Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/398cf65d-8971-33b5-9a5d-4e363a8bb9c7.roa
File:                     398cf65d-8971-33b5-9a5d-4e363a8bb9c7.roa (raw, json)
Hash identifier:          gIxq3BFTUmEJ/dNcRAK+Plf7t2i80lRk1onH4Oua8Eo=
Subject key identifier:   43:93:7D:FF:20:E0:F6:1A:39:47:8A:F5:DB:F4:EA:33:23:1B:F6:26
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584546272DD8D67D7AF620DD2180
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/398cf65d-8971-33b5-9a5d-4e363a8bb9c7.roa
Signing time:             Wed 20 Mar 2024 20:51:36 +0000
ROA not before:           Wed 20 Mar 2024 20:51:36 +0000
ROA not after:            Tue 18 Jun 2024 20:51:36 +0000
asID:                     36492
IP address blocks:        162.120.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:2d:d8:d6:7d:7a:f6:20:dd:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:51:36 2024 GMT
            Not After : Jun 18 20:51:36 2024 GMT
        Subject: CN=609c1d22-500b-428e-b9be-e35ae5b5e3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:e3:f6:d4:88:75:fb:9e:ae:35:1b:e8:a2:
                    16:f8:bd:e0:72:46:5c:2b:a6:c7:0f:47:6e:5f:37:
                    62:41:dc:35:9c:d7:fe:56:98:9a:f7:32:81:a9:09:
                    b7:27:42:8e:95:70:19:40:e6:fd:4e:7e:7a:03:85:
                    4e:7d:78:d8:e5:08:af:e1:2b:3b:30:1a:b5:a2:f3:
                    08:1b:4d:8f:6c:76:55:60:da:ef:0e:65:32:f7:62:
                    d4:58:c6:57:08:26:0e:14:59:0a:e5:87:70:f6:9e:
                    6d:ae:92:4b:27:48:a1:61:c4:27:62:6f:45:b9:28:
                    8d:24:95:63:7d:e1:a0:f9:51:bd:af:e2:69:45:3f:
                    81:92:65:fb:93:f8:28:46:7e:5b:06:45:15:b6:9a:
                    37:ae:72:f9:7f:29:2f:7d:0e:9d:ef:11:85:84:db:
                    c6:66:db:0a:75:1a:a5:d4:7b:74:44:0b:00:94:5a:
                    3e:fb:8d:4f:06:aa:03:b7:df:e4:f8:fc:30:4f:95:
                    83:99:2c:a0:7f:ee:ab:e0:2e:d1:c2:fc:9b:3f:bb:
                    bf:e5:d2:9c:80:60:bd:1d:05:f0:1d:1a:cd:fb:eb:
                    e3:7c:1c:e7:f5:86:04:c5:24:b6:7e:c4:99:63:86:
                    5d:94:80:a1:6b:63:ee:c6:cd:99:9e:16:fd:67:c4:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:93:7D:FF:20:E0:F6:1A:39:47:8A:F5:DB:F4:EA:33:23:1B:F6:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/398cf65d-8971-33b5-9a5d-4e363a8bb9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:cb:e1:0f:5a:78:f5:38:34:14:f1:97:b8:39:2a:14:0a:
         70:da:89:63:cd:9a:f8:37:6b:5b:81:8d:c3:14:b2:77:a0:2c:
         36:79:4d:40:c4:37:ea:34:d8:fe:93:b7:57:6a:58:ba:0a:28:
         a0:7a:3a:a5:75:9c:12:27:5d:d4:8d:00:b0:bd:03:44:90:bc:
         f5:f8:98:e6:a1:50:6d:08:80:55:cb:5e:fa:fe:ea:fc:b4:5f:
         5a:9d:11:ea:ba:14:4f:a2:34:ed:d9:49:82:cf:39:aa:bc:02:
         10:3b:43:5a:f7:56:d1:dc:d4:64:c0:e3:fc:66:ff:b6:c2:c1:
         b0:5c:27:06:f8:06:1e:32:a2:d2:e9:86:61:7a:ff:b6:24:8e:
         78:15:d9:68:00:6a:6c:89:d5:68:f3:74:24:90:67:72:f0:29:
         11:32:42:06:47:22:6f:61:58:1e:be:d1:27:dd:89:b8:9d:1a:
         aa:33:89:dd:51:0f:37:91:bb:08:fd:29:df:9f:9f:14:68:66:
         9e:14:5d:aa:36:8d:00:87:b5:01:93:db:3d:6e:af:e2:80:b6:
         3c:6b:78:c8:67:5a:1b:dc:12:3e:19:75:2b:6a:13:60:fb:ea:
         7b:5c:52:57:b0:dd:6f:12:6a:d0:9a:49:2d:88:80:ea:bb:a3:
         25:73:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org