Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa
File:                     673938d8-87b0-3c69-beed-a23cc3c631ae.roa (raw, json)
Hash identifier:          EWNqKHELsdNq/qiGuJTQC5AoAxk1NJXmdNYi4RECixk=
Subject key identifier:   E7:B0:3C:CF:9E:92:91:47:45:8D:8D:5A:31:91:AF:00:5E:6D:74:BA
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584925B3ABCA6806EEC854B86E80
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     398156
IP address blocks:        158.120.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:ab:ca:68:06:ee:c8:54:b8:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=d3338a91-10e1-4ef6-813c-312e41192df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:25:1e:d5:9a:95:a0:db:fa:89:9e:14:50:
                    14:16:f3:93:53:4d:b4:57:4c:5b:11:e1:c0:65:fc:
                    a5:fe:de:28:37:61:3a:60:25:6a:3a:0f:49:cf:28:
                    97:38:1c:6a:e5:a4:aa:89:e3:6a:84:5c:ad:2b:9a:
                    b8:12:00:94:18:b1:73:3b:c1:1b:e7:dc:18:19:d9:
                    a4:10:97:b1:9b:0c:16:d4:5e:48:e8:52:f3:24:0d:
                    40:51:03:f0:38:35:b5:4d:bb:a7:55:aa:22:75:87:
                    0a:5c:7c:1a:fd:02:18:43:8c:b7:e1:9b:56:dc:12:
                    76:91:6a:2c:f6:02:f1:fc:60:03:58:45:a5:ad:4c:
                    e5:b3:c1:00:a6:2a:ec:db:4d:5d:86:12:d9:8c:f1:
                    26:aa:4f:fd:9f:bd:bf:ea:11:25:da:83:0e:32:5a:
                    8e:15:ad:51:0d:e4:02:a8:99:e6:2f:72:dc:a5:c8:
                    a3:f2:25:63:f0:7b:8b:91:41:23:aa:e9:c0:10:83:
                    b7:9e:35:1f:a4:a4:15:91:cb:c3:9e:82:92:c0:c5:
                    15:ae:07:7e:70:54:4b:37:bb:59:ec:d4:ae:9d:47:
                    52:ae:5c:43:f6:3d:a0:86:d1:70:b1:6e:01:a7:15:
                    e3:fc:29:50:04:05:e7:ee:c8:2c:b5:89:b0:25:08:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B0:3C:CF:9E:92:91:47:45:8D:8D:5A:31:91:AF:00:5E:6D:74:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:53:12:44:92:9e:e5:aa:d2:87:8c:05:c5:9f:31:8d:90:
         d6:d7:a8:b4:f7:38:8d:66:65:51:f2:03:90:75:c5:4c:b7:13:
         d1:ea:e9:21:e0:b9:3e:c2:3f:0c:b6:e9:0d:ad:16:a6:16:71:
         54:08:57:43:f5:8c:5d:f7:24:b8:23:e3:3e:81:8f:a4:a5:19:
         94:59:4c:ca:9b:fa:c5:26:85:30:85:17:61:67:e4:18:bb:bf:
         60:28:84:ae:47:01:ca:f1:c1:d9:d1:5c:0d:62:8d:1a:b3:d5:
         89:f5:85:ea:0e:a3:ff:44:c5:ae:92:34:6b:ed:e4:21:19:67:
         61:81:8b:f5:2e:6a:10:6f:b6:8c:16:75:a9:4b:ff:23:5f:05:
         d3:dd:b2:a3:a2:29:82:66:04:19:97:a3:dd:5e:7d:60:41:2f:
         1f:f8:d4:2b:85:47:5a:89:f0:f6:da:56:d8:f4:ca:3c:d8:88:
         16:63:72:fc:15:47:08:5b:ac:ca:16:5b:96:21:5c:03:86:7a:
         10:6a:80:80:b6:7d:e5:13:45:f3:0b:44:66:bc:fd:75:98:09:
         75:d6:cd:2a:71:5b:1b:bf:dd:b4:12:10:ba:1e:a4:c8:7e:e8:
         cb:cb:a9:1b:43:73:20:3a:3e:35:e7:05:62:73:54:46:5c:8e:
         96:57:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:07 2025 by rpki-client