Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/aeac7f78-c4e3-3862-ba86-6c177e0a941c.roa
File:                     aeac7f78-c4e3-3862-ba86-6c177e0a941c.roa (raw, json)
Hash identifier:          Dtw1m5+7ETi+rhQg+Q2Ol8u08ZzeXWqTu07ZHrA/dmA=
Subject key identifier:   D1:D8:10:7D:67:D7:3E:59:C7:F4:89:1E:9A:DC:AB:CA:33:58:D3:1C
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62A9D1958E80CE0008DA600
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/aeac7f78-c4e3-3862-ba86-6c177e0a941c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:9d:19:58:e8:0c:e0:00:8d:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=537de560-6958-4fca-8072-9330b502bef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:58:df:ee:78:e4:7f:96:29:82:1d:cc:39:
                    e5:6b:58:ae:68:27:b5:04:f8:69:76:8f:c9:56:50:
                    10:8a:57:ce:7a:2e:d2:c5:bb:c1:38:03:43:00:3d:
                    c5:03:c4:53:3d:e3:85:1b:eb:08:41:22:84:b0:29:
                    c5:52:69:e4:67:2b:c5:a8:41:c7:20:83:87:62:0a:
                    ea:7c:07:2f:cc:9d:78:9e:af:9b:a2:fb:95:d9:eb:
                    19:16:b7:e5:b7:ad:b9:08:9c:fa:a0:94:c8:88:a0:
                    9d:a4:64:f6:f9:2e:ea:59:4d:df:4c:6d:08:dc:64:
                    7c:34:51:21:ca:18:aa:7f:65:1d:6e:85:3f:30:5c:
                    3a:c5:b2:5a:74:a6:b4:e3:33:31:c2:07:65:58:39:
                    ad:07:71:c5:4e:d0:54:e7:d3:be:2a:21:74:c9:83:
                    09:04:bf:5c:e4:76:51:10:9a:5b:9c:5c:be:c7:2c:
                    83:cd:51:6d:bf:df:41:d1:d0:90:17:94:af:9a:2d:
                    76:53:45:43:01:ad:2e:24:4f:08:85:44:fe:85:23:
                    34:16:4d:24:83:0a:ef:41:f3:88:45:34:bb:6f:62:
                    ee:8e:77:74:ad:44:a6:90:82:02:a1:8c:4d:36:8f:
                    d1:4b:2c:67:b2:3c:b0:10:32:21:8c:60:18:91:ed:
                    ce:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:10:7D:67:D7:3E:59:C7:F4:89:1E:9A:DC:AB:CA:33:58:D3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/aeac7f78-c4e3-3862-ba86-6c177e0a941c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:f6:bf:f6:7d:80:94:ce:ff:fc:51:5f:3c:f2:74:60:5d:6a:
         30:d3:ca:ee:3f:a1:47:f7:44:0d:ce:26:8f:5a:6e:30:3c:4d:
         cc:c4:2e:f7:1b:7a:05:67:dd:75:fe:e3:33:78:3e:c0:74:d0:
         3a:92:50:35:a8:2a:24:f2:0c:9d:49:ba:a5:a9:0f:21:43:42:
         26:86:ce:82:11:6f:4b:ed:6d:fe:4d:94:bf:db:63:3c:48:db:
         99:16:8e:15:81:d5:38:de:29:40:4e:92:de:7e:aa:8b:7e:2c:
         51:bf:98:0c:a3:0c:e3:13:8b:25:0c:8c:2b:0d:18:31:66:0d:
         10:de:67:79:bc:0b:30:cd:51:ac:87:57:9b:7b:ee:85:5c:92:
         25:cc:42:c0:64:ef:9a:ff:d0:c4:bc:8c:11:f4:6b:41:d9:75:
         b4:b7:f5:34:81:5d:11:45:e0:dd:ab:f3:65:0e:6b:8c:d9:b7:
         49:21:59:46:d6:e7:b1:5a:09:29:cd:aa:c9:b2:4d:10:69:29:
         5c:c8:8c:c0:db:61:6c:11:0c:e3:75:89:45:2d:f5:2a:77:95:
         f0:b9:19:ef:6a:d0:1b:10:6b:46:5d:72:dd:c6:70:c3:6a:87:
         6d:9c:eb:17:d5:ca:04:65:c1:86:a3:bf:90:dc:b8:11:e6:d9:
         a1:b6:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org