Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22dba5e4-2fa2-3d7f-ada0-630aa0894571.roa
File:                     22dba5e4-2fa2-3d7f-ada0-630aa0894571.roa (raw, json)
Hash identifier:          CsInQlbCBwcGgK33ABukpR9nybAEitghpldNd3bz7hA=
Subject key identifier:   E9:E7:68:75:A5:18:A9:3F:97:B8:24:A3:FD:AB:D9:79:A8:F6:71:56
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B3CD14D4041DE37475200
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22dba5e4-2fa2-3d7f-ada0-630aa0894571.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:3c:d1:4d:40:41:de:37:47:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2e2a2b2e-e56a-4f04-a23b-d311a6a71093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:2e:ec:e9:81:ef:02:0e:9a:33:c1:3c:a5:
                    2b:14:94:aa:69:dc:07:a0:bf:db:a2:9c:04:f0:a3:
                    a8:ac:4d:95:f3:39:6d:d0:5e:ab:8d:1e:27:e1:14:
                    62:e9:5e:41:f6:f7:af:0c:73:45:44:1f:b8:c1:cb:
                    97:6f:3a:d7:e3:58:9a:b5:2b:f5:f3:06:5e:2a:f7:
                    f6:74:e7:a4:fc:ac:2f:a6:75:c6:e7:c8:35:57:e9:
                    27:34:b8:54:3d:f3:92:8c:32:91:5f:57:14:a2:f3:
                    6c:07:91:30:28:d7:36:46:5d:58:d0:b9:2c:c9:1f:
                    65:6d:47:9a:f3:c7:b1:d9:88:1e:bb:cb:36:30:ae:
                    e5:a1:e4:07:11:b3:01:6f:5f:ea:9d:a2:6b:df:f7:
                    cd:12:9c:a3:2f:2e:f5:c1:74:57:44:0c:7e:3e:03:
                    d0:cb:85:c4:f7:9a:fc:75:7d:ef:c8:3a:19:e8:c4:
                    08:dd:07:a6:ce:ca:66:78:3a:f6:96:62:d7:4f:a0:
                    ea:1f:08:fe:7e:db:55:0f:00:29:7e:e9:26:7c:e5:
                    23:8c:70:6d:b3:b0:16:6e:33:bb:24:01:95:be:16:
                    2e:88:df:13:97:8d:33:27:50:e4:68:26:79:c1:92:
                    25:99:65:9e:34:26:ea:8c:9f:6b:4a:03:d9:8d:64:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E7:68:75:A5:18:A9:3F:97:B8:24:A3:FD:AB:D9:79:A8:F6:71:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22dba5e4-2fa2-3d7f-ada0-630aa0894571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:4b:de:13:78:34:22:c5:ad:32:e6:d5:c2:0a:7e:8b:fd:53:
         56:c9:ff:b2:30:f9:4d:e2:a4:1b:b2:62:db:fe:1f:86:19:82:
         19:db:75:6d:20:9a:76:21:f8:dd:2a:5b:0a:19:6a:c2:6e:17:
         77:a9:c7:a9:a3:0c:0f:a7:f8:cb:4e:1e:02:c7:8b:00:8b:8a:
         15:59:f4:f0:dd:a1:2f:62:90:f2:2d:ed:a4:aa:d2:a2:20:7b:
         a4:e6:9d:ca:8b:fc:61:e8:3d:0e:7a:be:e9:1a:7a:0c:60:2e:
         13:bb:ef:fb:4d:50:2e:4c:49:d9:f8:81:11:f6:02:65:13:e5:
         ce:54:a3:d1:f4:76:93:d6:80:c6:04:df:1c:44:02:cf:4c:e7:
         c4:ff:36:92:d5:d3:55:67:70:2d:ce:bb:eb:10:e7:2d:9d:01:
         fc:19:75:0e:e1:ba:bd:22:4e:b1:82:bc:99:d9:15:95:b7:ac:
         d2:88:ab:a8:92:3d:fa:77:c7:2d:4a:8e:4d:ea:93:7e:b8:f8:
         cc:4d:f1:f8:dc:e8:7c:99:56:60:fd:db:f7:18:fa:70:15:57:
         e2:3b:b6:23:3c:7a:44:b6:b6:ad:66:4f:d7:2d:f1:38:f4:8c:
         b6:96:d5:d3:9d:db:69:11:a7:07:01:3e:c4:3f:29:4f:13:50:
         36:5c:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:40 2024 by rpki-client on console-fra.rpki-client.org