Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/73f78351-91de-3c1e-aa8b-58ccad4f7659.roa
File:                     73f78351-91de-3c1e-aa8b-58ccad4f7659.roa (raw, json)
Hash identifier:          iuXiWw3vLxkHyuDf3pnQ83jDu/6EBZCEX1vjFn+Q7pw=
Subject key identifier:   F1:B5:2C:8F:37:49:86:96:1C:46:39:AE:A8:0A:4F:AD:68:13:E5:4E
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462827C53596A13C73B11590
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/73f78351-91de-3c1e-aa8b-58ccad4f7659.roa
Signing time:             Wed 20 Mar 2024 20:53:34 +0000
ROA not before:           Wed 20 Mar 2024 20:53:34 +0000
ROA not after:            Tue 18 Jun 2024 20:53:34 +0000
asID:                     36492
IP address blocks:        162.120.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:27:c5:35:96:a1:3c:73:b1:15:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:53:34 2024 GMT
            Not After : Jun 18 20:53:34 2024 GMT
        Subject: CN=afa495b8-c3f4-420a-8b17-31f7f63ca53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5b:63:75:47:09:1b:80:d5:97:f4:cd:75:0a:
                    2a:7d:0d:a8:7e:bb:4a:c6:3c:e3:0b:e0:82:4d:cd:
                    ff:6a:9a:27:6e:8c:cb:73:77:86:a0:2c:92:be:60:
                    d3:d2:bf:4a:0c:63:26:b1:aa:4e:de:a2:d7:25:7f:
                    3f:9e:0d:a5:02:74:43:85:d6:3c:7b:26:3f:0d:17:
                    3d:ac:5e:aa:ae:41:71:f0:25:e8:1b:e3:4d:00:e9:
                    fb:0e:a6:53:03:12:ae:ba:d7:48:6a:ac:7c:b4:ee:
                    22:06:85:18:08:9e:fc:26:b4:cb:73:73:1a:69:ff:
                    0a:34:34:68:a7:6a:77:99:44:37:2d:b4:55:d6:e0:
                    9e:0b:8f:58:69:6b:06:2b:86:61:4b:13:e8:9e:c9:
                    49:ba:79:99:1e:8f:ed:16:03:d3:38:c4:4f:87:d8:
                    7c:f1:8e:9d:94:60:58:75:a5:b9:7f:0e:38:b6:a3:
                    d9:56:a7:06:f4:6c:90:dc:ef:6e:62:f3:1f:b7:7c:
                    0e:28:9d:c5:a5:14:87:32:33:57:ba:86:92:f4:4b:
                    1f:00:50:a0:32:41:ae:3c:7c:28:19:53:07:44:bc:
                    47:24:47:7c:f3:df:fb:a8:02:0d:6e:91:77:8e:58:
                    9f:d9:9c:62:69:0f:e1:f8:f8:ef:10:b7:e0:f1:54:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:2C:8F:37:49:86:96:1C:46:39:AE:A8:0A:4F:AD:68:13:E5:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/73f78351-91de-3c1e-aa8b-58ccad4f7659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:5f:3a:37:62:ef:71:ba:82:c8:b6:ba:b3:43:45:24:76:
         0a:01:2c:cc:2c:a0:76:1d:8b:9a:1b:08:71:c2:f2:8e:ef:9c:
         19:b3:83:34:53:71:f8:4f:2b:8c:e9:0f:e7:af:9b:8c:54:8e:
         ad:42:66:9f:45:e5:f8:30:e9:4a:b2:05:fe:29:0a:40:75:8e:
         52:d3:4a:7e:83:32:89:8c:2d:db:af:67:93:3b:da:50:81:98:
         14:fb:29:27:8d:21:0d:9b:45:d5:0f:33:09:d1:08:32:be:22:
         56:2f:be:77:1f:bb:e9:66:95:fc:a4:5e:c3:7d:a9:d5:b1:31:
         7a:be:42:80:55:fb:f0:ff:01:00:3e:eb:e5:b6:e0:16:99:45:
         64:81:49:ce:56:aa:3f:f4:f6:99:63:0c:78:87:b0:41:9d:ec:
         10:ae:f6:32:89:4b:1f:dc:b8:cc:18:0a:7a:42:64:4b:d6:d4:
         61:fc:cc:c5:5d:40:b6:66:27:a9:77:f8:2d:4c:e0:ab:59:18:
         ee:28:b6:c4:8a:04:33:47:88:8b:65:0c:c7:11:76:5c:56:29:
         c5:fc:5a:a3:ce:f4:de:12:9b:fd:82:39:9a:1e:9c:4b:13:10:
         8b:c4:9e:87:dc:11:fc:d2:11:0e:cb:f4:66:d6:5b:24:b3:c6:
         bd:1c:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:40 2024 by rpki-client on console-ams.rpki-client.org