Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/95de20f9-3f74-31b7-ac52-e6df11acadef.roa
File:                     95de20f9-3f74-31b7-ac52-e6df11acadef.roa (raw, json)
Hash identifier:          nLi2L6iAyquAq7kER5wqiWvz5dAIRhVEYi6zs25cxR0=
Subject key identifier:   12:E0:9B:27:EB:68:AC:88:CE:6C:DA:C2:11:1A:0E:90:44:5D:72:E0
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462CB1B5873DB0B9C2384500
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/95de20f9-3f74-31b7-ac52-e6df11acadef.roa
Signing time:             Wed 20 Mar 2024 21:02:43 +0000
ROA not before:           Wed 20 Mar 2024 21:02:43 +0000
ROA not after:            Tue 18 Jun 2024 21:02:43 +0000
asID:                     36492
IP address blocks:        162.120.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2c:b1:b5:87:3d:b0:b9:c2:38:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 21:02:43 2024 GMT
            Not After : Jun 18 21:02:43 2024 GMT
        Subject: CN=a02b56b5-bf6d-40c8-bdfa-535052d9603b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:f8:7f:57:e9:41:73:a1:9b:9c:c7:15:5f:
                    7f:ef:ec:08:b7:e9:b0:fa:87:15:01:a3:72:96:80:
                    e9:0f:93:d1:99:5c:54:a6:08:53:a6:1c:81:59:fa:
                    5a:5e:0f:a1:88:65:39:8e:97:f8:97:61:06:51:92:
                    0e:3c:c9:f4:27:2e:e0:ae:d2:69:76:69:df:30:46:
                    72:18:fb:0e:ef:78:e3:7e:6d:79:3a:15:4b:a0:8d:
                    1f:8c:eb:44:e8:f3:38:56:41:ed:99:7b:73:fa:18:
                    3d:3c:81:47:3d:34:5f:e4:20:44:fb:65:4a:d9:c1:
                    47:2c:25:ab:bb:12:96:35:52:97:b5:fc:1b:0a:97:
                    ea:28:e0:bf:e2:47:19:83:2e:1e:e6:92:f5:81:b9:
                    d5:c8:6a:0c:ca:9a:8f:50:69:be:7b:09:d6:5e:38:
                    3c:d7:c5:50:a5:b2:43:87:f8:e1:bd:c6:66:63:ef:
                    fa:24:f7:cd:92:28:6b:f7:82:06:e1:65:49:88:4b:
                    f3:f8:d6:ab:48:81:03:c9:90:4e:97:ed:21:3a:50:
                    8e:0e:d3:e6:6a:7e:63:6e:1c:c5:18:05:a5:5f:08:
                    45:aa:96:a9:35:f0:5a:4a:bb:20:ac:31:8e:15:6b:
                    69:93:04:d4:9f:e5:00:4d:53:f8:b2:b7:da:cf:40:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:9B:27:EB:68:AC:88:CE:6C:DA:C2:11:1A:0E:90:44:5D:72:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/95de20f9-3f74-31b7-ac52-e6df11acadef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2d:e3:68:76:8e:7f:b3:7e:79:e6:8d:ab:a6:b2:c4:dd:bc:
         c1:6e:41:fd:16:4d:c3:5f:ac:e8:63:1a:18:7e:0f:48:93:e8:
         65:28:43:15:d3:79:ec:52:01:5d:32:a0:ac:d1:6a:89:9f:61:
         e1:0c:11:95:8b:c6:a1:7a:ab:14:04:7b:9a:d2:10:0c:50:c3:
         2b:20:95:01:bd:35:84:c9:8a:b1:69:9d:da:53:19:4c:2d:d5:
         70:8c:fe:67:61:11:43:11:a7:30:d7:05:59:3c:e6:49:86:58:
         87:d9:24:e2:6d:ec:a6:32:a2:06:0e:8d:ed:56:bf:47:e0:98:
         6b:15:5a:26:91:f7:55:22:1b:17:7c:74:8c:50:4a:cc:3f:b2:
         93:8c:79:aa:62:a9:52:9e:65:00:d7:04:14:d2:54:36:c8:c0:
         55:6a:98:e3:a8:34:d0:fc:94:62:61:ef:2f:61:7f:fc:72:be:
         38:71:3f:aa:0d:48:c6:25:a7:57:aa:d2:5e:5d:ab:a2:75:9a:
         56:b1:ea:e5:2a:61:e9:70:b4:f9:08:f5:ef:a0:ca:ee:7f:02:
         f2:89:7a:e1:28:85:d5:b2:0a:f4:46:1d:34:c1:60:3e:5f:04:
         44:7c:2a:c3:1e:ec:dc:13:f1:c3:0c:e7:53:df:e8:42:22:91:
         02:b3:00:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLLG1hz2wucI4RQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI0MDMyMDIxMDI0M1oXDTI0MDYxODIxMDI0M1owLzEtMCsGA1UEAxMk
YTAyYjU2YjUtYmY2ZC00MGM4LWJkZmEtNTM1MDUyZDk2MDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNv4f1fpQXOhm5zHFV9/7+wIt+mw+ocVAaNy
loDpD5PRmVxUpghTphyBWfpaXg+hiGU5jpf4l2EGUZIOPMn0Jy7grtJpdmnfMEZy
GPsO73jjfm15OhVLoI0fjOtE6PM4VkHtmXtz+hg9PIFHPTRf5CBE+2VK2cFHLCWr
uxKWNVKXtfwbCpfqKOC/4kcZgy4e5pL1gbnVyGoMypqPUGm+ewnWXjg818VQpbJD
h/jhvcZmY+/6JPfNkihr94IG4WVJiEvz+NarSIEDyZBOl+0hOlCODtPman5jbhzF
GAWlXwhFqpapNfBaSrsgrDGOFWtpkwTUn+UATVP4srfaz0DZ+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLgmyfraKyIzmzawhEaDpBEXXLgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvOTVkZTIwZjktM2Y3NC0z
MWI3LWFjNTItZTZkZjExYWNhZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConicMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgt42h2jn+zfnnmjaumssTdvMFuQf0WTcNfrOhjGhh+D0iT6GUoQxXT
eexSAV0yoKzRaomfYeEMEZWLxqF6qxQEe5rSEAxQwysglQG9NYTJirFpndpTGUwt
1XCM/mdhEUMRpzDXBVk85kmGWIfZJOJt7KYyogYOje1Wv0fgmGsVWiaR91UiGxd8
dIxQSsw/spOMeapiqVKeZQDXBBTSVDbIwFVqmOOoNND8lGJh7y9hf/xyvjhxP6oN
SMYlp1eq0l5dq6J1mlax6uUqYelwtPkI9e+gyu5/AvKJeuEohdWyCvRGHTTBYD5f
BER8KsMe7NwT8cMM51Pf6EIikQKzACM=
-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org