Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d1cd3c0f-6a9d-3506-a28f-13ea4549ef19.roa
File:                     d1cd3c0f-6a9d-3506-a28f-13ea4549ef19.roa (raw, json)
Hash identifier:          oZRFL6l5sDOdBmaqTHIyxhJzFPtISjKBUmS4b/ChNYg=
Subject key identifier:   EB:B9:F8:47:76:8F:FF:60:99:73:29:1B:AA:E2:10:94:EB:6C:D8:45
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584546237B5F5ABC6716FC42BB00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d1cd3c0f-6a9d-3506-a28f-13ea4549ef19.roa
Signing time:             Wed 20 Mar 2024 20:44:09 +0000
ROA not before:           Wed 20 Mar 2024 20:44:09 +0000
ROA not after:            Tue 18 Jun 2024 20:44:09 +0000
asID:                     36492
IP address blocks:        162.120.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:7b:5f:5a:bc:67:16:fc:42:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:44:09 2024 GMT
            Not After : Jun 18 20:44:09 2024 GMT
        Subject: CN=ebd905aa-0260-40a1-8530-ba2447e83bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:bb:89:a8:d4:e3:42:f8:4b:52:37:c6:af:
                    85:6b:e6:a7:57:8d:1e:ca:50:0e:35:ab:5d:9e:3d:
                    aa:7f:41:84:82:cd:bb:b1:8a:f2:24:84:da:fe:bc:
                    60:5f:0c:54:e9:57:d1:0b:45:3b:1a:42:50:59:ea:
                    dc:cf:41:d3:ed:0b:0f:48:9f:43:f5:0f:ec:da:20:
                    4f:e7:52:8b:50:a0:79:c9:c7:f2:3e:7e:04:c4:7a:
                    24:66:c4:cb:c3:6a:fd:1d:c9:4c:82:e6:06:c3:d7:
                    37:51:1c:99:ed:9c:5a:77:73:57:83:5e:be:1d:22:
                    5e:45:9f:be:fb:e5:0a:19:a6:39:04:20:50:80:36:
                    db:ff:32:33:0f:66:c3:69:8f:67:ca:9a:39:34:9d:
                    cb:e2:65:8e:2a:b3:79:4f:29:36:a1:3f:2b:d1:c9:
                    f0:a3:de:51:e8:cc:e0:71:42:99:4e:f7:06:8b:db:
                    b2:19:d5:70:49:b4:95:e8:b0:6a:66:ce:17:81:43:
                    da:af:8b:73:2c:4a:bc:52:69:d4:66:f0:04:71:5c:
                    44:86:3a:37:85:b9:7d:dc:79:47:ee:55:d3:50:dd:
                    b7:2b:ca:47:87:9d:d1:58:91:4e:3f:e7:96:68:d0:
                    46:85:68:7c:14:11:39:a1:bf:a6:36:8d:52:2c:3c:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:F8:47:76:8F:FF:60:99:73:29:1B:AA:E2:10:94:EB:6C:D8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d1cd3c0f-6a9d-3506-a28f-13ea4549ef19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:da:d3:6b:7b:2f:a9:72:75:a6:d6:15:2e:b3:58:11:fd:
         12:e1:c7:ee:d1:e3:de:06:4c:c0:37:f4:05:05:2f:46:8f:ce:
         fb:7b:c1:90:c8:d4:64:f2:e9:ee:ad:b5:61:86:6d:0a:8a:6a:
         3a:0a:ec:78:3c:0a:e7:2d:9f:3e:60:59:95:96:8a:de:7b:90:
         2f:4c:f4:df:8e:86:50:9b:87:71:8c:7a:6a:03:72:88:9b:a0:
         49:ef:b0:d2:44:69:bf:34:6e:75:e9:71:3a:c6:8b:78:75:ae:
         f8:b6:3d:6b:d0:0f:aa:67:5b:a9:ba:7a:b3:ee:71:d9:75:cb:
         87:cf:c1:90:69:69:c9:5d:55:1c:44:f4:6a:58:6b:ca:d6:51:
         0e:0c:ea:e7:de:f7:ca:41:ca:b3:29:b7:75:44:12:83:6f:91:
         6c:95:1c:40:05:4d:06:e7:0a:20:57:ca:40:c5:98:8f:ef:b3:
         3c:ef:e6:c0:c7:8b:a5:81:c2:41:58:1d:ed:e2:d4:d4:50:d7:
         23:2d:45:50:06:40:3c:a6:d5:57:9b:0b:49:d3:5a:54:08:70:
         60:8e:a8:42:28:f1:c6:61:6c:55:78:83:7e:5c:e7:6e:5d:c0:
         35:a7:44:7c:cd:e1:a8:31:d6:e2:c7:7f:40:78:4a:77:21:b9:
         65:f1:ba:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:40 2024 by rpki-client on console-ams.rpki-client.org