Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bd936313-bd14-3b0a-8267-3a00587933d9.roa
File:                     bd936313-bd14-3b0a-8267-3a00587933d9.roa (raw, json)
Hash identifier:          hfq74zuivhhJGrXh972v4q7KGfj7pjtM3hfYoF9Q+kk=
Subject key identifier:   F2:67:C3:25:48:A7:EB:28:7C:01:7A:40:38:9C:CD:CD:33:50:E8:D2
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462A714126EA4356B2C46580
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bd936313-bd14-3b0a-8267-3a00587933d9.roa
Signing time:             Wed 20 Mar 2024 20:58:11 +0000
ROA not before:           Wed 20 Mar 2024 20:58:11 +0000
ROA not after:            Tue 18 Jun 2024 20:58:11 +0000
asID:                     36492
IP address blocks:        162.120.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2a:71:41:26:ea:43:56:b2:c4:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:58:11 2024 GMT
            Not After : Jun 18 20:58:11 2024 GMT
        Subject: CN=98612e68-3fd4-45e3-87be-f81afdc6bff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:12:fc:16:80:7e:b9:69:11:bd:0d:f6:10:
                    f5:39:d4:7c:97:92:e9:96:3b:fc:1b:c6:17:98:ac:
                    6e:f0:cc:75:95:76:b4:10:34:aa:c2:bd:16:b5:49:
                    68:1d:ee:d2:73:01:bb:97:6c:bb:c2:84:9f:d8:51:
                    86:40:cf:d6:f6:8f:fb:dc:8b:83:d5:e7:ba:15:3c:
                    66:63:38:fe:46:bb:a7:7a:78:61:13:b5:d0:d6:99:
                    35:31:02:f0:fe:04:6b:fa:3f:6d:d8:30:e0:71:33:
                    ed:66:6c:7d:88:c9:79:12:b1:16:fb:65:7b:86:56:
                    d9:73:9e:3b:70:0d:4e:db:c6:44:91:b4:9a:36:d6:
                    a5:4e:ef:c2:17:b2:c7:1d:06:b7:ab:e5:86:4d:69:
                    74:72:aa:64:fc:74:e2:53:d3:f6:b8:d6:9f:53:3b:
                    6b:99:27:43:c4:af:e0:ff:e4:58:29:cc:c6:5f:c1:
                    ec:89:90:ba:79:fc:02:b9:2d:0d:e9:25:1e:21:89:
                    75:66:e4:74:9c:a4:87:a5:e9:f7:ef:84:71:85:62:
                    68:10:0c:73:24:15:46:56:cd:93:9b:b2:7f:3e:a8:
                    6c:01:9b:96:c0:cb:89:cc:70:97:b4:44:3f:e3:5b:
                    e6:0f:e7:28:ad:e4:ec:bb:34:39:d0:e2:b7:11:e5:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:67:C3:25:48:A7:EB:28:7C:01:7A:40:38:9C:CD:CD:33:50:E8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bd936313-bd14-3b0a-8267-3a00587933d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e5:71:90:33:ba:20:0a:31:6d:c0:81:98:97:94:5d:bb:67:
         87:90:a2:24:99:ff:02:a6:5f:d7:87:eb:1f:b1:bd:4e:d8:80:
         cb:ef:38:f5:7c:29:ca:da:0c:25:2f:11:8c:f7:64:1a:7e:b0:
         6f:19:3a:15:6a:3f:52:fc:f4:0e:6e:79:bc:38:ab:3b:e4:fa:
         05:f1:b7:23:26:c0:4c:d3:55:8e:ff:02:41:7d:04:a3:0a:84:
         63:7d:66:57:77:e0:97:4d:3f:92:af:32:bb:52:a4:3b:8e:3f:
         e5:eb:f7:78:8c:d4:90:a0:26:b7:78:1d:39:53:67:35:28:0f:
         b2:bf:e2:a0:c4:0b:2e:dd:df:31:70:66:69:c2:95:6e:94:b5:
         54:46:97:78:cc:ea:04:d9:e7:3c:84:34:c0:4c:83:39:44:27:
         f2:0f:09:66:70:df:61:aa:dc:20:03:60:00:5e:84:dd:64:2a:
         00:ab:8a:16:15:43:77:4d:39:5d:06:13:29:6c:8f:21:b9:32:
         06:9c:4d:cc:8d:c4:c2:b8:6d:d4:d2:c4:a9:d3:fe:5d:1c:8d:
         28:6e:f0:83:fe:c5:cd:cf:6f:7b:a0:31:53:48:00:67:0d:89:
         08:93:07:5d:01:a4:fa:39:87:77:34:25:84:34:0b:66:f0:08:
         dc:7a:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:01 2024 by rpki-client on console-fra.rpki-client.org