Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa
File:                     ab422eee-cee4-35ad-bf8f-cf518f46443b.roa (raw, json)
Hash identifier:          ndPLERGENdIM0ycS3qJle9kHGrOP2PKdfemWK75TbG8=
Subject key identifier:   30:FE:A8:A4:57:A6:0A:DF:CC:8C:00:B7:48:41:15:44:5B:A7:C8:52
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285847665CCFF18567B742724BAAC0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa
Signing time:             Tue 01 Oct 2024 19:19:24 +0000
ROA not before:           Tue 01 Oct 2024 19:19:24 +0000
ROA not after:            Mon 30 Dec 2024 20:19:24 +0000
asID:                     398156
IP address blocks:        168.220.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:5c:cf:f1:85:67:b7:42:72:4b:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 19:19:24 2024 GMT
            Not After : Dec 30 20:19:24 2024 GMT
        Subject: CN=3ca69e03-343a-4471-ba38-827c7f095ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:5e:5f:d8:1c:c3:61:fd:f8:0b:0d:92:9f:
                    12:78:64:68:7a:b1:ad:f2:2e:b3:e0:8c:5e:1d:11:
                    16:94:b5:d5:65:75:d1:25:a0:6b:bd:32:ae:c8:2e:
                    37:93:70:f1:eb:65:fa:48:1a:9a:c0:4a:2d:e5:3a:
                    ae:ea:6f:22:e9:7b:73:01:24:dc:a6:12:b2:01:92:
                    5a:c6:a9:60:18:dc:45:c3:5b:ef:bd:2b:c1:46:0f:
                    ff:b0:d3:7c:93:a3:da:dd:ed:65:58:54:24:2a:14:
                    9c:b4:27:06:7e:a1:f6:c0:ea:78:8b:58:81:f6:80:
                    63:32:61:9f:b6:1d:60:0e:67:cc:2b:06:12:97:88:
                    86:12:2b:16:07:67:44:d4:6c:6d:ab:33:72:62:ed:
                    45:1f:8a:5a:11:c1:83:b5:ae:59:11:33:5b:4a:b5:
                    0d:b0:5d:52:2c:a2:76:a1:a6:5c:fd:71:a7:ed:c1:
                    c7:e2:0e:68:86:2c:ee:a0:94:06:4c:dc:ae:24:c8:
                    61:3e:f6:47:c9:da:e8:0c:19:5a:68:bc:32:52:59:
                    bb:0f:4e:f6:07:df:0a:b4:12:4d:fd:9a:ab:7b:fa:
                    98:e3:05:ba:44:46:bb:4b:12:26:19:4e:3c:fa:eb:
                    5c:e5:db:fc:b1:e6:30:57:c9:16:8f:19:a3:cc:13:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FE:A8:A4:57:A6:0A:DF:CC:8C:00:B7:48:41:15:44:5B:A7:C8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ab422eee-cee4-35ad-bf8f-cf518f46443b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:23:ed:29:72:ff:3c:75:6d:41:17:d8:aa:28:36:cc:5a:b1:
         6b:dd:82:e4:5f:da:21:18:0f:f2:c9:d8:3b:01:ad:e4:80:47:
         08:97:d2:2d:ee:9f:64:48:4a:94:60:09:e2:99:43:64:f9:89:
         6d:ac:b0:c5:a6:d1:e8:00:92:cd:f9:0d:e0:c0:22:73:74:16:
         d9:79:c8:df:c3:a2:2d:78:54:cb:63:37:cc:fd:3c:8d:a5:aa:
         a2:26:d1:b6:d1:24:ea:13:85:28:cf:0f:b8:9e:62:e7:34:5a:
         8e:36:d3:a2:13:41:f8:6b:43:83:cb:17:5e:8b:0f:ba:a4:5d:
         73:b0:85:c6:0f:af:18:9d:06:0b:b9:c4:63:e3:0d:48:b9:01:
         0b:c2:44:8a:d2:26:50:40:16:b1:13:5f:37:0d:eb:44:92:0b:
         06:28:fb:2c:b7:25:14:8d:d1:a8:8c:7a:62:5a:08:67:ae:49:
         f7:09:8b:89:4e:d2:39:ed:a1:bb:e2:d2:33:66:6e:80:6c:ad:
         7c:18:44:14:53:8e:f5:d2:6d:ff:fa:8b:9f:3f:68:fe:14:79:
         a7:22:aa:90:7a:4a:85:82:a9:88:cb:8b:ac:fc:a1:2c:fc:dd:
         85:e9:56:6d:22:b5:42:46:72:e7:d9:2d:36:8d:6e:98:ec:59:
         88:1e:3f:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdmXM/xhWe3QnJLqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI0MTAwMTE5MTkyNFoXDTI0MTIzMDIwMTkyNFowLzEtMCsGA1UEAxMk
M2NhNjllMDMtMzQzYS00NDcxLWJhMzgtODI3YzdmMDk1ZmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTdeX9gcw2H9+AsNkp8SeGRoerGt8i6z4Ixe
HREWlLXVZXXRJaBrvTKuyC43k3Dx62X6SBqawEot5Tqu6m8i6XtzASTcphKyAZJa
xqlgGNxFw1vvvSvBRg//sNN8k6Pa3e1lWFQkKhSctCcGfqH2wOp4i1iB9oBjMmGf
th1gDmfMKwYSl4iGEisWB2dE1GxtqzNyYu1FH4paEcGDta5ZETNbSrUNsF1SLKJ2
oaZc/XGn7cHH4g5ohizuoJQGTNyuJMhhPvZHydroDBlaaLwyUlm7D072B98KtBJN
/Zqre/qY4wW6REa7SxImGU48+utc5dv8seYwV8kWjxmjzBOutwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDD+qKRXpgrfzIwAt0hBFURbp8hSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYWI0MjJlZWUtY2VlNC0z
NWFkLWJmOGYtY2Y1MThmNDY0NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoj7Sly/zx1bUEX2KooNsxasWvdguRf2iEYD/LJ2DsBreSARwiX0i3u
n2RISpRgCeKZQ2T5iW2ssMWm0egAks35DeDAInN0Ftl5yN/Doi14VMtjN8z9PI2l
qqIm0bbRJOoThSjPD7ieYuc0Wo4206ITQfhrQ4PLF16LD7qkXXOwhcYPrxidBgu5
xGPjDUi5AQvCRIrSJlBAFrETXzcN60SSCwYo+yy3JRSN0aiMemJaCGeuSfcJi4lO
0jntobvi0jNmboBsrXwYRBRTjvXSbf/6i58/aP4UeaciqpB6SoWCqYjLi6z8oSz8
3YXpVm0itUJGcufZLTaNbpjsWYgeP5Y=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:38 2024 by rpki-client on console-fra.rpki-client.org