Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a9535c0a-4032-3d4a-92c5-0f997f7360b4.roa
File:                     a9535c0a-4032-3d4a-92c5-0f997f7360b4.roa (raw, json)
Hash identifier:          C3b0LB5dMWmaLwVxwbIY8fk6IskXkBTWlIk4y6pcqHg=
Subject key identifier:   6D:D7:BA:6E:39:3F:B4:9A:6D:9A:49:C2:3D:42:E6:9D:4B:99:59:60
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454629B2B3A6E966C025247700
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a9535c0a-4032-3d4a-92c5-0f997f7360b4.roa
Signing time:             Wed 20 Mar 2024 20:56:41 +0000
ROA not before:           Wed 20 Mar 2024 20:56:41 +0000
ROA not after:            Tue 18 Jun 2024 20:56:41 +0000
asID:                     36492
IP address blocks:        162.120.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:29:b2:b3:a6:e9:66:c0:25:24:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:56:41 2024 GMT
            Not After : Jun 18 20:56:41 2024 GMT
        Subject: CN=36f8a392-2073-44d1-8181-92aa29a50778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:da:42:89:d2:66:06:8f:46:9c:61:d6:07:
                    86:fc:d2:97:b5:ff:be:5e:cd:d7:9f:05:6a:6b:41:
                    46:4d:77:34:52:61:db:c1:fd:83:c1:20:74:68:0b:
                    ea:41:92:36:af:e4:f9:60:ae:ee:c3:7d:ea:4d:93:
                    fb:b1:f7:dc:c9:e5:00:66:16:f2:3b:cf:48:9b:26:
                    04:0a:2b:58:9c:5d:a3:0a:89:1b:c0:b6:a7:c4:a1:
                    7b:b4:9d:a5:53:7b:99:ca:36:82:23:38:05:9c:78:
                    fd:11:aa:cb:24:70:89:bf:ca:0e:ba:48:59:1e:af:
                    84:e6:e8:87:92:81:2b:ad:20:54:68:4c:1a:87:51:
                    77:d4:86:79:49:38:62:06:70:71:4f:80:bf:c7:88:
                    b4:72:c8:57:31:09:60:e0:14:98:ee:89:14:66:c2:
                    ed:d4:9b:f9:74:c4:b4:05:22:0c:05:3c:8c:a8:82:
                    5a:f3:d4:ba:d0:a8:a4:e6:9f:08:2f:9a:e3:bd:5b:
                    c7:b7:a2:56:fb:56:bd:bc:00:6c:60:ba:4b:ae:4a:
                    6c:31:b3:8e:4b:fb:a7:3a:03:9a:2d:c5:7a:67:f3:
                    0c:4a:02:cf:dc:e1:44:e4:93:ba:64:da:4d:39:f2:
                    3e:b9:a4:59:e3:38:67:97:3b:fd:c4:8e:6e:1f:25:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:BA:6E:39:3F:B4:9A:6D:9A:49:C2:3D:42:E6:9D:4B:99:59:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a9535c0a-4032-3d4a-92c5-0f997f7360b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:67:c4:78:b2:fd:e1:12:d9:f3:0e:01:8b:d7:c0:c6:d3:
         b9:2b:a1:c5:4b:0a:e0:17:2b:c1:b8:86:a0:b6:dc:8b:d4:99:
         68:61:13:4e:1f:29:65:c3:9e:67:b6:0d:43:06:db:13:02:ca:
         b8:f2:4a:3e:d9:50:53:dc:df:d8:22:10:67:f1:0c:27:71:ef:
         89:76:51:f5:46:66:12:6a:f9:0e:d8:83:d3:ca:5b:9e:26:6b:
         dd:78:50:49:ef:4d:d3:4c:bf:eb:27:ce:9c:ad:fa:24:52:ec:
         18:9d:39:05:08:c7:a4:4f:c4:a7:27:87:1c:a2:93:20:aa:5b:
         c3:9d:0c:23:1c:c7:ae:9e:ab:df:8c:d6:60:c2:54:ea:94:99:
         25:3b:7f:6f:49:84:a2:43:d2:40:fb:a6:f3:a3:f6:8c:ad:ab:
         aa:87:65:02:d5:41:27:d7:e1:8d:9d:89:b5:bc:78:5e:f0:c4:
         65:1f:39:04:bf:76:8a:d8:e9:05:56:a2:9c:30:93:58:fd:fc:
         d7:19:a0:41:85:5a:0f:df:ed:38:3f:32:88:fe:b8:8f:84:6a:
         9b:7a:c4:af:3e:eb:12:ff:5f:27:b7:b6:55:b1:4d:60:d0:8e:
         c1:c3:c8:19:5e:54:f5:8c:f0:9b:0f:58:17:37:03:a7:b3:5f:
         0c:9b:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:53 2024 by rpki-client on console-fra.rpki-client.org