Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/769c70fe-0e1f-3e8f-ba3d-1171d3b8d9ed.roa
File:                     769c70fe-0e1f-3e8f-ba3d-1171d3b8d9ed.roa (raw, json)
Hash identifier:          hy9vzHPgc+7ETt9SaYnSzo/suIJ2abImX/KSBVoJuGU=
Subject key identifier:   08:F7:FC:A2:3A:D1:BB:00:B1:9D:78:E3:B0:94:38:A2:CF:E1:5A:64
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454626B5F059B2820FE5B5D980
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/769c70fe-0e1f-3e8f-ba3d-1171d3b8d9ed.roa
Signing time:             Wed 20 Mar 2024 20:50:39 +0000
ROA not before:           Wed 20 Mar 2024 20:50:39 +0000
ROA not after:            Tue 18 Jun 2024 20:50:39 +0000
asID:                     36492
IP address blocks:        162.120.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:b5:f0:59:b2:82:0f:e5:b5:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:50:39 2024 GMT
            Not After : Jun 18 20:50:39 2024 GMT
        Subject: CN=c63f7f74-2e73-4d3e-9668-d3411792e2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:71:27:f6:99:93:52:32:5a:82:a9:65:26:
                    e3:26:91:d4:d2:45:cb:ec:f3:ce:5b:28:0b:88:af:
                    43:66:67:29:e1:44:c0:97:0b:eb:8d:67:96:06:d7:
                    47:55:95:9a:d8:a3:b3:7a:4c:3e:97:76:4c:3f:24:
                    22:99:35:ab:79:4b:3b:85:ca:0d:d4:f7:08:7c:2a:
                    92:1d:2a:43:18:83:6d:a1:dc:0d:09:53:1f:d0:73:
                    65:96:d4:07:fc:cf:48:9c:13:de:90:ab:0a:43:41:
                    ac:5f:e8:cf:f6:14:50:b7:54:5b:b3:8d:e0:6b:75:
                    06:48:38:93:a7:d0:6d:82:ab:95:5b:f6:9a:12:64:
                    9f:4a:7b:39:c0:f2:49:38:31:38:90:cd:32:ca:4f:
                    69:90:7f:d3:b7:d0:49:b3:e6:dd:77:a3:69:e1:6c:
                    73:53:96:07:3c:c6:42:84:da:62:b5:b7:28:b9:05:
                    ea:b6:be:71:c7:3f:bc:2c:3b:6d:11:0d:e7:fb:3d:
                    ee:8a:5a:c4:2f:2c:3a:9c:c0:32:46:71:24:71:7a:
                    64:54:9b:69:88:27:8a:f0:ca:1c:26:62:66:58:2f:
                    d4:e9:a2:27:6b:14:1a:75:6b:5f:1f:02:db:3d:ce:
                    f8:06:94:39:88:e1:b2:05:41:a6:2e:00:8c:79:24:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F7:FC:A2:3A:D1:BB:00:B1:9D:78:E3:B0:94:38:A2:CF:E1:5A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/769c70fe-0e1f-3e8f-ba3d-1171d3b8d9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:e0:fb:17:ba:6b:d2:75:f7:1d:4c:30:42:94:3e:95:8e:
         b0:8e:56:56:1f:fe:d7:3d:92:5d:98:d5:26:82:ce:89:33:d3:
         8e:c7:c9:6b:18:a3:85:54:8b:30:db:2d:75:2e:a4:37:ee:e9:
         9a:3e:15:d3:36:2d:ab:c4:c3:d3:6c:ce:9e:c1:a9:53:df:2c:
         85:0f:96:01:50:40:cc:70:81:e3:9d:50:06:18:ce:da:8f:f2:
         e9:fc:65:cd:19:0d:79:e1:f4:b2:7a:9f:57:e2:23:87:6d:b9:
         95:dc:71:93:6c:54:02:2c:d6:48:4b:89:0d:cd:e6:08:c3:e2:
         03:5a:6c:99:91:bd:b8:d5:73:50:9a:f8:75:33:2a:fd:5a:3f:
         1b:df:0c:b8:ee:ad:5b:c8:d2:51:32:3b:70:a4:07:f1:03:c0:
         51:df:eb:5f:b6:a1:2c:fb:15:6c:a0:67:c1:1f:bd:bb:57:ca:
         cc:76:4d:22:ef:6e:59:2b:a2:7e:47:32:50:8c:be:63:4a:40:
         80:c7:66:66:dc:d3:50:02:01:dc:1d:10:36:8e:27:90:a6:d7:
         f0:3b:3a:8b:f0:c4:8d:8d:5a:f8:5e:37:3e:89:b8:0f:ab:61:
         d7:3a:a1:f1:68:27:0f:f1:ba:d9:63:3a:e8:42:7c:2e:28:57:
         bb:41:7e:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJrXwWbKCD+W12YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI0MDMyMDIwNTAzOVoXDTI0MDYxODIwNTAzOVowLzEtMCsGA1UEAxMk
YzYzZjdmNzQtMmU3My00ZDNlLTk2NjgtZDM0MTE3OTJlMmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+JxJ/aZk1IyWoKpZSbjJpHU0kXL7PPOWygL
iK9DZmcp4UTAlwvrjWeWBtdHVZWa2KOzekw+l3ZMPyQimTWreUs7hcoN1PcIfCqS
HSpDGINtodwNCVMf0HNlltQH/M9InBPekKsKQ0GsX+jP9hRQt1Rbs43ga3UGSDiT
p9BtgquVW/aaEmSfSns5wPJJODE4kM0yyk9pkH/Tt9BJs+bdd6Np4WxzU5YHPMZC
hNpitbcouQXqtr5xxz+8LDttEQ3n+z3uilrELyw6nMAyRnEkcXpkVJtpiCeK8Moc
JmJmWC/U6aInaxQadWtfHwLbPc74BpQ5iOGyBUGmLgCMeSRGDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAj3/KI60bsAsZ1447CUOKLP4VpkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvNzY5YzcwZmUtMGUxZi0z
ZThmLWJhM2QtMTE3MWQzYjhkOWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoniYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnm4PsXumvSdfcdTDBClD6VjrCOVlYf/tc9kl2Y1SaCzokz047HyWsY
o4VUizDbLXUupDfu6Zo+FdM2LavEw9Nszp7BqVPfLIUPlgFQQMxwgeOdUAYYztqP
8un8Zc0ZDXnh9LJ6n1fiI4dtuZXccZNsVAIs1khLiQ3N5gjD4gNabJmRvbjVc1Ca
+HUzKv1aPxvfDLjurVvI0lEyO3CkB/EDwFHf61+2oSz7FWygZ8EfvbtXysx2TSLv
blkron5HMlCMvmNKQIDHZmbc01ACAdwdEDaOJ5Cm1/A7OovwxI2NWvheNz6JuA+r
Ydc6ofFoJw/xutljOuhCfC4oV7tBft0=
-----END CERTIFICATE-----
Generated at Wed May 1 20:51:40 2024 by rpki-client on console-ams.rpki-client.org