Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/74fc9cbe-885d-3c4b-9021-622efcb307e1.roa
File:                     74fc9cbe-885d-3c4b-9021-622efcb307e1.roa (raw, json)
Hash identifier:          7b/k9KEoRf5T0h5OnWywup4L3SSuYDkEqrxpHSVuBp8=
Subject key identifier:   3D:88:74:74:44:07:D2:04:37:D9:DD:15:D2:6F:FD:CA:D6:BE:93:61
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584765F79575A2E71BE43B129380
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/74fc9cbe-885d-3c4b-9021-622efcb307e1.roa
Signing time:             Tue 01 Oct 2024 15:55:27 +0000
ROA not before:           Tue 01 Oct 2024 15:55:27 +0000
ROA not after:            Mon 30 Dec 2024 16:55:27 +0000
asID:                     398156
IP address blocks:        168.220.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:f7:95:75:a2:e7:1b:e4:3b:12:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 15:55:27 2024 GMT
            Not After : Dec 30 16:55:27 2024 GMT
        Subject: CN=81b129fb-0d12-4593-866c-55626e8596a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:9c:2b:45:d3:ad:88:74:d7:21:ff:d6:6d:
                    66:61:94:e1:a0:8b:fa:4e:7e:0c:0f:b7:42:07:44:
                    d7:83:f1:86:f3:6c:1c:69:00:4e:eb:2e:bc:84:0a:
                    98:de:56:89:f4:8c:32:32:ce:56:82:e3:0d:ae:9b:
                    d5:8a:12:1d:93:f8:e2:d4:36:41:9f:df:10:d2:4e:
                    0e:71:47:bc:73:00:56:11:ec:ca:dc:04:0b:8a:ca:
                    17:5b:9c:11:4e:9c:97:7b:64:cd:16:84:b9:76:cc:
                    88:b9:ba:eb:47:e1:ab:68:d5:9c:3c:c7:54:69:07:
                    a5:9c:be:59:68:44:5d:8c:fc:5e:0b:11:d0:7f:e4:
                    0b:0e:47:e8:d8:14:be:ff:ef:1b:68:a3:91:e8:25:
                    5b:e0:c4:84:23:37:35:02:63:ed:ac:ac:63:aa:d2:
                    b7:69:ac:36:cc:3c:37:55:c6:e9:38:3f:0b:30:67:
                    55:6e:59:ed:8c:d8:24:bc:c4:6d:57:ed:30:30:6a:
                    70:21:a1:85:29:a4:61:d1:df:24:a6:99:91:56:5e:
                    5a:25:e8:90:86:cf:0b:6f:81:26:08:cb:cd:bf:50:
                    b8:a6:9c:d5:28:25:40:2e:85:ee:91:43:06:0d:82:
                    3a:55:2c:5b:cf:f0:9a:32:61:b4:08:a2:02:62:7c:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:74:74:44:07:D2:04:37:D9:DD:15:D2:6F:FD:CA:D6:BE:93:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/74fc9cbe-885d-3c4b-9021-622efcb307e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:22:65:65:fd:4f:4a:c6:26:22:ce:a7:64:d0:6e:66:d1:31:
         9e:01:59:a5:0a:e2:0a:6e:26:96:f1:35:77:43:e3:33:dc:d2:
         e4:1c:48:48:81:b0:a4:a7:f6:da:61:0d:f6:15:5a:f3:56:32:
         1d:87:d5:de:6a:46:b4:58:ec:25:4f:70:f1:ac:24:5e:14:97:
         a0:d7:9e:ff:84:1d:7c:49:6a:2d:b1:48:75:b2:28:05:ce:90:
         a7:12:4a:6a:b1:7d:e4:95:f6:ce:2c:8b:8d:d0:12:6a:1a:73:
         c8:23:e2:f7:df:34:23:07:1f:3b:f1:42:18:31:e9:ef:55:a2:
         75:5f:8c:0d:24:b3:58:42:3a:ea:5a:d5:e3:b9:8e:87:cb:45:
         49:e6:71:04:f4:d3:5d:6a:1e:9c:4b:c4:83:d8:89:7e:f3:fb:
         8e:06:87:71:9d:78:0d:a3:f0:79:f3:d6:f7:a4:3c:4b:58:08:
         29:64:18:1b:a9:f6:a9:35:c5:dc:58:64:d7:c2:d0:31:a2:f4:
         41:91:1f:91:d6:59:ea:44:be:9e:4b:22:68:42:30:82:92:a9:
         c7:04:9f:4b:40:01:82:d2:dd:b0:3a:23:49:30:d8:5a:e4:8d:
         b5:9b:5b:1f:16:ec:9d:8f:b3:e1:aa:1c:51:02:28:33:e7:2a:
         98:38:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:03 2024 by rpki-client on console-ams.rpki-client.org