Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa
File:                     4d4cab64-b689-363d-b0b6-8347b7102bee.roa (raw, json)
Hash identifier:          bw4JZ5OauGDb4luf/DiWo7bT0vpMu2P8GIFuc0VNryc=
Subject key identifier:   D4:F4:0A:18:23:76:81:06:4A:DA:95:8A:E2:93:76:77:F1:B7:59:0B
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285847669C56B1C5200658DAAE9600
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa
Signing time:             Tue 01 Oct 2024 21:27:24 +0000
ROA not before:           Tue 01 Oct 2024 21:27:24 +0000
ROA not after:            Mon 30 Dec 2024 22:27:24 +0000
asID:                     398156
IP address blocks:        158.120.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:9c:56:b1:c5:20:06:58:da:ae:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 21:27:24 2024 GMT
            Not After : Dec 30 22:27:24 2024 GMT
        Subject: CN=df7c489e-4785-48c5-a65a-c8d6fb9bf64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3c:55:f0:32:5a:c7:b5:1d:da:f4:d8:59:eb:
                    af:95:53:73:82:97:4d:d4:65:99:50:40:e4:20:78:
                    b9:72:55:ee:8c:d7:6d:1a:33:2c:7b:ed:98:8a:09:
                    cb:08:db:27:5c:bc:5f:31:90:32:2d:91:f4:6d:b4:
                    5e:a4:62:45:a2:c9:64:77:a9:b5:57:4a:24:7f:5a:
                    a6:59:dc:ea:3a:62:2a:0c:c0:74:1d:a0:07:42:59:
                    10:e3:bc:27:3b:d0:17:71:19:e0:f8:16:f2:3c:57:
                    4c:95:09:c4:b0:e2:c7:2e:ff:7e:d1:51:9c:02:43:
                    9d:07:3b:a1:d0:bd:47:69:43:4e:97:34:9b:9a:80:
                    63:c6:5b:3a:a3:06:2a:8a:87:1f:73:ac:75:86:5f:
                    c3:c2:4c:b3:40:57:ca:dd:2c:d1:17:39:b8:0c:21:
                    17:11:6e:b2:2e:94:94:ae:8e:92:f6:eb:92:1c:11:
                    6d:2f:50:4b:ba:47:f7:48:e7:c1:43:e5:5d:c1:e9:
                    b6:56:ee:f8:5b:5e:f9:a4:ed:14:53:b3:b8:9c:11:
                    89:e2:46:47:d5:6a:4c:b7:5a:46:49:58:ed:c6:64:
                    cc:b4:33:ea:a9:a0:73:21:60:5d:b4:b7:9c:30:36:
                    a5:95:a1:c1:42:28:28:94:16:2e:e8:dd:7f:4d:b9:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F4:0A:18:23:76:81:06:4A:DA:95:8A:E2:93:76:77:F1:B7:59:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:cc:03:89:fa:32:77:47:63:a4:fa:41:a8:c4:67:ef:f9:91:
         2f:8c:8f:94:74:da:d5:2c:d2:15:62:8e:ab:53:ab:15:8c:15:
         62:d6:91:96:6c:a3:52:13:57:42:22:15:5d:1c:d1:68:83:e6:
         6f:67:9a:7d:bd:91:f3:e0:b9:95:ea:a1:a2:6c:ef:f8:e8:1b:
         da:76:83:db:83:21:70:2a:5a:53:38:dc:ab:e0:84:a4:13:b4:
         76:85:38:d0:da:dc:dc:71:76:4b:2e:30:15:14:26:f2:b3:d8:
         01:fa:ca:6d:78:88:d2:dd:e9:45:a9:59:a7:2e:fd:68:8b:49:
         1e:57:cf:8c:0e:bc:75:c0:a0:f8:6e:36:35:b5:95:d3:0f:1c:
         e0:d6:22:0e:59:77:5c:58:8f:67:ea:43:9c:e6:8c:8f:27:8c:
         02:c9:8a:9d:f1:64:93:13:66:a6:53:a3:a9:00:49:ba:13:52:
         46:1b:39:c7:99:94:2d:92:23:64:66:af:6b:b4:6f:2a:f8:a1:
         90:ab:78:f8:15:62:0f:b4:6e:ef:4d:f0:37:b8:d5:1e:7b:f2:
         45:63:7e:63:7e:3d:c1:f0:8e:a0:e4:e7:1b:c9:04:5e:6e:ec:
         7c:8b:47:b1:cd:f8:70:34:d8:3f:5b:3a:32:3f:69:d3:a6:bf:
         55:38:8b:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmnFaxxSAGWNqulgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI0MTAwMTIxMjcyNFoXDTI0MTIzMDIyMjcyNFowLzEtMCsGA1UEAxMk
ZGY3YzQ4OWUtNDc4NS00OGM1LWE2NWEtYzhkNmZiOWJmNjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDxV8DJax7Ud2vTYWeuvlVNzgpdN1GWZUEDk
IHi5clXujNdtGjMse+2YignLCNsnXLxfMZAyLZH0bbRepGJFoslkd6m1V0okf1qm
WdzqOmIqDMB0HaAHQlkQ47wnO9AXcRng+BbyPFdMlQnEsOLHLv9+0VGcAkOdBzuh
0L1HaUNOlzSbmoBjxls6owYqiocfc6x1hl/DwkyzQFfK3SzRFzm4DCEXEW6yLpSU
ro6S9uuSHBFtL1BLukf3SOfBQ+Vdwem2Vu74W175pO0UU7O4nBGJ4kZH1WpMt1pG
SVjtxmTMtDPqqaBzIWBdtLecMDallaHBQigolBYu6N1/TbkzSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNT0ChgjdoEGStqViuKTdnfxt1kLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNGQ0Y2FiNjQtYjY4OS0z
NjNkLWIwYjYtODM0N2I3MTAyYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7MA4n6MndHY6T6QajEZ+/5kS+Mj5R02tUs0hVijqtTqxWMFWLWkZZs
o1ITV0IiFV0c0WiD5m9nmn29kfPguZXqoaJs7/joG9p2g9uDIXAqWlM43KvghKQT
tHaFONDa3NxxdksuMBUUJvKz2AH6ym14iNLd6UWpWacu/WiLSR5Xz4wOvHXAoPhu
NjW1ldMPHODWIg5Zd1xYj2fqQ5zmjI8njALJip3xZJMTZqZTo6kASboTUkYbOceZ
lC2SI2Rmr2u0byr4oZCrePgVYg+0bu9N8De41R578kVjfmN+PcHwjqDk5xvJBF5u
7HyLR7HN+HA02D9bOjI/adOmv1U4i38=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org