Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8268bff4-f682-3417-82b8-698cde7b24da.roa
File:                     8268bff4-f682-3417-82b8-698cde7b24da.roa (raw, json)
Hash identifier:          QQjpJGJMepyvSOyT4RxQ7XJVqZTrUMTHQvgexNB3B2g=
Subject key identifier:   3F:13:A9:8C:C0:2F:33:10:0C:1C:81:73:25:CD:9B:70:01:A1:55:B4
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584546275E8C185CB997CBE29780
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8268bff4-f682-3417-82b8-698cde7b24da.roa
Signing time:             Wed 20 Mar 2024 20:51:59 +0000
ROA not before:           Wed 20 Mar 2024 20:51:59 +0000
ROA not after:            Tue 18 Jun 2024 20:51:59 +0000
asID:                     36492
IP address blocks:        162.120.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:5e:8c:18:5c:b9:97:cb:e2:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:51:59 2024 GMT
            Not After : Jun 18 20:51:59 2024 GMT
        Subject: CN=82f98f0b-3486-4c74-97a0-b4aea1494a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:af:0c:2b:ef:9b:dd:cc:88:96:82:7e:fc:
                    40:b4:0e:e4:29:86:eb:d1:96:f4:f5:64:03:67:26:
                    0c:c5:33:a0:4f:95:d8:11:36:ba:8e:c4:26:90:ed:
                    0b:83:a0:8b:bb:c9:ae:20:37:c7:b0:58:ea:f4:00:
                    dc:3e:15:d6:8e:ea:40:c7:db:c2:9f:65:ee:79:74:
                    99:e8:1f:d2:74:fb:91:c8:1e:c4:77:b8:28:8b:d7:
                    0c:a3:08:b8:8c:db:8d:fc:19:a7:74:75:bc:ca:94:
                    0f:b2:e8:9c:03:8d:00:e4:86:b6:5b:57:90:52:9e:
                    c2:cb:8f:ba:8d:57:8a:98:e8:c4:41:1c:ab:f7:e8:
                    6c:a3:82:69:0e:00:dc:f3:b0:d0:fb:6e:17:b0:92:
                    f4:75:fe:6b:af:74:db:82:8b:7a:8e:14:24:eb:2f:
                    ad:a6:6a:a2:be:d9:db:26:98:12:02:2d:af:11:04:
                    42:0c:2d:95:19:87:e1:54:cd:ca:e1:05:cc:34:d7:
                    66:ad:c4:a7:9a:77:30:43:2c:d4:05:64:65:e1:18:
                    23:ed:c6:dd:a6:79:b1:6b:e2:34:47:46:07:a0:d5:
                    e7:89:16:da:65:25:18:31:03:a2:5f:c1:e6:b8:cd:
                    47:b9:ba:db:bc:91:d6:ab:03:eb:a9:50:4e:95:17:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:13:A9:8C:C0:2F:33:10:0C:1C:81:73:25:CD:9B:70:01:A1:55:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/8268bff4-f682-3417-82b8-698cde7b24da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:45:dc:e2:24:16:62:fe:ad:7b:1a:f8:48:c8:d5:bb:79:47:
         83:de:86:5c:db:32:b0:5b:8d:ba:d5:d9:cd:b1:7b:b2:c2:d9:
         65:6f:5b:00:9b:c4:63:dd:7f:4d:b2:6c:d5:25:08:87:02:26:
         35:b6:ed:bc:f1:30:79:8e:9a:51:8e:03:c8:66:31:88:31:b6:
         7a:0b:9c:05:04:fa:ce:88:39:07:d2:e1:60:ee:bd:80:29:80:
         fe:01:73:63:ff:0a:29:9c:32:ed:9b:46:2f:06:5b:92:47:14:
         ce:09:03:17:e5:1f:59:78:d8:64:b6:d4:10:6d:4b:41:e4:bf:
         85:b0:ef:9a:9f:a3:19:fe:a5:1d:bb:ab:35:c0:b0:1d:85:a6:
         e7:31:88:00:a8:d4:9a:24:cc:fd:e9:f0:7e:91:e7:9b:52:a9:
         24:44:e5:0c:5b:c6:60:4c:88:12:aa:c8:ba:4c:75:d7:a1:f4:
         b9:98:24:53:c2:40:ce:79:40:98:e5:f7:f0:f8:4d:d6:fe:8f:
         38:7f:17:28:b7:97:00:71:cc:05:da:95:7e:0c:ce:6f:e6:69:
         40:3a:48:39:dc:fe:2b:9f:10:65:e0:7c:f0:48:89:6b:9d:14:
         68:56:cf:b9:a0:d3:7f:85:7e:52:2e:83:2e:9b:26:88:cd:b3:
         ff:fa:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:40 2024 by rpki-client on console-ams.rpki-client.org