Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a9535c0a-4032-3d4a-92c5-0f997f7360b4.roa
File:                     a9535c0a-4032-3d4a-92c5-0f997f7360b4.roa (raw, json)
Hash identifier:          STnS0sctob+YOSV+RFlFEegh0Y+3m5sdmTNINuI4/cY=
Subject key identifier:   5A:E9:F0:51:70:04:68:A3:3F:60:ED:A3:27:75:4B:E3:B8:14:41:94
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62AAF7F209308AC2C7BD580
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a9535c0a-4032-3d4a-92c5-0f997f7360b4.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:af:7f:20:93:08:ac:2c:7b:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=97d8e4e6-a4fc-4f49-a5fa-345040d18109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:0d:5d:7c:4b:3b:02:46:c2:29:5f:b2:ad:
                    e5:34:c9:69:d4:c0:48:fb:3b:eb:06:e4:33:52:47:
                    86:09:97:f3:8a:02:98:3b:91:e5:f3:31:dc:11:16:
                    37:a1:ae:d8:44:6b:14:96:3e:59:8f:e3:a0:f1:ab:
                    c2:da:fb:e1:70:60:3f:77:77:9c:cf:7c:4b:d3:2b:
                    0a:8d:5a:d1:ba:0a:2e:7c:f8:00:fb:54:42:97:71:
                    65:cf:03:69:fb:b5:90:63:54:2a:e9:48:af:b6:8b:
                    70:67:7e:e0:ce:5d:70:59:9f:3a:ec:00:c6:ba:f8:
                    0a:49:2a:7c:e4:99:79:8b:6b:5b:3d:ac:a0:02:f8:
                    f9:42:28:22:a4:d9:7b:40:1e:92:10:0f:2a:bd:bb:
                    86:44:3b:20:7f:79:d1:c7:00:ba:4f:56:cc:bb:c7:
                    8f:97:a2:c0:a0:c3:c5:c6:3a:0a:3e:53:13:e3:69:
                    4a:ec:a4:bd:db:a5:0c:dc:17:75:96:3b:2a:64:35:
                    92:02:14:8d:b8:0c:74:5c:7a:f6:f7:1c:26:ce:43:
                    fe:73:b4:1b:e6:40:9a:34:d5:c4:ba:a5:46:86:a4:
                    00:bc:e3:d9:46:38:99:ae:6d:35:66:ac:ab:1a:8c:
                    bc:1e:64:61:85:66:1c:56:fd:b9:53:84:28:e0:fd:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E9:F0:51:70:04:68:A3:3F:60:ED:A3:27:75:4B:E3:B8:14:41:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a9535c0a-4032-3d4a-92c5-0f997f7360b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:27:ce:b3:38:26:be:46:5c:46:47:d4:c9:ea:d3:d9:99:a7:
         57:a5:9c:ca:d9:f5:68:69:7c:76:b8:a4:9c:ec:46:b1:ef:6b:
         43:d3:17:4a:b8:ba:24:53:97:d4:0e:dd:f4:1f:32:1b:a3:9b:
         ba:e7:29:72:5e:73:c6:cb:cc:33:15:1b:29:08:58:58:0b:c4:
         c8:ad:47:d2:bc:90:47:85:b2:59:4d:d5:73:a1:46:f9:e0:0c:
         68:37:c1:70:62:d3:28:56:57:20:97:43:5b:42:29:73:fd:e1:
         bf:6a:23:7e:c5:15:ef:b3:96:74:3c:e7:43:fb:b7:77:1b:34:
         fe:b3:3e:a6:cb:73:f6:95:7c:90:94:9e:a0:7e:52:f5:38:cc:
         6a:ee:9b:86:0e:0b:87:e6:0c:a6:3d:bd:c1:41:55:8a:bc:f9:
         fa:49:51:e9:b6:8d:16:4e:51:6e:12:ea:3e:d2:f6:9c:d9:20:
         38:d9:71:cb:c5:43:f6:40:ba:3f:ca:13:ad:dd:de:78:0b:31:
         29:f5:94:be:2e:cb:27:ec:2c:62:63:d4:0b:30:9b:de:7c:b2:
         62:cc:92:92:d7:ff:9f:f9:b8:69:cc:6c:bd:14:d6:6c:12:bb:
         ea:b1:a5:51:11:ce:8c:df:25:12:d0:d7:64:fb:69:ae:8a:87:
         80:55:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:41 2024 by rpki-client on console-ams.rpki-client.org