Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/24a20149-fd9c-3ed1-af11-2a9bb1dfe6e1.roa
File:                     24a20149-fd9c-3ed1-af11-2a9bb1dfe6e1.roa (raw, json)
Hash identifier:          ZGi8DD6mvbcKX5PeVtNlJrhutF8A4gCsMfezm3MAJp8=
Subject key identifier:   7D:1C:26:AE:B7:FD:D0:CB:76:3B:5A:9E:09:64:02:5F:C6:5D:12:87
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454628586FCC0210A93373D2C0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/24a20149-fd9c-3ed1-af11-2a9bb1dfe6e1.roa
Signing time:             Wed 20 Mar 2024 20:53:57 +0000
ROA not before:           Wed 20 Mar 2024 20:53:57 +0000
ROA not after:            Tue 18 Jun 2024 20:53:57 +0000
asID:                     36492
IP address blocks:        162.120.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:58:6f:cc:02:10:a9:33:73:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:53:57 2024 GMT
            Not After : Jun 18 20:53:57 2024 GMT
        Subject: CN=882398fc-9154-4e37-aa2f-e55be6d8d760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:e6:30:2b:0a:21:18:86:1e:05:6b:ea:70:
                    b5:f2:71:28:f0:65:a9:af:cc:f2:7c:fc:3f:3c:b1:
                    cd:5a:ff:e5:31:62:7e:3b:8f:af:66:7d:0d:7c:37:
                    31:86:66:77:10:ef:bc:24:16:88:3d:9a:b3:6c:2f:
                    18:18:22:99:3a:4b:dd:24:1d:fd:09:d8:dc:18:a9:
                    20:63:c1:3f:93:b8:88:9e:d2:20:02:23:48:ff:3c:
                    72:6e:e7:a2:56:22:83:6f:04:0e:56:6e:61:12:0c:
                    70:8c:a7:79:49:72:d3:44:f8:3a:ce:86:c3:da:41:
                    09:76:2c:67:45:ba:04:b9:e5:2e:5f:6e:95:99:bd:
                    2f:35:b4:83:0e:60:f6:98:08:75:99:1e:65:cc:c4:
                    80:b5:a1:67:76:9a:e9:c5:ea:ef:61:56:e2:e0:e4:
                    f6:cd:2f:df:9b:f9:cc:09:50:4c:dc:8c:23:5d:8a:
                    3f:c0:34:d2:2e:b8:f5:2e:de:ef:89:15:ac:aa:4b:
                    77:47:8d:1c:63:84:5c:ff:47:5c:25:d1:e7:3d:73:
                    d3:f8:15:24:ec:e6:32:49:3b:3e:6d:d7:9c:c3:0f:
                    a9:03:c1:c2:1c:c7:6a:f5:16:67:f8:b9:31:35:d7:
                    f7:6a:f1:b6:fc:9b:0e:c6:dd:ce:ef:74:36:53:f3:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1C:26:AE:B7:FD:D0:CB:76:3B:5A:9E:09:64:02:5F:C6:5D:12:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/24a20149-fd9c-3ed1-af11-2a9bb1dfe6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:26:91:8c:b4:67:2a:34:bf:01:54:02:53:59:ef:4c:a1:fe:
         3e:41:20:14:16:49:d0:f4:86:2d:5f:3a:ee:04:af:76:b5:78:
         e4:71:19:ed:4e:9f:1e:54:69:9c:33:12:a2:e9:83:07:81:55:
         e5:ef:90:8f:62:1d:32:16:9c:d5:80:5c:d2:8f:f4:4f:f2:55:
         d2:1b:f5:d9:e7:55:9f:05:f7:a3:eb:f1:04:5a:b8:22:49:8b:
         fd:fa:7b:d9:a0:14:0c:c9:20:e4:38:51:a2:9f:b4:9d:84:70:
         80:e5:14:13:81:ed:db:68:9d:72:7d:9b:e6:9f:00:01:8a:c1:
         da:0e:52:a5:1d:de:8d:fd:df:75:3a:33:ee:7e:da:24:c1:93:
         fc:e6:30:10:5a:73:4f:96:4b:2d:71:7f:51:c4:84:32:e8:03:
         ac:d1:71:24:f7:aa:41:d9:f9:63:2e:64:9c:6b:cd:45:17:09:
         32:f2:68:58:bb:a3:26:4a:50:75:a1:31:ed:c3:32:91:37:be:
         56:9e:c7:ef:58:5e:b7:ed:89:24:27:69:b8:04:03:44:bf:78:
         97:ba:68:34:ea:8c:a5:11:5e:bc:ce:90:91:8c:b5:ae:75:7b:
         a4:bf:53:82:c9:6a:1e:72:40:3c:7a:c9:87:6c:06:92:bd:43:
         91:83:db:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKFhvzAIQqTNz0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI0MDMyMDIwNTM1N1oXDTI0MDYxODIwNTM1N1owLzEtMCsGA1UEAxMk
ODgyMzk4ZmMtOTE1NC00ZTM3LWFhMmYtZTU1YmU2ZDhkNzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUvmMCsKIRiGHgVr6nC18nEo8GWpr8zyfPw/
PLHNWv/lMWJ+O4+vZn0NfDcxhmZ3EO+8JBaIPZqzbC8YGCKZOkvdJB39CdjcGKkg
Y8E/k7iIntIgAiNI/zxybueiViKDbwQOVm5hEgxwjKd5SXLTRPg6zobD2kEJdixn
RboEueUuX26Vmb0vNbSDDmD2mAh1mR5lzMSAtaFndprpxervYVbi4OT2zS/fm/nM
CVBM3IwjXYo/wDTSLrj1Lt7viRWsqkt3R40cY4Rc/0dcJdHnPXPT+BUk7OYySTs+
bdecww+pA8HCHMdq9RZn+LkxNdf3avG2/JsOxt3O73Q2U/O5pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0cJq63/dDLdjtanglkAl/GXRKHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMjRhMjAxNDktZmQ5Yy0z
ZWQxLWFmMTEtMmE5YmIxZGZlNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonihMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKgmkYy0Zyo0vwFUAlNZ70yh/j5BIBQWSdD0hi1fOu4Er3a1eORxGe1O
nx5UaZwzEqLpgweBVeXvkI9iHTIWnNWAXNKP9E/yVdIb9dnnVZ8F96Pr8QRauCJJ
i/36e9mgFAzJIOQ4UaKftJ2EcIDlFBOB7dtonXJ9m+afAAGKwdoOUqUd3o3933U6
M+5+2iTBk/zmMBBac0+WSy1xf1HEhDLoA6zRcST3qkHZ+WMuZJxrzUUXCTLyaFi7
oyZKUHWhMe3DMpE3vlaex+9YXrftiSQnabgEA0S/eJe6aDTqjKURXrzOkJGMta51
e6S/U4LJah5yQDx6yYdsBpK9Q5GD22E=
-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org