Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa
File:                     56e77077-485f-3fa0-ac2f-5f511c9a284b.roa (raw, json)
Hash identifier:          hkUOZOM3r//bqRXv0TLTKE/MSFF7ygNyJbGMK8h0if8=
Subject key identifier:   7B:64:84:9A:B1:9F:06:72:35:61:66:2F:80:19:6C:5E:22:0E:77:EB
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285847665C7C552E4736C17634B790
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa
Signing time:             Tue 01 Oct 2024 19:18:45 +0000
ROA not before:           Tue 01 Oct 2024 19:18:45 +0000
ROA not after:            Mon 30 Dec 2024 20:18:45 +0000
asID:                     398156
IP address blocks:        168.220.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:5c:7c:55:2e:47:36:c1:76:34:b7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 19:18:45 2024 GMT
            Not After : Dec 30 20:18:45 2024 GMT
        Subject: CN=a9cbe6da-1a67-4328-a4fe-6184716e3c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:81:75:88:6d:4d:33:32:6d:89:42:fc:20:
                    1f:79:58:49:00:42:05:99:82:48:72:ee:de:41:f6:
                    1e:fb:94:3d:7d:70:4b:3f:04:c2:c4:e0:81:92:f9:
                    ec:8c:a4:55:c3:a9:cc:37:1a:15:8f:82:4d:4d:92:
                    79:20:29:58:83:57:7f:34:76:ac:98:ef:a4:9c:ae:
                    cf:33:34:5e:f9:a7:4f:16:f6:28:ee:10:ca:a2:b1:
                    c1:b7:62:a9:a6:0f:b1:cf:ae:73:d9:16:5e:7b:22:
                    15:20:95:d7:ac:ea:15:1c:b3:02:78:df:58:39:be:
                    c6:ef:64:3c:84:a0:44:74:13:16:8e:62:34:e4:15:
                    09:d1:66:6b:28:eb:99:33:89:8a:b3:3c:a2:65:e7:
                    7a:d8:66:c8:fc:8b:f8:dc:4a:ab:bb:2b:c5:b9:c4:
                    75:e2:40:3e:5c:20:19:51:3d:af:cf:a9:fa:9e:6a:
                    19:25:12:a5:4e:79:27:95:80:6d:f5:e9:af:6a:7d:
                    4c:df:06:36:28:b6:5a:49:8c:91:1d:d9:08:c7:9c:
                    c5:aa:84:08:b2:fa:ec:6f:36:6f:44:3f:c4:41:6a:
                    8b:9f:6f:8d:8a:00:36:42:35:25:5c:a5:34:d9:50:
                    02:de:8b:bf:dc:49:19:9f:a1:18:05:e7:ac:37:94:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:64:84:9A:B1:9F:06:72:35:61:66:2F:80:19:6C:5E:22:0E:77:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:01:8d:11:4a:43:e9:80:34:fd:8c:4d:65:5f:25:8f:4b:bf:
         8a:20:99:4f:fd:a3:c4:e1:bc:62:01:66:7c:ea:c1:5e:5a:5f:
         de:70:ea:3d:dd:55:09:b5:fc:b1:c0:56:d0:7d:8b:7a:44:8f:
         a7:a8:3a:9d:24:4c:46:79:13:14:21:af:ac:aa:e9:67:59:ed:
         a9:dd:6a:07:fd:34:5a:99:14:0e:b5:79:86:93:0c:ed:44:f5:
         19:45:94:17:44:ce:b7:9f:d3:4d:f3:ca:00:31:ee:79:b2:86:
         67:b9:49:eb:5a:d7:f2:17:81:6d:da:9d:24:83:23:f3:c6:26:
         75:0f:01:50:dc:7c:b8:a4:bb:42:55:a7:11:3b:5e:cf:28:9e:
         55:be:70:72:b3:37:de:fc:cf:95:d7:8e:88:0b:8c:21:5c:20:
         de:f7:ca:84:ae:b0:d2:a7:10:ba:b7:a8:d3:10:45:d7:ad:8d:
         0b:1e:ef:b1:20:8e:8d:8e:86:66:dd:da:f2:8f:5e:f5:aa:87:
         5f:ae:36:ee:a3:79:b8:ff:55:60:b4:9a:b9:38:ed:a1:dc:9a:
         b1:fa:15:c1:82:0b:46:64:af:02:06:1f:4c:2b:8f:0a:96:44:
         bd:6d:18:24:e5:1e:60:39:fa:3f:3b:a9:fd:95:d0:5e:31:c2:
         9e:80:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:03 2024 by rpki-client on console-ams.rpki-client.org