Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/41ca8484-ee5e-3e68-86b3-0edd089e66b0.roa
File:                     41ca8484-ee5e-3e68-86b3-0edd089e66b0.roa (raw, json)
Hash identifier:          LHwUSkVV98Ny/zhj9Trbil7lJNlJWFM2AZ+TByrIXF8=
Subject key identifier:   C6:AD:E8:AB:1C:C3:7C:64:B6:5E:E4:22:D8:3C:B8:F0:0A:46:3F:D7
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584766A380E8831DF8D3DE9387C0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/41ca8484-ee5e-3e68-86b3-0edd089e66b0.roa
Signing time:             Tue 01 Oct 2024 21:41:50 +0000
ROA not before:           Tue 01 Oct 2024 21:41:50 +0000
ROA not after:            Mon 30 Dec 2024 22:41:50 +0000
asID:                     398156
IP address blocks:        158.120.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:a3:80:e8:83:1d:f8:d3:de:93:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 21:41:50 2024 GMT
            Not After : Dec 30 22:41:50 2024 GMT
        Subject: CN=db11db7a-abf1-4090-8dad-63729b816526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:70:06:bd:b8:24:ad:e8:05:08:8f:47:e4:c8:
                    b0:98:73:d6:00:b6:ed:94:a4:c8:c2:89:8b:7a:72:
                    ca:85:17:ff:6d:76:7a:dd:82:64:06:c1:22:67:fe:
                    fe:32:df:b8:2c:a1:33:97:f0:bd:7f:99:92:b8:76:
                    c4:e3:6b:7a:1a:ee:83:4c:c5:ab:34:a9:5d:c4:fc:
                    0f:9b:14:1a:d7:65:ae:fc:32:79:1c:a1:a6:7c:56:
                    95:e7:c3:fa:a6:50:c7:41:b5:60:54:0d:c5:14:6a:
                    8d:c5:9d:3b:16:f1:42:42:11:57:df:b4:5a:89:8d:
                    bc:39:af:55:df:e9:6c:b6:21:49:37:9a:6c:f8:50:
                    86:eb:02:be:ef:94:c4:11:43:03:d4:86:7a:8e:32:
                    86:23:6c:06:78:26:c9:89:e2:10:22:3a:df:32:4e:
                    38:2e:d6:e8:95:0b:85:07:15:20:ce:19:49:43:99:
                    e4:28:7a:2f:0c:64:4d:f1:e5:46:7b:32:15:ee:5f:
                    98:2c:94:fe:ed:d7:e6:1b:92:dd:02:f4:0d:22:d0:
                    11:14:91:0f:9b:2b:8d:1d:31:8b:1c:8f:45:16:6d:
                    ac:06:6a:19:21:0c:88:fa:d8:06:84:e2:30:38:f1:
                    cc:c4:a5:15:02:89:65:23:60:8d:1f:a7:2c:d2:18:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AD:E8:AB:1C:C3:7C:64:B6:5E:E4:22:D8:3C:B8:F0:0A:46:3F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/41ca8484-ee5e-3e68-86b3-0edd089e66b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ee:1c:54:af:fb:20:69:f4:74:e7:a0:a4:0b:cf:bd:b9:87:
         d1:43:09:f2:16:93:9b:05:b7:0c:13:16:42:90:a0:e0:7a:d7:
         f6:30:f1:50:bb:e6:38:80:f8:88:b8:01:36:ba:d7:23:28:4f:
         ff:48:9e:e7:f9:3c:13:b9:59:41:16:30:d7:28:d5:d8:d5:2d:
         17:a3:e8:76:66:82:3d:e5:a2:6e:2d:54:15:63:aa:a0:f5:4b:
         1b:d9:6e:f3:be:93:48:20:95:49:e5:2c:ed:5d:9e:b3:13:cc:
         34:85:9d:a9:02:1e:4c:9b:76:38:dc:53:26:ea:aa:dc:cd:36:
         35:55:cd:33:01:54:6d:ba:d7:51:27:a4:63:22:97:a5:e3:bd:
         ef:ed:c9:2f:42:02:26:01:81:75:25:10:89:f5:0c:5c:42:45:
         e3:e6:44:d0:9e:52:e6:97:c3:a3:85:4b:59:a8:82:6c:e1:28:
         11:70:75:a5:d1:8b:df:1b:bf:f6:73:15:f9:a8:13:f7:01:48:
         58:ef:4b:d7:e6:93:04:04:c0:57:b8:57:e3:42:91:79:ab:be:
         41:5d:80:72:dd:4b:94:7c:11:d2:64:88:f4:5c:5a:00:84:d0:
         76:26:b6:ea:a5:17:f5:35:a4:97:70:2a:85:e0:a4:39:0a:b3:
         18:b5:ca:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmo4Dogx34096Th8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI0MTAwMTIxNDE1MFoXDTI0MTIzMDIyNDE1MFowLzEtMCsGA1UEAxMk
ZGIxMWRiN2EtYWJmMS00MDkwLThkYWQtNjM3MjliODE2NTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnAGvbgkregFCI9H5MiwmHPWALbtlKTIwomL
enLKhRf/bXZ63YJkBsEiZ/7+Mt+4LKEzl/C9f5mSuHbE42t6Gu6DTMWrNKldxPwP
mxQa12Wu/DJ5HKGmfFaV58P6plDHQbVgVA3FFGqNxZ07FvFCQhFX37RaiY28Oa9V
3+lstiFJN5ps+FCG6wK+75TEEUMD1IZ6jjKGI2wGeCbJieIQIjrfMk44LtbolQuF
BxUgzhlJQ5nkKHovDGRN8eVGezIV7l+YLJT+7dfmG5LdAvQNItARFJEPmyuNHTGL
HI9FFm2sBmoZIQyI+tgGhOIwOPHMxKUVAollI2CNH6cs0hjCwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMat6Kscw3xktl7kItg8uPAKRj/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNDFjYTg0ODQtZWU1ZS0z
ZTY4LTg2YjMtMGVkZDA4OWU2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvuHFSv+yBp9HTnoKQLz725h9FDCfIWk5sFtwwTFkKQoOB61/Yw8VC7
5jiA+Ii4ATa61yMoT/9Inuf5PBO5WUEWMNco1djVLRej6HZmgj3lom4tVBVjqqD1
SxvZbvO+k0gglUnlLO1dnrMTzDSFnakCHkybdjjcUybqqtzNNjVVzTMBVG2611En
pGMil6Xjve/tyS9CAiYBgXUlEIn1DFxCRePmRNCeUuaXw6OFS1mogmzhKBFwdaXR
i98bv/ZzFfmoE/cBSFjvS9fmkwQEwFe4V+NCkXmrvkFdgHLdS5R8EdJkiPRcWgCE
0HYmtuqlF/U1pJdwKoXgpDkKsxi1ysY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org