Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa
File:                     3c70d43d-85bd-39c4-974b-b26dc07b9073.roa (raw, json)
Hash identifier:          rxxzHHU8fbT0BE6flyUGXsLAaLZhFeYaTK9jc+YRdNU=
Subject key identifier:   05:3C:60:84:C1:E7:BB:BD:BD:F1:F8:29:C2:28:8B:5C:3B:97:58:BE
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285847661235F36DA5DDF776718340
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa
Signing time:             Tue 01 Oct 2024 16:49:06 +0000
ROA not before:           Tue 01 Oct 2024 16:49:06 +0000
ROA not after:            Mon 30 Dec 2024 17:49:06 +0000
asID:                     398156
IP address blocks:        168.220.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:12:35:f3:6d:a5:dd:f7:76:71:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 16:49:06 2024 GMT
            Not After : Dec 30 17:49:06 2024 GMT
        Subject: CN=eac1069a-5a73-4213-9bae-d3bda554d8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:4e:b5:2d:f6:ae:8e:8c:45:42:b5:91:7b:
                    2c:e0:b3:b4:66:a3:7d:2d:f0:fb:c7:e2:1d:10:ac:
                    db:7e:f1:c7:f6:c5:c7:fa:27:62:71:f1:19:b9:de:
                    85:64:14:9a:0e:67:78:23:47:3c:9b:d2:be:92:97:
                    9c:8e:7c:f5:9f:e6:b2:0a:50:37:ad:fb:e4:ab:f4:
                    95:15:4f:34:2d:d1:e6:9b:33:20:6b:d3:12:9d:85:
                    51:79:53:8f:3d:21:de:94:57:f8:b5:40:f6:d2:6e:
                    1a:74:ae:83:3d:1a:9f:ac:ab:be:16:3a:d7:30:4c:
                    1c:12:5d:7e:62:34:90:26:ad:ed:2e:be:76:55:0c:
                    7e:5f:26:93:97:d0:74:8f:72:b4:b2:af:18:f6:6e:
                    d7:9a:31:67:27:07:5f:b3:dc:5b:dc:dc:23:0e:d4:
                    2c:60:43:31:a0:17:cd:03:6b:c6:d0:9c:de:a2:e3:
                    66:ed:b6:b1:d0:4d:c4:e1:ed:f0:f2:af:09:15:ef:
                    64:8f:40:50:4e:a8:03:fe:f0:75:8c:a6:f1:c9:b1:
                    1b:4f:2d:a8:68:cf:20:82:f2:47:ab:f1:a9:9d:49:
                    cb:af:31:db:b1:0c:6f:d1:01:62:04:32:5f:6b:ad:
                    f2:da:27:0f:2d:03:04:b7:7f:78:50:35:92:1e:d7:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:60:84:C1:E7:BB:BD:BD:F1:F8:29:C2:28:8B:5C:3B:97:58:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:c6:b2:b0:bc:b3:4b:c4:c9:76:df:e7:64:5c:05:a6:14:
         ce:97:43:63:31:ca:e3:ae:50:e1:42:76:31:ff:ed:8c:9f:11:
         fc:ed:fd:ae:44:82:22:36:3d:d9:f8:18:78:8c:0a:8d:d4:da:
         33:eb:3d:53:f9:fb:6a:fc:ea:2e:11:27:2d:da:f2:9c:37:bd:
         ba:92:a1:d1:81:81:d2:25:e5:fb:d0:b0:d0:19:c9:24:b9:73:
         57:50:d4:68:97:f7:9b:8f:25:4a:83:dc:23:da:0f:a8:a9:96:
         c6:3d:d9:78:c8:38:23:19:9e:9a:8d:22:3d:42:1c:ab:8d:ba:
         e9:3a:9d:12:f0:79:cd:93:86:71:61:79:03:dc:0c:4b:5b:a1:
         2c:12:f8:dc:ff:40:0e:88:a3:7d:81:e6:e0:9d:77:47:75:8a:
         d6:8c:6d:a3:c5:ed:18:9e:c1:e6:d1:4a:d2:3a:38:5e:12:cc:
         9d:ec:58:86:74:40:7f:bb:e4:8f:5b:ec:1a:82:32:6d:c9:9c:
         ad:39:9b:42:22:1f:96:27:76:47:b7:26:d2:79:bf:a1:4d:8b:
         b0:3c:f2:a7:cd:4f:29:df:54:52:df:db:47:d3:50:6f:6a:5f:
         b1:d8:13:11:42:4d:9a:8c:9a:96:e4:ac:17:a1:ea:ab:c1:0c:
         16:f4:4a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org