Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa
File:                     aced6c3c-599e-3d5e-8ad8-b92918504da2.roa (raw, json)
Hash identifier:          XMWnKkIMxrVqj/5cXj9goDTbFs9NziLgIyuV6e1hUH4=
Subject key identifier:   56:81:44:DF:17:EC:AE:3C:72:A7:92:64:2F:B5:FC:FB:1C:05:BF:66
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285845E45E68CBC41B3AE0F94BF000
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     31898
IP address blocks:        170.114.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:68:cb:c4:1b:3a:e0:f9:4b:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=f3943c41-d7d6-4bfd-9ea2-b563f99f6b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:05:8b:a6:d2:fd:92:79:60:ff:54:00:26:2a:
                    5c:e5:8d:e2:75:5d:9c:56:df:2a:5c:65:23:cf:9e:
                    bb:a3:01:c1:12:3e:46:ea:10:15:22:31:a3:93:61:
                    c9:95:62:71:ee:64:53:e2:04:b7:71:4f:55:e4:51:
                    46:58:28:33:12:50:9c:fc:d6:30:8f:05:f7:15:93:
                    bf:36:72:3b:68:a2:55:2b:80:18:b6:c3:4f:48:31:
                    8e:1e:4b:f7:01:4f:43:0e:d8:f1:19:30:81:94:44:
                    94:97:60:1c:2b:f8:d0:52:5e:f8:f2:46:2e:fa:3d:
                    1c:23:de:67:1d:b4:7d:c7:55:a9:18:9e:a3:5b:a7:
                    7e:fe:df:a6:21:83:91:fe:f4:67:8b:7f:aa:91:3b:
                    3f:2a:ae:88:ef:90:97:ea:18:bd:fe:05:4d:53:bd:
                    00:f8:6a:fe:45:87:31:c1:de:80:d9:f6:78:cf:52:
                    77:28:67:58:cf:26:67:3a:34:7a:c1:58:4e:0d:77:
                    07:01:f3:04:b8:41:a3:fe:13:22:67:a0:d0:df:2a:
                    f2:7d:a0:bb:35:e6:6b:8a:70:c4:6b:0e:96:07:32:
                    6d:f0:db:bf:ae:ea:2b:26:de:97:71:f5:5e:e4:9c:
                    67:28:68:bc:21:a3:ae:be:64:00:c4:c9:b4:49:88:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:81:44:DF:17:EC:AE:3C:72:A7:92:64:2F:B5:FC:FB:1C:05:BF:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:41:46:d9:bb:ca:05:4f:25:20:6e:7c:e9:40:34:ab:e7:5e:
         26:1e:58:38:3f:dc:24:dd:e9:a5:64:98:e2:99:07:c7:1e:33:
         6d:6d:d9:ed:42:ab:68:9b:97:e3:23:12:8a:cd:bb:46:9d:f8:
         ea:5b:3e:40:4d:aa:d8:95:81:12:d8:86:9b:9d:2c:a3:6f:9c:
         87:43:9a:fa:be:e8:da:00:fe:24:99:98:aa:c4:e4:a6:2b:66:
         1d:e4:8e:27:7a:3f:b2:57:81:bb:93:af:99:b2:2f:03:6c:58:
         39:a5:34:20:1c:ca:15:ae:52:9f:57:a8:4d:a0:ca:de:ac:62:
         e4:8c:cc:bb:d3:c7:cf:21:c2:d3:4f:7f:21:18:9b:55:47:c6:
         d3:13:7f:95:f8:64:20:53:22:a9:5e:11:da:bc:34:22:9e:80:
         fe:b7:5d:a8:89:9c:de:a2:ea:84:fc:ba:00:e2:b0:e7:67:ae:
         71:87:af:00:d6:8a:4e:e9:dc:f7:a9:50:2b:be:c5:24:03:3e:
         3c:a7:0a:e7:70:3c:17:a0:00:d8:76:5b:b0:4a:e7:bb:eb:36:
         0c:d5:b4:f5:f8:49:8f:93:6d:ba:70:ac:c7:08:b2:28:62:9c:
         0c:f9:21:f1:92:44:96:0e:b3:19:eb:1d:d2:db:1e:f9:21:70:
         96:9f:c1:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkXmjLxBs64PlL8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI0MDUxNjEzMDAzNVoXDTI0MDgxNDEzMDAzNVowLzEtMCsGA1UEAxMk
ZjM5NDNjNDEtZDdkNi00YmZkLTllYTItYjU2M2Y5OWY2YjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gWLptL9knlg/1QAJipc5Y3idV2cVt8qXGUj
z567owHBEj5G6hAVIjGjk2HJlWJx7mRT4gS3cU9V5FFGWCgzElCc/NYwjwX3FZO/
NnI7aKJVK4AYtsNPSDGOHkv3AU9DDtjxGTCBlESUl2AcK/jQUl748kYu+j0cI95n
HbR9x1WpGJ6jW6d+/t+mIYOR/vRni3+qkTs/Kq6I75CX6hi9/gVNU70A+Gr+RYcx
wd6A2fZ4z1J3KGdYzyZnOjR6wVhODXcHAfMEuEGj/hMiZ6DQ3yryfaC7NeZrinDE
aw6WBzJt8Nu/ruorJt6XcfVe5JxnKGi8IaOuvmQAxMm0SYgxvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaBRN8X7K48cqeSZC+1/PscBb9mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYWNlZDZjM2MtNTk5ZS0z
ZDVlLThhZDgtYjkyOTE4NTA0ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9BRtm7ygVPJSBufOlANKvnXiYeWDg/3CTd6aVkmOKZB8ceM21t2e1C
q2ibl+MjEorNu0ad+OpbPkBNqtiVgRLYhpudLKNvnIdDmvq+6NoA/iSZmKrE5KYr
Zh3kjid6P7JXgbuTr5myLwNsWDmlNCAcyhWuUp9XqE2gyt6sYuSMzLvTx88hwtNP
fyEYm1VHxtMTf5X4ZCBTIqleEdq8NCKegP63XaiJnN6i6oT8ugDisOdnrnGHrwDW
ik7p3PepUCu+xSQDPjynCudwPBegANh2W7BK57vrNgzVtPX4SY+TbbpwrMcIsihi
nAz5IfGSRJYOsxnrHdLbHvkhcJafwWA=
-----END CERTIFICATE-----
Generated at Mon Jun 17 01:58:28 2024 by rpki-client on console-fra.rpki-client.org