Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cb495741-37af-3006-b554-3e077eec7950.roa
File:                     cb495741-37af-3006-b554-3e077eec7950.roa (raw, json)
Hash identifier:          td4vF51CQQ5eBkTvtSjEiow73QOfdo0q+zHuy5RBVNM=
Subject key identifier:   98:38:D0:A8:2C:4D:65:86:3F:37:2A:CA:07:31:63:10:7A:DE:10:3F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B605D0541B6A364941440
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cb495741-37af-3006-b554-3e077eec7950.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:60:5d:05:41:b6:a3:64:94:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=5d492cff-8a5c-49c2-8e52-45390504a640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:e6:f5:be:19:2b:d5:53:1b:a5:66:99:10:
                    17:fa:8a:5a:2d:29:d3:21:b2:34:d1:dd:9f:43:b6:
                    d7:91:e8:fe:8b:7b:7f:72:30:6e:de:7c:c8:06:93:
                    3f:da:8e:cb:da:ea:41:f9:16:31:40:a3:65:ed:3c:
                    51:f6:75:2b:82:6b:fd:c0:22:96:b3:19:11:c7:cf:
                    f7:db:3e:80:0c:f3:fb:60:31:88:0a:e6:01:bc:8d:
                    d3:6e:70:92:e8:2f:d7:92:d7:d9:23:f7:f7:27:b8:
                    5e:6e:ab:2c:4a:71:06:34:77:ed:17:83:c6:50:20:
                    44:16:08:04:d0:1e:4d:eb:9b:80:bb:af:80:ae:3e:
                    e7:2c:83:d4:89:89:73:f5:d0:8a:59:47:ad:38:7e:
                    06:4f:15:39:db:93:0c:e1:fb:4a:20:7c:d3:dc:49:
                    60:0a:b6:41:98:0f:b2:c8:ae:30:6b:cc:3d:3e:f4:
                    b2:ce:41:c3:83:83:75:d8:6e:53:b3:b3:84:ef:84:
                    fa:4a:df:19:1e:6c:31:22:0c:d2:c4:1d:03:2a:87:
                    52:17:41:ad:80:f5:63:10:8f:6c:d3:d8:71:0a:6e:
                    a8:58:89:71:79:39:08:62:2f:f8:c9:67:53:c9:52:
                    74:e7:e5:3e:af:f1:7c:9b:5f:2c:9c:eb:da:fe:07:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:38:D0:A8:2C:4D:65:86:3F:37:2A:CA:07:31:63:10:7A:DE:10:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cb495741-37af-3006-b554-3e077eec7950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:fe:84:b9:c5:80:5a:4e:28:8b:25:2e:86:7b:a7:3a:e9:8c:
         0b:7d:35:b5:19:a8:a9:d4:e3:36:55:3c:61:4d:57:92:98:30:
         1f:cd:fb:dd:ff:38:79:9f:cd:aa:7c:ec:16:ff:30:b8:70:12:
         cd:13:80:72:ef:bc:7f:bb:a3:fa:f5:67:5d:89:1e:29:be:23:
         b3:fc:0d:32:0b:41:86:57:26:76:9e:28:63:3a:c1:73:b2:41:
         99:01:ff:75:a7:20:71:33:5f:e2:52:f2:92:48:81:b4:2d:62:
         c3:33:fd:a9:e9:6b:e8:84:0e:5f:d2:76:b2:31:6e:c5:b5:80:
         c2:39:ce:d2:ad:49:d3:3f:9d:ff:68:14:94:c8:0e:36:7a:4d:
         ff:39:21:f5:31:e4:f6:36:4e:7e:8e:35:e6:3b:a3:b2:a1:7b:
         c0:07:e8:02:f8:f3:bb:86:9f:12:58:a6:01:4b:0e:6f:ad:e5:
         29:19:d8:a8:cb:1f:dd:77:e9:dc:39:b6:ed:67:9e:d4:f9:c2:
         f7:3c:a2:23:b4:bc:eb:af:bb:b4:a1:2e:3c:d3:01:4a:f4:11:
         bf:78:ea:72:46:1c:72:71:06:dd:2e:81:93:76:ae:86:70:a1:
         6a:25:5c:22:c6:d3:70:57:66:de:a8:89:e3:91:a7:7d:b8:41:
         07:01:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org