Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa
File:                     6bf652f0-96db-31c2-820e-46026e39ff44.roa (raw, json)
Hash identifier:          oe6HLVFJewcAlFVr4Q+bn3XEe1HVJ5J+b+Vh+JTC51A=
Subject key identifier:   BE:0E:52:62:87:D5:6C:AC:FE:6A:04:A8:46:31:88:9D:26:9C:F3:A9
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285844EECFFE2C014987922B605240
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     31898
IP address blocks:        158.120.28.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:fe:2c:01:49:87:92:2b:60:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=c1cd6ab7-8ce2-4fbd-b743-3297a416762b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:d7:2b:3b:e6:3a:4b:e4:10:e9:69:49:93:
                    74:f0:3a:e8:42:f4:e0:52:c8:e3:f2:cd:27:8a:ad:
                    93:df:a6:01:30:39:6f:fa:d0:8f:47:c6:80:b3:ac:
                    b1:3f:01:d8:02:dc:a6:c8:a8:59:0c:38:9f:57:c1:
                    41:3a:f0:92:2b:30:ea:a7:ec:c8:e3:b3:26:07:e8:
                    25:3a:91:8e:36:68:39:9e:bd:8b:d0:95:87:1e:db:
                    92:92:1c:d0:2a:21:ba:45:f2:84:45:76:aa:ee:3f:
                    fb:25:31:29:df:66:8b:4a:be:39:38:9f:a3:c6:73:
                    34:2a:4f:4c:08:f6:fb:1b:bd:c7:9c:ae:47:bb:ca:
                    1e:28:fe:29:f6:51:11:83:cf:c0:82:fe:c7:3b:e3:
                    15:7b:aa:eb:ad:9a:15:43:b6:bc:ff:f6:f9:47:d5:
                    ff:ec:23:14:7d:11:18:17:04:64:11:15:c2:8e:91:
                    c5:49:5a:45:00:63:f0:fb:47:d7:f8:51:69:9f:75:
                    db:13:e6:92:97:96:07:6c:a2:a9:2b:5e:e4:2e:55:
                    c7:02:f7:4a:54:b3:8c:72:8b:5c:d3:f8:71:de:9a:
                    11:64:34:6c:f6:5c:70:85:71:ca:b8:f0:f3:6b:af:
                    14:46:b1:2b:8a:1e:ac:c2:30:a4:6c:88:3f:58:51:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:52:62:87:D5:6C:AC:FE:6A:04:A8:46:31:88:9D:26:9C:F3:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:9d:30:42:59:02:16:95:f2:54:b7:2a:39:a3:38:51:38:a5:
         46:c1:e7:cf:ae:53:bb:e9:66:a3:8b:5c:f2:e7:98:48:b5:43:
         4b:47:45:8d:dc:3c:39:d8:5b:12:e5:7b:ef:a1:4b:48:8f:8f:
         d3:0b:48:fa:09:d7:31:55:4d:00:50:f1:0c:ea:17:03:09:df:
         29:aa:4b:0d:3f:fe:22:86:92:bd:b3:57:f0:39:b8:99:2c:16:
         1a:58:ab:87:fd:9e:bf:f0:04:8e:0e:f1:b1:93:30:e5:72:97:
         0d:5d:40:56:2a:b8:09:63:bd:aa:d0:91:27:f9:83:98:4e:88:
         2a:cc:3c:87:82:53:f4:a5:d0:f3:0d:6b:7a:b0:41:61:41:cb:
         0a:b3:b4:32:7d:57:4c:88:7b:41:20:ea:b5:8d:99:ca:6b:3c:
         7f:ea:bf:c4:be:da:a4:70:11:4c:72:6d:f9:0c:10:95:a3:07:
         3c:43:7d:45:a1:a1:c3:75:76:88:e9:b5:de:de:de:7b:02:68:
         62:00:cf:43:8f:cb:0a:1b:28:65:10:2d:32:a6:a6:86:ab:6f:
         91:e6:a8:8e:b0:b0:55:f9:e4:d2:da:0d:a6:69:bd:44:e7:52:
         16:bf:73:4f:5b:0a:65:ae:44:26:5a:3d:47:db:ee:10:f7:13:
         d2:b3:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:03 2024 by rpki-client on console-ams.rpki-client.org