Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa
File:                     0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa (raw, json)
Hash identifier:          XGBYJfW8ia5hLzdTEjsiKqokchNWn7HoKecYmtT2ZYM=
Subject key identifier:   28:9E:F5:EE:C3:6A:54:39:72:99:4D:D4:DC:6F:65:24:28:A4:DA:44
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584766630DBD67C2EDD7F9423500
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa
Signing time:             Tue 01 Oct 2024 19:31:59 +0000
ROA not before:           Tue 01 Oct 2024 19:31:59 +0000
ROA not after:            Mon 30 Dec 2024 20:31:59 +0000
asID:                     398156
IP address blocks:        168.220.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:63:0d:bd:67:c2:ed:d7:f9:42:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 19:31:59 2024 GMT
            Not After : Dec 30 20:31:59 2024 GMT
        Subject: CN=9376eb9f-52de-44a5-8729-ce616b82684d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fe:75:5b:0d:50:47:0d:bc:50:e0:61:12:66:
                    90:4e:99:ed:3a:32:59:2f:d2:96:d7:f2:99:ab:c9:
                    31:fe:f6:bb:ca:65:ef:62:a9:35:e9:31:18:b7:f8:
                    82:35:b2:32:7f:6b:29:14:d5:d8:c3:a4:39:27:9b:
                    c8:50:a9:ee:50:fd:ac:af:5c:e0:c5:73:39:d8:c1:
                    74:8c:c3:2e:e3:6b:39:c5:fd:bc:08:06:ec:bb:f7:
                    3d:da:95:27:88:93:0c:d4:53:68:da:b1:4b:13:f7:
                    5f:c5:0b:77:d9:82:ec:39:61:19:b2:0d:cd:01:4e:
                    9f:cc:db:d8:1a:8e:8d:96:bd:6e:ff:85:43:f1:bb:
                    04:41:05:51:b6:ac:c4:e4:cf:ce:74:c6:cc:6c:d8:
                    9c:1c:11:04:b8:75:9a:1b:3e:ec:60:91:7f:59:35:
                    3f:2f:10:5f:fe:14:9d:94:72:1b:8d:c6:81:4a:2a:
                    5d:92:50:68:e5:1e:e6:82:c3:9b:ed:ed:29:ac:41:
                    44:7e:08:3b:f0:09:01:99:fb:61:ac:dd:f3:47:c9:
                    45:0b:1c:72:1f:4a:39:89:c9:f7:f7:5a:8c:9d:b0:
                    1a:42:4f:0b:8a:04:ac:46:8d:db:e7:cf:18:97:8b:
                    8a:d3:a5:3e:e2:8d:f9:62:41:1e:1a:b8:da:81:6b:
                    c9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9E:F5:EE:C3:6A:54:39:72:99:4D:D4:DC:6F:65:24:28:A4:DA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:42:4c:38:7f:4d:a0:83:52:42:f9:e0:0d:4d:34:69:24:35:
         9d:97:7b:16:39:2a:42:bc:12:83:26:6b:e7:f6:f1:55:a3:f9:
         fc:f3:78:55:9d:f6:da:0f:f8:13:46:59:f8:24:dc:4a:52:59:
         1a:e8:ab:d0:53:7a:21:2c:a0:1a:13:ad:64:e7:dd:42:1b:ca:
         77:cf:c4:fe:11:28:1d:bb:45:68:cf:ed:b4:a6:2c:ee:07:d3:
         40:e2:c8:50:6f:00:98:fc:f8:be:27:1a:0b:8f:d4:51:0f:70:
         7b:d5:76:41:33:fb:48:27:93:88:ab:5e:73:ee:42:82:18:dc:
         b0:67:12:c5:cc:d7:d4:e5:21:a9:cc:26:e7:46:0c:56:e2:bb:
         c4:3b:a4:6e:c8:fd:05:d7:9a:a9:b6:e2:82:90:35:0e:b7:4c:
         98:f6:94:29:d9:25:77:94:6b:46:3f:8b:df:c2:70:6f:d2:de:
         7c:e4:71:c5:7f:c4:1b:11:5f:66:c0:f8:53:2c:74:4a:1d:ce:
         de:78:72:39:17:8f:a6:e8:43:db:a5:ab:bc:61:44:72:68:48:
         aa:4f:57:90:4e:66:e2:4e:25:ac:4f:86:bc:99:ea:56:51:09:
         d6:a3:45:4a:65:24:17:e8:3d:8d:43:b8:48:f4:2c:89:97:a9:
         e6:fd:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:38 2024 by rpki-client on console-fra.rpki-client.org