Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa
File:                     fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa (raw, json)
Hash identifier:          qwWXNAqz2rvgpuhBuACCfws4B9Tjv0tx/rl3thFrwdY=
Subject key identifier:   C2:A4:9B:07:80:FA:62:8C:7C:50:A8:61:3F:25:E0:84:B9:17:6C:69
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285844E93A9873F86A40C7A2D25300
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa
Signing time:             Fri 16 Feb 2024 14:00:29 +0000
ROA not before:           Fri 16 Feb 2024 14:00:29 +0000
ROA not after:            Thu 16 May 2024 13:00:29 +0000
asID:                     31898
IP address blocks:        158.120.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e9:3a:98:73:f8:6a:40:c7:a2:d2:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 16 14:00:29 2024 GMT
            Not After : May 16 13:00:29 2024 GMT
        Subject: CN=42a2996a-8b06-4568-829f-84ad587f8fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:af:50:f8:ff:4f:a6:19:50:44:f9:8e:aa:
                    6d:2e:01:ed:03:3a:fa:13:35:c8:18:35:eb:ec:0c:
                    c6:96:7f:75:41:44:00:36:9f:8e:90:83:eb:d8:9b:
                    92:12:48:58:4e:34:db:a9:bc:61:0b:b5:7f:dc:fe:
                    3a:19:24:c9:76:ed:05:dd:41:d4:8f:5f:c1:25:05:
                    0a:1f:24:3a:1c:c4:31:2b:00:81:0f:8d:38:31:21:
                    fe:12:8d:17:09:0f:38:35:09:f3:c2:c0:25:7b:50:
                    67:c6:54:f7:fd:76:b2:8b:59:8d:56:05:46:c9:8b:
                    c8:06:30:2b:0e:d7:ea:ac:8f:e5:41:89:4f:51:5a:
                    1e:d2:46:73:3e:a5:b8:8d:4d:80:4d:24:e1:60:d8:
                    cd:27:ca:0f:c3:71:8d:e5:e3:be:d2:5d:d7:23:45:
                    7c:6e:4e:5b:83:2c:23:1d:29:65:15:84:d2:26:c2:
                    af:8f:a8:d4:af:02:94:69:c5:24:c8:b2:59:47:a4:
                    bf:d8:d9:a4:08:6e:7c:5b:36:9d:c4:64:d8:85:ec:
                    99:ef:eb:b3:06:70:45:0e:26:c2:2d:b7:44:8f:da:
                    01:32:f2:2a:b9:9e:6f:07:2b:2c:9a:8c:ee:50:f7:
                    9d:02:5d:1d:24:c7:8f:94:d0:0e:b5:d7:d8:38:62:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A4:9B:07:80:FA:62:8C:7C:50:A8:61:3F:25:E0:84:B9:17:6C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/fafd8ca9-b845-3804-8d42-2f117aa68ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:ac:18:9a:2c:5b:53:28:35:1f:16:df:ea:23:eb:31:57:
         5f:81:3c:b5:0c:1d:29:c8:64:f5:67:b1:d8:a0:d5:55:ad:28:
         a6:9e:4a:26:32:73:8c:91:67:d9:f3:ed:f1:81:f3:87:5e:a9:
         39:b0:c2:65:c4:97:fc:d1:14:f9:13:37:fc:be:4e:5f:f4:2e:
         e3:09:33:4f:b4:06:37:27:b6:aa:fa:fd:88:01:46:1a:43:ce:
         30:02:ee:6d:98:9c:8d:bc:75:c0:76:41:6c:cc:2d:94:81:11:
         ac:d8:cd:15:28:7f:d8:5c:c8:13:28:40:68:38:78:56:32:62:
         a5:bf:44:9a:f5:c1:54:05:f3:e9:c5:7a:03:96:b2:f0:3b:ae:
         bf:b9:33:a9:39:d2:c0:7f:2e:62:6b:2d:ca:01:19:c5:a1:93:
         9e:e3:ed:1f:ba:16:73:ea:d0:11:9e:3f:5f:65:db:f8:b2:69:
         ee:e3:5c:39:b4:39:e6:98:b3:ec:16:ed:5a:df:95:a7:0a:d4:
         1c:2d:2a:bf:31:71:f2:b8:a5:e1:70:22:73:2c:ec:34:98:b9:
         18:4c:e6:59:05:c2:da:3a:0b:40:fc:e8:b2:a1:2f:f7:6f:ba:
         df:d6:b5:73:e5:ce:a1:d2:3f:c1:a4:f7:d2:82:bc:41:e1:af:
         a3:76:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:03 2024 by rpki-client on console-ams.rpki-client.org