Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cd3c1749-0dde-37b3-855a-0cc41c84f189.roa
File:                     cd3c1749-0dde-37b3-855a-0cc41c84f189.roa (raw, json)
Hash identifier:          gu9XOnRYAe9rExcxyEVxX2xNMhYS0stE/1GEucf6Z3w=
Subject key identifier:   22:6D:82:F6:4A:42:B8:3D:9F:C9:B6:1C:E5:A3:95:14:7B:D0:56:39
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584546293E301FADB7D521A03500
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cd3c1749-0dde-37b3-855a-0cc41c84f189.roa
Signing time:             Wed 20 Mar 2024 20:55:46 +0000
ROA not before:           Wed 20 Mar 2024 20:55:46 +0000
ROA not after:            Tue 18 Jun 2024 20:55:46 +0000
asID:                     36492
IP address blocks:        162.120.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:29:3e:30:1f:ad:b7:d5:21:a0:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:55:46 2024 GMT
            Not After : Jun 18 20:55:46 2024 GMT
        Subject: CN=ae246b2f-d3df-482e-9024-f760ff011c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ed:da:80:2f:5f:91:27:d2:01:15:1b:31:a9:
                    b6:4f:7f:59:47:d6:6a:fd:43:6f:75:94:4a:45:5a:
                    47:5d:0a:88:57:74:56:56:6e:8e:2b:05:ff:25:d9:
                    1c:af:ab:4e:4d:ac:03:da:5a:4d:77:e3:ab:23:82:
                    44:a7:f1:e8:97:14:47:37:1e:3d:ca:8e:96:0b:50:
                    54:ae:23:8d:47:a9:0a:84:5f:72:05:0f:a2:5e:4e:
                    87:89:06:ea:27:6f:e6:da:38:10:85:f8:2b:c9:36:
                    5a:af:ad:be:17:1c:e2:87:e7:b7:1e:1e:43:c1:02:
                    29:5b:91:55:16:d0:09:0f:3c:05:04:3d:ef:90:8f:
                    52:43:1e:53:4b:1d:80:c9:3d:9b:eb:e5:c6:ab:6f:
                    9b:a2:44:75:e9:83:19:91:c1:68:fc:41:3c:65:b0:
                    00:d1:ff:66:48:49:ad:33:68:6e:d7:72:b9:b7:65:
                    0a:dc:2c:79:04:7c:60:c1:9a:86:c1:f0:cb:05:1f:
                    fd:37:76:dd:3b:41:9b:c0:f9:74:4c:b1:a3:e3:13:
                    2a:93:39:34:98:a6:bd:ff:ce:7b:5a:cc:b5:0c:2b:
                    ad:ee:ce:47:a9:8a:db:ca:c4:12:29:0b:b7:fc:7d:
                    95:60:aa:d8:ba:80:7d:8f:52:4a:a7:e9:61:7b:db:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6D:82:F6:4A:42:B8:3D:9F:C9:B6:1C:E5:A3:95:14:7B:D0:56:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cd3c1749-0dde-37b3-855a-0cc41c84f189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:a5:08:15:70:2b:e4:e7:d0:e3:1d:20:27:e0:1b:39:a4:
         ca:cf:9a:29:97:75:31:8a:06:35:a8:3f:a2:d7:a2:d2:ed:17:
         61:1e:28:47:3c:ef:1c:6c:20:7b:57:bd:3e:58:04:94:18:43:
         15:a1:51:a5:eb:45:94:34:71:90:7d:91:c1:4d:5c:4f:e6:f4:
         8a:f1:f2:92:d4:23:eb:70:59:eb:81:e7:5b:6d:b8:2f:ef:ca:
         5f:af:51:24:cf:b9:e0:9a:71:48:f3:bd:87:2c:f9:87:e1:f4:
         89:c2:45:ce:42:10:1e:64:07:24:ba:4d:b2:04:52:61:82:4a:
         cd:be:e4:79:9c:f4:20:d8:63:ec:3f:f6:ab:c4:09:81:9f:e8:
         9e:52:4a:71:f8:3d:f7:47:4f:fe:f4:de:63:40:6e:6c:9a:84:
         c9:b5:2d:93:e1:b2:a5:b6:ed:e1:6b:b7:04:48:80:2e:51:a4:
         18:9c:52:ed:e9:8f:5b:41:6d:ec:a9:05:1a:ae:90:7e:b8:58:
         15:5b:ea:7e:78:65:7d:20:e1:47:df:ce:00:24:24:6a:d9:25:
         5a:4f:66:8d:96:51:ab:13:01:84:f3:25:64:7b:e4:7a:03:60:
         d6:5a:01:6e:62:31:60:fe:a8:e3:8d:00:e4:c7:cf:21:9b:44:
         4e:54:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:40 2024 by rpki-client on console-ams.rpki-client.org