Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b773171c-ea05-3867-99ac-e5b1e37c496e.roa
File:                     b773171c-ea05-3867-99ac-e5b1e37c496e.roa (raw, json)
Hash identifier:          mdVuRtr2jGyvrzBXpe6OCElrePXi8YBCD0kHVaLhgsY=
Subject key identifier:   7F:56:29:6D:F9:D2:83:20:10:90:12:92:B5:91:68:0F:D1:72:6E:9F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454624E502CE2B5E20A24B4740
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b773171c-ea05-3867-99ac-e5b1e37c496e.roa
Signing time:             Wed 20 Mar 2024 20:47:00 +0000
ROA not before:           Wed 20 Mar 2024 20:47:00 +0000
ROA not after:            Tue 18 Jun 2024 20:47:00 +0000
asID:                     36492
IP address blocks:        162.120.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:e5:02:ce:2b:5e:20:a2:4b:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:47:00 2024 GMT
            Not After : Jun 18 20:47:00 2024 GMT
        Subject: CN=55f249c4-8f0d-4729-a33c-4ce12c3124d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:bc:23:da:d6:8d:34:bb:43:77:10:92:c0:
                    f3:65:7c:52:a4:ac:1f:c3:b3:c4:7f:cf:6a:d7:c9:
                    13:01:4e:24:3c:f0:a8:eb:78:b6:2c:79:1e:56:1f:
                    fb:3a:52:e9:75:97:5e:94:94:9f:ac:56:bc:98:a2:
                    d1:08:2d:3c:e8:b0:5c:5a:88:c5:ec:43:38:45:29:
                    fc:f9:6b:3f:be:a8:36:94:ce:0a:d3:07:52:9c:ae:
                    93:05:76:45:15:0d:1b:a9:9d:a4:ef:10:40:42:2b:
                    31:b9:01:23:f5:b0:8b:57:53:b7:18:cd:d6:12:e0:
                    83:24:a6:a7:53:ca:d9:ab:37:fa:1f:98:4c:de:7c:
                    e2:0d:9e:5f:e7:0b:ae:dd:92:14:8e:df:58:4e:ca:
                    7d:08:30:9f:4e:4e:86:74:a4:1c:3f:27:33:a4:54:
                    b5:67:2e:7d:12:b5:62:a6:e0:7a:cc:a0:d3:62:f3:
                    54:72:36:3f:ad:52:d9:af:92:eb:36:17:0d:36:57:
                    bb:6f:98:63:9d:b5:9f:13:eb:3c:ee:07:6d:d5:f5:
                    b5:f0:9f:37:60:da:9b:88:ac:2f:98:15:5b:ae:9e:
                    a8:2e:e6:41:c7:0a:23:53:fa:8e:9d:0c:63:89:8f:
                    74:62:b0:f7:f8:f3:a3:78:06:94:da:5d:19:e2:02:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:56:29:6D:F9:D2:83:20:10:90:12:92:B5:91:68:0F:D1:72:6E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b773171c-ea05-3867-99ac-e5b1e37c496e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f1:2a:15:88:a3:30:de:4b:34:19:95:d1:c2:2a:d7:50:7b:
         43:c1:44:02:51:18:da:8d:0f:45:b6:87:2b:65:57:ab:ad:f5:
         c1:d2:92:15:d8:2e:9e:28:9a:64:56:dc:56:32:c8:d4:6c:d2:
         b5:da:8d:e4:5d:be:bd:60:0d:91:99:f8:20:69:7d:3d:15:2d:
         16:b2:f2:26:01:0c:49:91:93:c4:9f:c2:f5:aa:13:30:99:12:
         f3:23:62:c1:56:0a:ea:ba:5e:fa:1b:57:d9:55:82:ae:b8:60:
         ad:8f:15:25:9c:f1:55:92:2b:0f:8e:4c:2e:ae:29:6d:6e:bc:
         53:3a:13:c1:66:39:42:ec:d7:bb:fe:6d:8e:2e:74:34:ff:a5:
         d5:2b:53:1c:75:73:01:77:f3:ec:06:40:0d:90:b6:f7:88:4c:
         24:55:92:5f:01:5a:54:29:5f:ad:8d:e2:05:60:f0:01:44:0d:
         65:f5:b1:c8:49:ac:49:9e:a4:29:e3:f1:2c:83:02:d4:41:e4:
         7b:50:99:98:f0:d4:d9:a1:59:dd:82:8b:85:68:04:ae:ea:b2:
         35:09:e4:61:e2:f7:fa:74:8f:9f:75:3e:ed:ff:37:31:27:be:
         28:de:3d:19:47:31:76:6c:38:50:66:f3:e0:f3:6e:b4:b1:5b:
         b1:9d:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:54 2024 by rpki-client on console-fra.rpki-client.org