Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/95de20f9-3f74-31b7-ac52-e6df11acadef.roa
File:                     95de20f9-3f74-31b7-ac52-e6df11acadef.roa (raw, json)
Hash identifier:          ih6hHUEl0MdzTXQNy4FnLHDunHbrTcZh+i/vAdB2d9A=
Subject key identifier:   63:16:0F:71:6D:1A:B6:C6:9B:1C:CB:65:2E:64:67:92:A7:18:D9:A1
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62AB5A4D6213F68FD100000
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/95de20f9-3f74-31b7-ac52-e6df11acadef.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b5:a4:d6:21:3f:68:fd:10:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=bf1b1426-0b97-478c-afe4-fb2fa9b3216b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:79:53:2c:06:8d:64:12:f2:73:76:a6:29:
                    ae:df:2b:58:e2:e7:e3:7d:b7:a1:4e:17:6f:99:42:
                    ef:60:ce:60:22:84:9d:7c:5a:6f:81:ca:51:ed:b7:
                    46:db:48:a7:6b:fd:fc:9a:ef:b2:10:78:90:6a:3a:
                    93:b6:72:13:94:05:b5:4c:6c:1a:a2:14:e7:97:76:
                    60:8f:fe:fb:b7:9b:1f:c1:cd:e4:35:b8:98:41:51:
                    c6:c7:04:35:f6:99:26:4a:2a:0a:27:c3:0f:90:07:
                    d4:30:21:16:47:86:7f:17:14:9d:8e:4a:3e:3b:25:
                    44:f0:0c:d4:50:70:10:b6:53:2b:b1:ed:c9:8e:e7:
                    18:de:82:84:a1:15:93:49:6c:d5:5f:a2:98:28:35:
                    79:be:f4:e4:9f:4e:91:73:e4:b0:16:69:6e:29:9f:
                    70:59:e1:6f:67:13:a0:99:da:bc:1c:ce:ce:5f:41:
                    23:f4:2e:d6:9f:fe:95:83:f1:42:b2:3b:df:7d:71:
                    d6:c2:18:57:5a:eb:2c:3b:fa:48:51:8f:21:d0:b7:
                    78:6c:2e:45:c1:43:83:66:63:0e:e5:09:18:cc:73:
                    5f:d1:33:81:ba:e1:63:87:1e:05:79:d5:a9:ea:71:
                    11:f0:a4:82:13:f6:c6:4d:11:b9:aa:21:86:d1:0e:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:16:0F:71:6D:1A:B6:C6:9B:1C:CB:65:2E:64:67:92:A7:18:D9:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/95de20f9-3f74-31b7-ac52-e6df11acadef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:25:90:90:d1:ec:ef:94:55:d9:f5:e4:99:c2:bb:fb:43:
         e7:ac:7f:30:6b:22:4a:bd:28:c9:dd:37:d4:18:a7:42:c3:85:
         02:fe:75:3d:d6:40:a4:ba:c4:1d:66:4b:4c:e4:5f:f3:3b:48:
         b6:a6:27:b2:96:66:15:d4:be:f7:0c:4c:23:69:5d:16:aa:82:
         0f:01:b3:f6:24:39:20:d8:b1:a0:d3:61:7f:0e:9e:8f:23:0f:
         3e:73:f5:3d:e5:09:c3:24:84:8d:07:6b:43:42:72:01:84:e3:
         dd:50:71:a4:f5:3b:c7:fa:c7:d4:98:0c:e4:ca:9a:f1:c2:4a:
         07:9d:cc:16:2b:d4:d6:0f:8d:e0:3a:70:5e:b3:38:ff:9d:55:
         c5:5d:0f:74:71:42:c6:5e:ec:72:1d:cc:57:30:73:e2:f2:90:
         58:35:7e:c4:21:65:73:41:e5:ca:a7:7f:73:df:b5:32:95:0d:
         04:6a:e7:a6:b6:5b:22:e2:47:2e:f0:99:e4:9c:3b:a5:65:bb:
         a9:49:ce:48:8f:47:a0:e3:65:f2:6e:08:b1:83:73:95:6b:0d:
         aa:cf:62:c8:13:52:09:c5:ae:0f:ea:6b:73:8e:d7:0b:43:40:
         54:45:96:99:51:5a:cb:04:c0:1f:65:eb:0b:5f:2e:b1:ae:21:
         d0:3b:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:40 2024 by rpki-client on console-fra.rpki-client.org