Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa
File:                     f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa (raw, json)
Hash identifier:          Wm+P+8XfMUSvOFyfRr1KjR9d48Y0n7w68xJXi/sSvDI=
Subject key identifier:   EA:EF:FA:FF:0B:D0:0E:DF:DF:16:32:EE:E0:02:FB:82:3C:C6:58:10
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F432858474F4B649BC6F4FC770780F780
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     14618
IP address blocks:        143.244.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:64:9b:c6:f4:fc:77:07:80:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=ef908a40-82ae-4f49-9882-59488397c049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:93:95:20:33:bc:11:94:61:44:c0:55:4a:
                    d3:15:82:17:7e:43:f6:9b:cc:2b:a4:41:36:d8:0f:
                    fa:63:71:61:57:8c:bd:eb:9c:cb:5b:1e:dc:29:af:
                    ab:ea:f2:98:ed:84:2f:69:c2:f4:ed:1f:11:2b:fe:
                    1c:23:1f:42:42:da:c4:58:27:7d:6f:17:4e:cf:d5:
                    ad:90:92:d8:14:ed:20:4e:99:a6:c0:56:d4:e1:bb:
                    ec:79:2d:3c:d8:f1:07:ed:7e:81:c7:13:94:db:6b:
                    21:08:43:cf:d4:4c:6c:7d:5b:3a:25:58:93:25:85:
                    5a:3c:5d:a5:17:92:bc:da:e3:7c:4f:4f:4e:d4:b0:
                    b1:47:7c:df:59:d8:c7:5b:3c:12:c1:7f:a5:ef:19:
                    d0:93:d1:e8:29:45:a4:59:18:50:e1:d5:64:08:83:
                    a9:d4:6d:a5:b6:2e:51:7d:3f:dd:53:a8:c6:e4:35:
                    98:2a:e3:f8:ed:41:13:4b:2f:42:64:39:7a:1f:b1:
                    af:49:f2:7f:59:ef:da:9f:35:0f:83:b3:15:42:c7:
                    8c:3b:50:c8:da:83:e9:00:83:e2:76:31:b5:94:b1:
                    42:68:ec:ca:d9:ed:c0:d7:e6:bb:8c:af:64:e2:1c:
                    36:26:d8:95:1c:e7:ee:4a:67:b4:79:ad:cf:b7:a1:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EF:FA:FF:0B:D0:0E:DF:DF:16:32:EE:E0:02:FB:82:3C:C6:58:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:7f:54:45:06:8c:92:d5:69:20:f3:fa:3a:6f:e4:30:45:
         79:e8:cc:dc:64:d2:80:69:bf:25:b6:0e:2a:4c:ff:7c:64:05:
         c4:ec:dd:fa:e0:6c:45:3d:60:a4:ac:d0:ac:8f:b2:8e:00:2f:
         79:5b:0c:16:eb:87:32:8b:68:19:d9:27:1c:da:80:a7:4f:ad:
         da:14:24:f9:3a:6d:85:eb:28:63:68:e8:07:4e:8f:a0:88:2b:
         35:f4:62:8f:54:a4:66:5e:5b:51:23:2b:02:38:1f:c4:27:a6:
         df:0e:62:12:34:49:9c:fd:56:64:e1:ae:6d:b7:3e:14:41:35:
         12:3f:a2:6f:96:35:b3:f8:32:75:7e:5a:cf:ba:66:7a:fc:f0:
         96:72:29:8f:54:7a:82:7d:6f:d8:82:31:f4:15:ee:62:3f:c4:
         4c:1e:10:7b:d6:67:5a:ef:7b:c2:99:c1:52:f5:a9:00:9c:f1:
         82:c7:8e:1f:74:8d:e6:28:8d:9d:12:c7:e3:da:22:c5:24:3c:
         2d:6e:d5:ca:c1:12:42:aa:b1:e6:1a:57:13:0a:85:62:72:ee:
         63:48:39:8f:e0:4c:15:56:9b:42:07:5f:5d:ce:b7:89:74:d2:
         47:53:5b:df:7f:6f:56:da:da:53:6a:ca:27:7b:30:fd:7e:cf:
         6b:0b:9b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:23 2024 by rpki-client on console-ams.rpki-client.org