Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a915730e-a7ed-3c59-a4c3-fabffe6dbecd.roa
File:                     a915730e-a7ed-3c59-a4c3-fabffe6dbecd.roa (raw, json)
Hash identifier:          LWEm9puB9xEIXhEuaomOH5/jv388azmHMjnenU4Rn3M=
Subject key identifier:   FB:74:6E:60:91:73:A9:0A:63:50:E5:45:EC:76:21:A4:BD:EF:78:8F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62AA8471E94F4AA55B82C00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a915730e-a7ed-3c59-a4c3-fabffe6dbecd.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a8:47:1e:94:f4:aa:55:b8:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e2519dee-a2a4-47ee-aaec-e3c5f4a0052f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:ab:93:52:f8:c1:d3:45:a8:ae:37:45:18:
                    b2:18:9b:0a:e8:26:a1:eb:79:ff:1b:91:fa:41:9f:
                    52:d8:a3:11:ab:a3:a9:8d:db:e4:8e:cc:67:45:78:
                    43:e4:d5:c6:c3:ec:ae:c4:59:de:41:de:05:a7:e5:
                    c9:37:fd:79:80:18:01:d7:07:9e:99:7f:44:ce:29:
                    6f:5c:a6:dc:e9:34:7b:8a:6f:34:95:50:a0:ed:e2:
                    14:98:89:6d:78:5a:aa:73:3e:58:9f:42:a9:28:12:
                    4b:d8:95:6d:60:22:84:9e:04:66:08:82:1f:6e:e1:
                    cd:d2:66:eb:3d:e5:c5:fc:28:32:37:73:af:db:7e:
                    17:97:6c:e3:2c:e7:03:a3:b0:0f:6a:23:17:1d:20:
                    3a:61:33:f2:46:13:5c:df:cd:72:ef:e4:00:81:b4:
                    ef:3a:17:15:20:04:f5:7a:e4:f3:f4:b2:e3:7e:60:
                    9f:59:1d:c7:30:b3:88:0e:ba:84:87:b0:ee:94:7b:
                    f8:e9:29:ea:be:47:e9:5c:d3:98:ff:8f:b7:09:48:
                    28:c3:ba:33:51:7b:d2:c5:c1:1e:1d:68:24:39:7a:
                    43:09:bb:1b:f7:b2:dd:67:16:de:c8:15:b5:60:99:
                    90:34:b3:c6:e6:73:ec:5a:e7:11:22:b2:94:af:32:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:74:6E:60:91:73:A9:0A:63:50:E5:45:EC:76:21:A4:BD:EF:78:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a915730e-a7ed-3c59-a4c3-fabffe6dbecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:88:2c:51:b4:cf:c5:c6:b4:ce:1e:bf:f7:69:e1:55:75:
         f3:fc:63:04:10:a6:fc:44:dc:af:8e:7a:9a:45:b2:df:83:13:
         5e:e7:4a:82:26:8c:dc:16:94:7f:6b:3e:fa:ed:a0:b2:c9:6d:
         f7:9f:72:fd:45:73:85:09:3d:35:04:08:99:4b:31:75:b3:75:
         f4:f4:75:0f:98:75:97:f2:48:4c:54:d6:63:98:d0:d8:30:0c:
         da:e9:44:3b:8e:43:37:8c:34:18:d2:8b:c5:ac:d6:c2:e5:05:
         8e:52:30:1e:bf:27:c7:33:5d:66:7a:b6:37:f4:1f:99:94:f1:
         69:07:eb:46:ea:f4:73:88:75:37:45:a4:eb:16:77:74:30:2d:
         f8:82:7d:38:28:62:b1:51:74:db:52:61:ec:a0:c9:c3:af:c2:
         92:bc:57:c7:d4:fb:b9:aa:48:72:71:18:a8:60:41:fe:39:1b:
         2c:a2:ec:ac:bb:12:f8:57:99:02:6e:16:5e:29:67:4b:d8:e1:
         d6:4c:c1:3d:13:1d:8b:01:fb:f4:c4:c7:e1:4a:f2:79:c2:b5:
         44:e3:a1:9b:2e:2a:29:0c:57:ff:7c:55:0d:d3:b5:4e:62:26:
         26:3a:ed:84:54:e2:27:ba:d2:b4:13:e8:78:d8:0e:0a:22:de:
         89:a3:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org