Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22dba5e4-2fa2-3d7f-ada0-630aa0894571.roa
File:                     22dba5e4-2fa2-3d7f-ada0-630aa0894571.roa (raw, json)
Hash identifier:          2/ONZe5bWvwcruI+Zbb8UvlCxw0hbnsBt1uS8USm++8=
Subject key identifier:   3A:9A:64:B7:71:06:4A:5E:4B:B7:E0:0A:E9:98:4C:8B:F2:D1:FD:FD
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462740EAFC23FB7D4425EBA0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22dba5e4-2fa2-3d7f-ada0-630aa0894571.roa
Signing time:             Wed 20 Mar 2024 20:51:45 +0000
ROA not before:           Wed 20 Mar 2024 20:51:45 +0000
ROA not after:            Tue 18 Jun 2024 20:51:45 +0000
asID:                     36492
IP address blocks:        162.120.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:40:ea:fc:23:fb:7d:44:25:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:51:45 2024 GMT
            Not After : Jun 18 20:51:45 2024 GMT
        Subject: CN=2475392c-3fb7-408d-be16-c9708171ecf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:9d:4b:3d:f4:f7:0b:76:d7:15:a8:3e:94:
                    f4:23:81:b4:2b:d8:88:7d:47:8f:18:2c:03:a9:9e:
                    a8:15:9a:48:4d:89:89:02:73:be:28:c2:55:5d:8f:
                    c3:07:24:20:74:b1:05:a0:34:93:5c:17:4d:b6:e1:
                    b6:3a:6c:5a:4f:43:6b:1f:38:a2:21:b7:f5:b3:8c:
                    d9:ea:41:f4:2d:78:85:7d:a4:46:b1:f3:48:ad:18:
                    da:34:da:c7:78:e3:31:93:f7:cd:1e:3d:d4:07:4d:
                    72:07:d9:e8:a4:55:ac:bf:03:2c:91:2d:4c:d7:f8:
                    95:76:89:39:2d:ee:76:ff:63:06:98:30:23:fd:98:
                    33:05:09:20:ed:20:f7:ce:14:2e:c1:b1:d5:86:da:
                    40:33:cd:40:85:7b:2d:45:82:86:44:01:12:c3:cf:
                    78:03:9b:d4:8e:1f:ed:25:9f:2a:5e:83:6d:c2:60:
                    3d:03:9e:f3:48:32:74:15:c7:e0:6e:39:12:69:75:
                    17:27:36:77:6e:2a:f2:5c:c2:c7:aa:5f:d9:1f:f8:
                    9e:1f:20:9f:0f:8a:92:f5:54:99:8c:fb:44:15:c1:
                    bd:69:b9:11:fb:7f:45:b9:2b:99:61:a7:e3:36:97:
                    17:14:73:a3:0c:2e:ab:6b:69:93:04:64:2b:06:b5:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9A:64:B7:71:06:4A:5E:4B:B7:E0:0A:E9:98:4C:8B:F2:D1:FD:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/22dba5e4-2fa2-3d7f-ada0-630aa0894571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:fb:a9:2f:d2:b6:8e:90:aa:b0:81:fa:fc:b6:e2:6c:08:20:
         7f:3b:ea:cc:92:3e:ca:c9:ef:c4:17:a9:18:6f:ae:0f:cb:ef:
         f5:6a:cd:ea:12:5a:e2:ba:9b:5b:63:2a:fb:ef:05:8d:53:a1:
         56:e9:74:01:16:52:eb:bb:a3:55:f7:fa:75:b0:03:26:4d:40:
         5e:8d:72:31:a1:3d:29:46:ac:c4:a3:0d:88:ef:4b:15:1c:44:
         25:e5:f3:ed:f5:f0:fe:37:58:74:ab:b9:91:7c:2f:56:d8:d4:
         b0:fc:93:d3:73:b1:2c:fe:07:f7:d0:2d:13:15:6a:1e:1c:79:
         b8:47:f4:2b:ec:57:80:43:a1:da:29:d2:c3:84:7d:19:0f:ba:
         ed:1f:d6:22:03:7a:f2:21:e3:63:e3:92:ef:b6:03:11:99:8c:
         c9:9c:68:24:08:67:ef:6a:a4:a2:94:fb:95:c4:ca:0b:d0:0c:
         8a:2b:a7:49:21:2b:86:bd:3d:e4:22:1c:d8:10:4f:2a:eb:15:
         20:59:9d:c5:9d:02:c0:73:2d:4b:5b:52:57:7c:bc:44:8b:23:
         cd:55:c9:34:bd:18:a4:e3:c3:47:b7:3e:bf:ca:cc:26:69:03:
         22:3d:19:19:a3:01:27:73:ac:1c:4b:93:0e:7b:17:5f:94:d4:
         d0:29:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:01 2024 by rpki-client on console-fra.rpki-client.org