Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/06b13455-bec4-392b-b3ed-99b6e2e48afd.roa
File:                     06b13455-bec4-392b-b3ed-99b6e2e48afd.roa (raw, json)
Hash identifier:          xLor3BcVBc8JEA5RFee1LaojH9Gr9GyqfOviuKRZum8=
Subject key identifier:   B6:54:1C:50:81:9C:20:42:4E:3C:A0:74:12:9C:F6:F3:FE:78:BD:57
Certificate issuer:       /CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849
Certificate serial:       010D0C9F432858474FB8366E73BF46D751FCF880
Authority key identifier: 76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/06b13455-bec4-392b-b3ed-99b6e2e48afd.roa
Signing time:             Mon 23 Sep 2024 16:39:58 +0000
ROA not before:           Mon 23 Sep 2024 16:39:58 +0000
ROA not after:            Sun 22 Dec 2024 17:39:58 +0000
asID:                     32867
IP address blocks:        143.223.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:b8:36:6e:73:bf:46:d7:51:fc:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849
        Validity
            Not Before: Sep 23 16:39:58 2024 GMT
            Not After : Dec 22 17:39:58 2024 GMT
        Subject: CN=02f105dd-a6e1-4b88-84cf-62f83c63f594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:21:6f:e0:c7:c6:6b:8d:8f:cd:fd:29:9d:
                    20:65:ba:8e:7a:d0:72:53:ed:33:e5:ae:82:4a:ea:
                    d6:61:ba:25:d0:6b:15:81:b9:2a:dd:da:bf:73:31:
                    56:53:84:9a:eb:8a:a0:ce:ab:e3:70:e7:02:bd:12:
                    03:19:e8:d5:52:6f:e5:f6:a7:e5:48:2e:af:c4:32:
                    66:2f:b4:00:70:20:b4:f6:ff:4b:15:db:62:76:56:
                    b4:dd:b3:b0:55:b4:38:d5:28:39:7f:04:5c:bb:8e:
                    e3:7c:9c:18:9c:82:08:2e:ba:33:65:b2:3e:75:25:
                    cc:ce:69:14:b7:c1:75:55:5c:7f:5e:b7:65:77:6e:
                    78:73:a1:8f:fe:89:b5:b2:3e:86:1c:11:08:6f:eb:
                    18:e6:1b:56:3c:24:4a:f9:af:64:91:c7:9a:5f:c5:
                    a2:df:72:3e:05:a6:00:96:91:94:3e:d0:d5:93:b4:
                    64:70:c5:ef:fb:11:94:01:29:a5:f3:af:f3:b8:7f:
                    89:b7:71:c0:34:cf:da:90:62:80:45:0e:a8:31:bb:
                    f4:3d:b4:4c:63:6a:70:86:13:29:41:3c:68:93:71:
                    ae:50:9c:da:19:80:ce:03:1a:0c:01:f2:81:3d:c5:
                    1c:e4:b3:fe:59:02:31:f9:29:f9:47:81:70:a2:69:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:54:1C:50:81:9C:20:42:4E:3C:A0:74:12:9C:F6:F3:FE:78:BD:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/06b13455-bec4-392b-b3ed-99b6e2e48afd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl

            X509v3 Authority Key Identifier:
                keyid:76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:dc:30:b6:54:2f:68:54:f2:45:c5:c9:77:f8:16:1e:4e:
         65:ad:9f:0d:5c:1e:2f:6a:d2:b9:99:50:08:c4:9d:dd:7a:2a:
         29:db:ea:45:6b:2b:fb:1d:49:55:c7:aa:30:d1:d0:90:bb:e1:
         5a:47:97:5c:74:e3:ed:6a:ac:ce:33:bb:ed:26:c2:85:f1:43:
         59:41:ba:3a:4e:10:20:62:5d:63:92:c4:49:41:68:e2:16:6b:
         24:b9:d3:2c:24:68:86:2b:03:7e:43:a7:39:da:9b:c0:ac:a8:
         ef:59:10:b6:04:0a:15:5e:7c:66:53:fc:02:fb:2b:b1:4c:8b:
         a9:96:51:8a:04:9c:f4:b4:b6:27:75:65:94:f5:fa:72:f6:3e:
         bc:2e:83:99:56:5c:45:34:a2:ed:cd:5d:16:27:65:93:d8:6b:
         45:36:3e:83:ef:37:99:b2:f1:11:fd:dd:89:48:e0:f3:9c:bc:
         b3:86:b0:7e:33:44:46:ec:94:38:01:1e:20:9e:a2:84:9d:ae:
         36:8e:98:a1:fb:0a:ec:08:73:73:4f:0b:f8:25:7a:6d:f1:ab:
         a2:27:18:a6:2b:80:c6:8e:d3:b6:18:50:7d:39:63:9c:37:e3:
         a0:42:a0:7b:6c:4b:11:f5:34:c0:df:3c:37:47:20:b3:bb:96:
         f2:40:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org