Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/db1bb0ba-4d27-3066-aee1-faf284a130b9.roa
File:                     db1bb0ba-4d27-3066-aee1-faf284a130b9.roa (raw, json)
Hash identifier:          pyV1uj3psv8vRxlouNj+fvZFazuY436ryitqKjUSoI4=
Subject key identifier:   AE:8E:5F:ED:6E:87:C6:30:F8:E1:C8:35:91:EB:21:4D:A1:92:5B:79
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62AA01E5C7FA051ECC3E340
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/db1bb0ba-4d27-3066-aee1-faf284a130b9.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        162.120.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a0:1e:5c:7f:a0:51:ec:c3:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9d985a3c-67a0-4132-8b12-62e3e6576fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:54:43:0c:36:b2:6d:e7:7d:50:0c:f2:8d:
                    08:c4:86:b6:b4:cd:0c:d9:fd:3f:1f:c4:01:65:f0:
                    d7:8e:ce:27:47:b7:5a:7d:61:f4:c1:1f:d6:7f:83:
                    e5:26:1e:29:7c:77:78:04:6f:99:15:ee:40:77:42:
                    da:dc:09:04:d6:7e:b0:8f:c3:ae:ba:15:7e:00:f9:
                    f9:c4:a9:12:7e:04:f6:ce:2a:f8:67:e4:89:26:17:
                    7b:11:08:69:f6:4a:aa:38:c5:f2:94:f8:18:61:9c:
                    41:37:dc:87:bd:c2:30:13:28:33:28:ea:fb:d3:07:
                    9d:de:a7:7a:5c:77:b0:0c:df:e7:fd:f3:01:52:22:
                    1a:e0:8e:72:6a:e7:42:f4:eb:3c:17:a3:29:40:89:
                    8a:fc:85:ac:00:67:af:4b:65:22:40:ad:d2:36:2f:
                    05:5a:00:cd:a3:66:54:97:c1:b0:90:93:92:f4:d2:
                    62:0a:a9:86:6b:73:55:58:06:d8:b9:ca:fd:72:a3:
                    b3:8a:3f:29:16:03:23:ec:f0:16:25:8d:e5:80:33:
                    8d:95:3f:0a:47:83:15:ad:1d:b4:99:d6:60:85:80:
                    0b:f3:2a:17:20:99:f5:40:c6:99:83:04:7c:5b:b4:
                    a8:68:e4:3a:bf:86:35:ec:78:62:d9:26:c9:f7:16:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:5F:ED:6E:87:C6:30:F8:E1:C8:35:91:EB:21:4D:A1:92:5B:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/db1bb0ba-4d27-3066-aee1-faf284a130b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:47:8c:59:ea:42:62:34:dc:9a:56:d0:f9:6b:ec:1a:cd:
         37:e5:c7:9c:94:cc:fd:81:7c:46:1b:7e:14:59:f8:a1:b8:fb:
         db:7a:61:7e:40:ac:3b:29:39:b3:98:9f:49:89:5d:68:96:4b:
         94:4a:a6:e5:b9:71:ef:24:bc:f3:b3:32:aa:19:45:ee:f9:7d:
         0b:75:54:35:b3:23:df:86:0a:56:27:b4:af:4f:99:27:92:10:
         7b:08:60:01:18:96:55:7a:56:84:23:83:2c:6b:4c:b2:b5:05:
         aa:18:1f:58:51:d8:a4:d2:8e:f9:79:87:27:f2:e3:db:9d:ca:
         b8:51:06:f1:6d:75:53:f2:64:07:25:e4:9d:b3:7b:3c:1c:be:
         03:ac:c1:85:bd:f1:ba:9d:83:b6:15:f3:b9:7e:4f:f5:61:0e:
         40:48:e5:8e:a9:2f:17:b0:a0:18:3d:bd:3e:63:12:a9:8e:14:
         b3:e6:aa:6b:a4:60:bf:69:c4:dd:a3:09:1e:05:ee:fe:db:7f:
         b6:45:3f:c0:ca:41:d6:f5:bc:34:cf:2b:2c:35:2e:c1:16:26:
         00:ea:f7:f2:91:b3:fd:a4:5e:9e:a4:04:13:5a:9f:2d:6b:56:
         c2:78:d1:14:65:74:83:c0:a9:8c:ef:6e:22:f5:69:d1:06:ac:
         ff:18:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org