Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f61e94de-7105-3fa7-a871-a55da2b807d1.roa
File:                     f61e94de-7105-3fa7-a871-a55da2b807d1.roa (raw, json)
Hash identifier:          ancPthG/BRiEkN3lmU1oQInC77kLHtuA8UUdA5VVYBo=
Subject key identifier:   F7:4E:3B:96:60:0C:57:89:7F:66:14:4F:29:FC:75:76:FB:D9:F2:D6
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285844EC054DE73FDE12301FF22580
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f61e94de-7105-3fa7-a871-a55da2b807d1.roa
Signing time:             Sat 17 Feb 2024 14:00:30 +0000
ROA not before:           Sat 17 Feb 2024 14:00:30 +0000
ROA not after:            Fri 17 May 2024 13:00:30 +0000
asID:                     31898
IP address blocks:        158.120.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ec:05:4d:e7:3f:de:12:30:1f:f2:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 17 14:00:30 2024 GMT
            Not After : May 17 13:00:30 2024 GMT
        Subject: CN=eeb826f1-d061-4c66-ad2a-046dc9c76578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5f:21:2e:dc:86:29:5f:45:e2:ec:19:19:52:
                    2b:a6:dd:c8:67:4f:ad:d4:3e:80:62:51:8a:44:31:
                    16:ad:72:1e:76:80:86:e8:af:94:97:d9:41:51:01:
                    bb:16:b2:d0:08:9e:56:f0:f3:66:f0:b8:07:d8:fc:
                    5c:13:8a:10:92:96:b4:c1:be:5b:51:4b:c3:a8:48:
                    b8:21:7f:b7:bc:ca:96:fd:7f:f5:20:78:b7:7e:dd:
                    20:b4:e4:57:93:18:50:1c:73:31:38:bd:bc:1d:87:
                    7e:23:91:19:6c:2a:e3:fc:f6:a8:e5:f5:15:6b:8c:
                    fb:93:37:ef:c3:ed:09:9e:22:f7:1e:f4:da:67:7e:
                    38:dd:45:b6:08:04:34:5d:1f:e1:58:e7:34:5b:a0:
                    af:0f:f0:7d:16:14:73:79:b1:21:6f:bd:0a:0c:62:
                    eb:cf:4a:5c:1e:c2:c5:ab:cb:dc:2a:58:fd:41:0e:
                    6e:09:bc:9d:57:2c:89:e1:e9:a1:a2:45:d7:f2:3e:
                    f1:06:f0:fe:7f:72:b6:58:f8:20:03:54:85:7a:bf:
                    6f:9d:28:31:b1:32:06:5b:4f:ef:94:f7:c6:e5:58:
                    87:eb:8b:ad:9e:79:d9:f1:70:78:15:4a:c5:07:ce:
                    7e:24:ee:b3:e1:91:a7:c7:b6:23:e1:d6:e8:5d:9c:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:3B:96:60:0C:57:89:7F:66:14:4F:29:FC:75:76:FB:D9:F2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f61e94de-7105-3fa7-a871-a55da2b807d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:60:8b:e8:22:2f:3a:53:18:11:59:cb:62:6e:91:2a:00:d8:
         a5:a4:e1:b0:83:8f:11:1e:a5:f3:c8:d1:ed:d1:b7:dc:14:70:
         31:3d:7c:e0:49:30:6a:65:6d:25:83:ac:3d:05:c2:3b:94:94:
         83:5a:50:90:42:a6:28:83:b7:a1:a0:fc:ff:08:83:e4:25:1c:
         8a:6f:b1:aa:a7:7b:cd:ed:a3:45:5a:62:71:19:99:18:71:3f:
         fd:bc:70:cd:ad:e2:50:44:a1:e6:2f:39:c7:a2:6c:7d:82:57:
         5d:73:f4:0f:f8:8a:e0:b9:4f:54:23:02:64:f9:96:63:64:93:
         8f:f2:8f:f2:c1:34:27:71:3b:fb:ef:a8:b0:d7:bb:4f:e9:b8:
         6e:5b:71:c8:9e:a6:67:f2:58:5c:ba:6f:b3:69:fa:85:09:ab:
         91:ce:14:ad:71:98:e6:e2:08:1c:d2:2d:81:04:62:d2:bb:28:
         e1:ad:53:46:14:b5:aa:05:26:98:d8:90:e9:72:f7:3d:2b:8a:
         29:f4:ce:f9:1d:92:4d:1d:a5:1b:1a:e8:e8:e7:87:5b:d8:47:
         de:e1:96:ad:94:85:0c:7b:53:e7:a7:0f:4a:22:ad:10:92:ae:
         9d:48:65:9f:0c:b9:21:58:e1:73:9b:6c:e4:9d:b3:3a:9d:aa:
         ad:75:a1:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETsBU3nP94SMB/yJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI0MDIxNzE0MDAzMFoXDTI0MDUxNzEzMDAzMFowLzEtMCsGA1UEAxMk
ZWViODI2ZjEtZDA2MS00YzY2LWFkMmEtMDQ2ZGM5Yzc2NTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA318hLtyGKV9F4uwZGVIrpt3IZ0+t1D6AYlGK
RDEWrXIedoCG6K+Ul9lBUQG7FrLQCJ5W8PNm8LgH2PxcE4oQkpa0wb5bUUvDqEi4
IX+3vMqW/X/1IHi3ft0gtORXkxhQHHMxOL28HYd+I5EZbCrj/Pao5fUVa4z7kzfv
w+0JniL3HvTaZ3443UW2CAQ0XR/hWOc0W6CvD/B9FhRzebEhb70KDGLrz0pcHsLF
q8vcKlj9QQ5uCbydVyyJ4emhokXX8j7xBvD+f3K2WPggA1SFer9vnSgxsTIGW0/v
lPfG5ViH64utnnnZ8XB4FUrFB85+JO6z4ZGnx7Yj4dboXZwEewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdOO5ZgDFeJf2YUTyn8dXb72fLWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZjYxZTk0ZGUtNzEwNS0z
ZmE3LWE4NzEtYTU1ZGEyYjgwN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnngeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMJgi+giLzpTGBFZy2JukSoA2KWk4bCDjxEepfPI0e3Rt9wUcDE9fOBJ
MGplbSWDrD0FwjuUlINaUJBCpiiDt6Gg/P8Ig+QlHIpvsaqne83to0VaYnEZmRhx
P/28cM2t4lBEoeYvOceibH2CV11z9A/4iuC5T1QjAmT5lmNkk4/yj/LBNCdxO/vv
qLDXu0/puG5bcciepmfyWFy6b7Np+oUJq5HOFK1xmObiCBzSLYEEYtK7KOGtU0YU
taoFJpjYkOly9z0riin0zvkdkk0dpRsa6Ojnh1vYR97hlq2UhQx7U+enD0oirRCS
rp1IZZ8MuSFY4XObbOSdszqdqq11oQM=
-----END CERTIFICATE-----
Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org