Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/459b8fcf-35a5-3d84-b7ab-cba8a8a9de9a.roa
File:                     459b8fcf-35a5-3d84-b7ab-cba8a8a9de9a.roa (raw, json)
Hash identifier:          loUPxPd9IiexXgf/h9ErIEJUFzH6ph3oTIxnNF9sBRo=
Subject key identifier:   6D:9B:2C:CE:43:C4:E1:64:54:13:23:A1:E7:73:49:64:0A:C6:1B:52
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B40E81A8226F8FA932540
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/459b8fcf-35a5-3d84-b7ab-cba8a8a9de9a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:40:e8:1a:82:26:f8:fa:93:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=889eb458-a7e2-48f6-af26-932be9b05c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:44:51:40:9e:0e:6c:74:34:f1:0b:22:b9:
                    57:10:d6:9e:62:90:2a:6d:50:93:aa:7f:a2:84:76:
                    e0:c6:af:04:2e:ee:56:43:19:37:3e:90:26:db:af:
                    77:ed:15:ca:75:3c:e7:5c:96:9c:2c:58:db:85:b0:
                    6e:a5:8f:04:2f:3e:1d:49:03:97:16:b2:61:44:15:
                    a5:5e:b6:50:e3:08:53:0c:92:26:3a:b7:f3:3b:05:
                    e7:23:b7:c7:ce:92:ec:db:22:ce:f8:51:a4:bf:4f:
                    29:5b:f2:80:3f:78:6c:c5:0c:1b:b9:11:c5:fa:c7:
                    14:58:41:c5:be:be:bc:10:ba:b9:76:24:ca:05:f5:
                    1f:2a:83:07:6e:33:54:83:09:1b:99:9d:ad:18:04:
                    e9:7e:0f:9a:f4:44:9f:ef:bc:30:cc:eb:7c:b5:b8:
                    b0:80:06:48:7a:c8:58:24:c2:b1:15:47:68:18:f1:
                    70:11:da:fd:90:41:05:f0:59:ee:cc:b7:4d:e0:8e:
                    3f:c2:23:57:dd:8f:28:55:7e:55:8c:87:fc:d5:b9:
                    a3:62:14:38:af:94:08:a2:9d:bc:b5:2b:db:ba:af:
                    92:b7:d3:54:79:11:b1:a8:a9:37:7b:84:3c:ed:2f:
                    42:ca:c0:f9:b7:c5:d4:fc:33:8b:43:a2:0f:09:f0:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9B:2C:CE:43:C4:E1:64:54:13:23:A1:E7:73:49:64:0A:C6:1B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/459b8fcf-35a5-3d84-b7ab-cba8a8a9de9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:26:4f:e9:45:55:f0:4d:e3:7b:23:91:3e:8d:8b:20:11:38:
         30:70:77:0f:c7:20:03:df:2b:02:74:da:9e:49:9d:60:d5:8d:
         01:a9:a4:6d:ad:63:73:fd:e7:3b:7d:23:62:1a:c6:2e:74:a4:
         39:fa:5b:3d:2e:5a:43:52:99:dc:f6:4f:10:a2:aa:3f:71:9d:
         c0:96:ba:bc:eb:06:32:cf:c1:a8:8d:61:7b:2f:1a:8a:f9:04:
         81:07:96:61:03:72:b1:42:1e:54:fc:19:fb:20:9e:b0:73:2e:
         40:be:e1:21:5c:f7:32:77:c7:ad:1b:88:56:f2:5e:85:e0:64:
         d3:bb:d2:09:ba:85:79:c1:c7:d5:11:39:76:e7:67:84:17:0e:
         7e:34:52:c9:ac:ab:f9:e5:71:40:95:fe:a0:51:b6:64:2d:30:
         41:c8:a1:7a:88:d7:73:10:5b:b5:e0:62:56:be:80:30:a9:2a:
         46:d7:63:91:60:7f:a5:6a:50:95:d0:09:8a:af:3c:9a:44:6d:
         a3:d1:dd:ec:85:08:54:28:2c:e7:a2:5d:57:76:85:31:7d:1b:
         51:d0:f6:ab:3e:b8:b0:ec:c1:a4:f7:82:0a:45:89:f0:ff:3b:
         ae:f4:69:89:e3:ba:15:26:f6:05:78:d5:ea:9e:4f:5f:09:dc:
         81:62:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:41 2024 by rpki-client on console-ams.rpki-client.org