Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1cf7e974-d4a1-33e1-b973-bd4c36444adc.roa
File:                     1cf7e974-d4a1-33e1-b973-bd4c36444adc.roa (raw, json)
Hash identifier:          i36WfouF3zacUEtmZFeoVfmpiSTP4v6eu3IgriYKdq4=
Subject key identifier:   B9:B7:66:FD:E6:39:3A:8A:19:FA:00:12:D4:40:2F:4C:26:13:86:48
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62AB63C9E1ECCA48DE14A80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1cf7e974-d4a1-33e1-b973-bd4c36444adc.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b6:3c:9e:1e:cc:a4:8d:e1:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=480fa218-76a4-4e23-85d3-9bc42dd2ea52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:49:23:38:a5:48:6a:d2:d3:99:41:b9:3b:
                    85:ea:31:9d:55:0e:80:67:85:bd:b3:65:03:07:59:
                    ff:e1:cb:8e:f5:9c:99:61:70:3a:06:08:ad:ca:e2:
                    5a:97:03:d4:7e:c8:2e:ee:7f:35:aa:2d:04:b0:be:
                    85:71:90:c2:c4:d0:55:fb:09:74:dd:d6:d8:c9:10:
                    c7:d5:2b:ae:71:6d:3a:42:cf:f3:4d:40:e6:ef:96:
                    d5:6f:b8:66:d0:09:55:73:01:fa:03:e2:38:f3:ad:
                    72:47:9d:d5:1f:cc:3f:73:1f:e5:b5:03:27:00:d5:
                    1d:8c:47:47:16:c1:e7:08:11:af:63:ef:7e:ce:f6:
                    78:84:50:ef:39:5f:c7:4f:88:ee:ee:d7:09:32:18:
                    23:ec:58:19:c1:5c:e8:ea:6d:9c:b9:c0:72:59:61:
                    9f:f6:bc:db:31:2a:8e:bd:7e:27:6f:88:26:08:ba:
                    5f:c2:1a:1f:75:d4:d5:2e:5f:6c:ee:0f:3d:47:3a:
                    3f:87:5d:6f:ff:f6:bb:2c:fd:6e:22:3b:78:6a:70:
                    86:9c:d1:26:dd:60:e8:82:3c:9d:2e:dc:34:18:73:
                    2e:bc:7a:b3:04:85:a1:dd:62:aa:3c:b8:15:f7:d5:
                    b1:a4:c6:5a:e0:54:27:da:29:94:7a:11:ac:7d:6e:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:66:FD:E6:39:3A:8A:19:FA:00:12:D4:40:2F:4C:26:13:86:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1cf7e974-d4a1-33e1-b973-bd4c36444adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:5e:3f:b4:9c:83:43:c3:ba:36:2a:4c:f0:aa:fc:fe:53:40:
         92:bd:26:01:77:9b:53:f6:be:7b:21:7f:ed:18:e7:51:b7:e0:
         7d:16:26:4a:d7:22:98:b0:d7:6e:c7:91:39:b9:b8:0a:02:25:
         bb:04:59:d9:db:8a:e4:1b:74:ad:1c:87:bc:69:a3:a8:6c:50:
         ba:48:59:69:ed:1e:27:01:41:bf:8c:aa:fd:20:f9:c8:85:0e:
         c8:6f:a9:8c:5c:fb:27:c1:1e:b9:bb:7d:89:7c:ae:7b:39:a2:
         1a:0c:7d:be:88:e7:41:16:f5:b1:70:f6:bb:ff:82:66:e9:83:
         c2:73:75:f1:f1:4c:95:df:0c:f4:e7:30:36:68:5f:e0:52:2a:
         fe:d3:fc:b2:7c:7f:cd:90:52:e2:d1:5e:b6:d7:e3:57:9c:b1:
         31:83:0a:23:9a:26:37:91:7a:97:01:70:76:5d:ba:c1:fe:3f:
         49:9b:8c:93:a5:ab:f1:1d:ce:0f:d9:1c:17:49:4f:37:1e:a6:
         d0:9d:0b:f0:43:13:70:b0:f3:c8:4e:27:ff:fd:b3:73:33:6f:
         30:57:41:ec:48:5b:28:7e:d0:19:06:25:3c:d3:2b:d8:35:d2:
         c4:33:00:86:a6:6b:d8:37:f8:7f:ce:3c:06:c7:c1:0a:cd:2a:
         61:2f:1a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:36 2024 by rpki-client on console-fra.rpki-client.org