85:
         11:e2:52:d0:a1:76:9f:1f:de:40:2f:4d:d8:db:18:93:82:de:
         60:7a:8c:13:53:12:80:6c:77:bc:9a:ed:b6:25:36:bd:2f:0d:
         71:80:34:e0:d4:85:bf:b1:ad:59:08:bb:e0:7b:4d:8f:5b:19:
         9e:c4:76:4b:19:8d:76:70:3a:47:c4:f1:b6:7b:86:09:c9:9f:
         61:51:88:92:14:fd:64:d9:ee:5b:dd:4c:d0:b7:24:47:27:0c:
         08:76:d0:c5:60:9f:d0:2c:e4:cc:8d:c0:91:05:c2:5d:ff:ed:
         ef:a9:06:d0:ca:5d:c3:8f:ab:8f:22:0d:c9:89:1e:a9:50:af:
         b2:39:38:c2:8f:37:da:e7:1b:16:c6:65:23:80:19:cb:83:55:
         1e:b7:d2:e2:04:63:fb:61:a7:30:74:1b:d7:ba:49:d6:0e:6f:
         b6:40:50:a9:d5:d5:ea:52:a6:7e:28:a6:1b:4e:e6:01:44:bc:
         b1:07:18:51:2e:94:83:23:f9:d5:dd:e6:d9:f4:da:22:bf:af:
         81:ca:72:ea:dc:05:39:c6:d0:06:ce:bc:5c:cb:2a:f5:63:39:
         a4:7f:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:40 2024 by rpki-client on console-ams.rpki-client.org