Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/22602df3-16e2-3987-a89a-fec985b84c16.roa
File:                     22602df3-16e2-3987-a89a-fec985b84c16.roa (raw, json)
Hash identifier:          lMGgiF0qLZN7/VSbrR+aQwSmZDdCcFhriIxEgTVANLA=
Subject key identifier:   CA:13:1F:05:55:87:12:9B:8D:94:52:2B:E8:95:02:57:66:C9:A2:CD
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285844EC054DCF6ADDAA8036148500
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/22602df3-16e2-3987-a89a-fec985b84c16.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     31898
IP address blocks:        158.120.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:4d:cf:6a:dd:aa:80:36:14:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=eb89654c-1aa0-4d00-8ba0-90d7adbc62ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:6d:34:e9:7a:25:06:8e:df:2a:19:76:b4:
                    eb:17:40:fb:fb:18:52:59:09:b3:29:2c:a1:de:4b:
                    d4:72:73:01:f8:9e:92:78:be:f4:f2:57:2a:68:ff:
                    30:7c:e3:07:e7:f8:e5:dd:89:64:54:b4:72:f0:45:
                    ca:c1:12:f4:24:a7:76:5b:94:2c:2a:8e:eb:79:71:
                    b5:2f:c6:82:5e:ad:17:bd:c5:ba:41:cf:a3:e5:2c:
                    b1:3a:99:38:bc:9b:1d:da:2c:cd:25:38:d7:78:1a:
                    4b:f6:db:dc:34:fe:c5:e9:42:50:2c:32:31:91:95:
                    dc:d9:bf:14:bf:1d:22:0a:c9:7c:47:e6:78:e9:b3:
                    22:80:63:ae:db:1c:7c:1f:79:98:ee:d2:a2:c6:15:
                    e3:8d:a7:da:d4:72:5f:99:5a:d1:f5:db:ad:54:f5:
                    c1:c4:ba:a3:97:48:cc:e0:86:ba:57:73:96:34:7a:
                    2f:8d:b4:49:13:f5:42:18:be:6b:82:24:1b:fc:17:
                    1a:75:b1:6a:7b:26:fc:1f:44:c1:ce:09:f9:16:26:
                    43:47:e2:9a:50:92:37:3a:be:45:4c:ef:cd:01:bb:
                    e8:05:08:32:15:15:e2:87:d1:74:99:19:88:c4:32:
                    69:e3:95:15:b5:0c:9e:a9:60:03:9f:9e:8e:7a:ec:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:13:1F:05:55:87:12:9B:8D:94:52:2B:E8:95:02:57:66:C9:A2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/22602df3-16e2-3987-a89a-fec985b84c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a7:68:df:76:13:0e:13:6c:63:d4:52:0b:d8:27:cb:52:8e:
         eb:9d:57:26:6f:91:2b:ac:43:70:14:d0:74:72:88:1c:b8:39:
         1d:7b:af:02:c9:de:62:d9:ae:02:a9:f9:c1:e7:82:f6:38:ca:
         52:fb:e3:29:41:51:ef:5a:ec:ec:fc:87:41:04:a0:23:cf:de:
         23:48:3b:8b:da:16:65:dc:15:52:b0:9c:d5:f1:20:79:6a:b1:
         e3:46:04:7a:f6:57:be:81:ef:a1:c8:c3:01:d6:3d:97:e5:5e:
         34:1d:77:5c:c1:72:79:1b:9b:36:cd:c1:73:eb:ac:f0:dd:3e:
         8d:ef:79:53:36:6a:dd:df:2f:5a:46:b4:ae:0d:fa:a3:30:18:
         0e:14:52:72:4b:65:16:f2:5f:92:fa:41:a1:da:fc:ee:11:7b:
         36:09:d3:4f:da:28:67:74:b0:b2:03:70:6a:60:29:cb:40:94:
         d2:f8:7c:ad:91:fc:71:52:4e:6e:44:bd:44:b6:49:44:20:14:
         11:78:9e:8a:ed:8a:26:07:c2:98:40:24:18:40:38:15:42:9f:
         b1:21:6d:f3:7b:aa:cc:f2:f3:ef:c7:92:a9:05:a5:55:a7:50:
         44:a9:e2:e0:e2:8f:93:7a:b2:38:a4:79:92:01:21:1f:e9:88:
         44:82:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org