Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa
File:                     420156b9-fed8-3148-a9b6-7f55eba66994.roa (raw, json)
Hash identifier:          iytnpPvxyEB/VhgJjSekQ5omikeZD9d91r+WwjCVOPs=
Subject key identifier:   D5:B9:0E:7B:20:5E:71:0E:ED:E4:70:B0:AA:42:61:D7:FD:8F:E5:F8
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858454F02C272175D8B7F960D4C00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     31898
IP address blocks:        170.114.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c2:72:17:5d:8b:7f:96:0d:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=374d2d5d-05c5-4ed9-86b7-7e6738c76a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:37:07:61:06:98:c2:cf:50:f8:1d:92:4d:
                    40:b0:cd:6b:6a:1e:fb:3d:d9:b0:16:e5:ea:19:c2:
                    5e:43:16:bf:23:d5:1c:bf:43:32:49:4d:e2:4a:74:
                    95:93:be:b0:88:56:df:20:ea:d4:59:53:e2:eb:a8:
                    84:82:7b:32:e8:75:8f:fd:5a:96:94:91:99:50:34:
                    8d:65:ee:f6:b2:3d:d2:65:72:37:12:74:9b:da:0d:
                    e7:73:3f:08:82:5b:3b:a7:da:7d:75:69:f4:c3:04:
                    3a:7d:8d:0d:87:65:d0:ef:23:24:61:dd:dc:58:9b:
                    bc:71:1e:6e:54:15:16:fa:ba:0a:ac:01:77:b2:e7:
                    50:75:f5:4b:94:bf:c8:f1:e4:26:d3:ea:55:c7:71:
                    27:80:73:7d:d2:56:9d:71:0c:bf:b5:52:4f:27:42:
                    2f:2a:13:e1:fb:04:55:ea:f5:5e:62:2c:00:29:70:
                    ea:1b:be:72:48:2e:c5:0c:06:f0:8d:53:78:6b:f0:
                    d4:f7:b4:29:b0:52:ea:4e:dd:b7:7c:4b:de:99:ea:
                    3b:a8:7a:6e:67:49:c5:01:23:50:af:e3:8f:36:06:
                    13:86:8e:29:56:cc:64:83:69:1a:b6:51:18:b4:72:
                    dc:d9:95:c5:14:7e:fe:e6:29:1a:72:01:1d:4b:6f:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:0E:7B:20:5E:71:0E:ED:E4:70:B0:AA:42:61:D7:FD:8F:E5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:be:03:8b:7b:e0:c9:67:ff:5a:01:06:44:3b:5e:99:66:
         81:fb:d1:bc:08:12:af:a2:7f:df:bd:cf:16:67:c4:40:08:27:
         c4:61:6c:a6:b5:3d:df:85:87:41:15:93:53:ea:b7:6e:8f:04:
         67:8c:48:4f:82:e1:2b:e6:52:d5:0b:63:73:61:87:ec:6d:a7:
         59:98:40:ca:d1:0a:90:5a:24:a9:fd:a6:23:1f:31:7b:27:83:
         e9:8d:7c:b9:fb:d6:ea:15:78:46:b3:76:3c:9c:a9:2b:1a:07:
         5a:a2:0d:56:b9:10:9a:cf:17:62:e2:38:8d:53:91:af:a7:3c:
         70:83:49:c1:d8:be:cd:bc:b7:ce:48:08:1f:cf:e7:fa:78:9c:
         37:e2:10:c5:5b:54:1a:9f:37:ca:6f:51:1a:5b:ff:5a:c8:5a:
         f6:91:41:a3:11:3b:b4:3e:a8:6f:b0:94:9a:8e:5d:98:bc:95:
         3a:c5:4d:df:95:b8:66:c4:73:3f:ef:00:88:6f:a5:79:16:49:
         e9:0d:93:75:27:55:7d:64:b5:ee:f6:13:cd:c8:b5:ee:1f:8f:
         ac:7e:1f:a3:9b:bd:34:53:ba:fa:06:1c:30:5c:6e:61:e2:74:
         b1:0d:d8:8b:0b:4e:82:e4:4a:72:ae:91:70:50:a2:14:0d:d4:
         ed:ad:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:10 2024 by rpki-client on console-ams.rpki-client.org