Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa
File:                     2c777c15-0aed-3183-a577-cc62d7729532.roa (raw, json)
Hash identifier:          vbA9hyM4uqzcgf2Lj+9dKZT8L8MUBOG40cggDmrkf8o=
Subject key identifier:   C1:D1:26:61:C9:73:96:E5:6A:A9:7F:88:E4:D2:B9:AC:44:81:58:43
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584765EF3A5BB6F7E64F0D9D3260
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa
Signing time:             Tue 01 Oct 2024 15:38:36 +0000
ROA not before:           Tue 01 Oct 2024 15:38:36 +0000
ROA not after:            Mon 30 Dec 2024 16:38:36 +0000
asID:                     398156
IP address blocks:        168.220.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:ef:3a:5b:b6:f7:e6:4f:0d:9d:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 15:38:36 2024 GMT
            Not After : Dec 30 16:38:36 2024 GMT
        Subject: CN=18a88212-3b41-41eb-974e-e532423c90f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:d5:c1:af:02:ae:e8:9a:83:e0:f7:84:2a:
                    c5:9c:88:af:57:eb:c4:6c:3a:67:0f:3f:65:3f:70:
                    89:b2:d3:38:e5:4f:de:67:19:cf:41:9d:b0:78:5c:
                    1d:35:bf:24:bb:34:5e:a0:d1:90:f4:1e:d6:42:fb:
                    59:81:a6:b1:7c:33:5b:63:13:59:de:ef:05:a3:29:
                    81:b7:4f:b9:72:65:d5:86:95:74:79:c6:9e:aa:3e:
                    d4:a3:bb:4a:1b:60:3d:f9:82:9c:ee:c6:02:dd:e7:
                    26:46:c4:5f:f2:cc:a3:02:0b:f6:f4:b8:d4:ac:e7:
                    6e:56:72:7b:a5:a7:a6:04:0d:aa:f5:f3:f8:bc:f4:
                    47:22:0c:04:ad:80:63:a2:f1:cb:1d:dd:ef:84:cf:
                    74:23:b7:6b:fd:1b:23:7b:d3:e9:7d:df:53:43:74:
                    8e:c8:3e:00:91:11:01:dd:b1:2e:3f:51:3c:69:3a:
                    9a:cc:ca:6b:38:87:34:93:5e:0e:7b:ad:3a:b4:57:
                    0e:66:76:47:3f:12:e0:39:74:56:f7:16:cd:ae:c4:
                    07:77:9a:08:da:df:b3:63:db:b1:82:26:bf:94:33:
                    01:04:1a:43:e7:37:d8:c2:5f:87:e8:6d:76:36:2e:
                    23:28:8e:6c:2a:e0:65:ab:f5:9e:31:3b:a8:cb:dc:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D1:26:61:C9:73:96:E5:6A:A9:7F:88:E4:D2:B9:AC:44:81:58:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:33:6c:e8:f8:5c:2f:35:58:1b:f8:15:92:c2:b5:80:75:
         7c:ae:0c:60:03:7a:1b:53:f4:75:be:06:75:2b:60:6c:52:a3:
         3a:48:b8:32:82:ec:12:5f:ac:da:78:c6:87:b2:20:d3:4f:f8:
         a8:05:32:96:4f:55:fc:cf:e6:1a:32:e7:7d:75:67:81:ff:db:
         9e:bb:ef:2f:42:8f:f0:af:d5:fa:b5:24:fc:89:3d:7a:7b:db:
         db:27:1f:e7:eb:c5:46:6d:fa:20:09:96:17:a1:3a:cb:93:e2:
         7c:5c:c1:5a:41:b8:21:77:01:10:88:a5:ee:11:95:7c:fc:b4:
         5a:83:58:c3:17:43:b3:2b:f9:c2:1c:97:28:ce:71:9c:85:4c:
         f3:8c:bf:d2:a6:0b:cd:4f:c9:15:8b:1d:ee:9b:44:2e:4b:3f:
         09:05:da:de:5b:fc:68:4b:86:da:33:53:d2:d4:28:48:37:54:
         44:d9:54:42:be:e5:12:f1:1c:ed:a1:ba:8e:6c:72:8d:a3:23:
         ef:b1:df:06:69:8b:fe:05:7c:71:8f:36:32:4d:c9:6f:cf:bc:
         77:54:7e:bf:30:a6:0e:47:35:3b:e8:10:93:3d:3e:15:d8:17:
         8c:9d:2a:2b:22:e2:28:85:f8:41:71:cf:2e:6a:ed:30:9e:16:
         4c:dd:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:38 2024 by rpki-client on console-fra.rpki-client.org