Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa
File:                     b214acd2-07b1-360e-a1cc-31f9d400eba6.roa (raw, json)
Hash identifier:          6bK1NtkN1Tu04tK7C2tyS+P7plJRnzvCPeTHewk5sI8=
Subject key identifier:   C6:E7:9B:20:B4:94:95:50:E0:AF:3E:ED:9A:1D:0E:18:16:50:DC:94
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F432858476665D2486A02E51C181F0440
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa
Signing time:             Tue 01 Oct 2024 19:37:34 +0000
ROA not before:           Tue 01 Oct 2024 19:37:34 +0000
ROA not after:            Mon 30 Dec 2024 20:37:34 +0000
asID:                     398156
IP address blocks:        168.220.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:65:d2:48:6a:02:e5:1c:18:1f:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 19:37:34 2024 GMT
            Not After : Dec 30 20:37:34 2024 GMT
        Subject: CN=ca9d4a39-4114-41d5-930f-81be4b6870fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:8b:42:cf:13:9e:ff:a5:cf:91:a0:f7:d1:
                    81:81:d0:da:15:15:f5:a3:67:11:08:5b:b9:f7:3e:
                    c6:7c:0d:67:66:4a:7f:a3:7b:46:d4:91:3f:47:2d:
                    3d:6a:fb:05:60:46:fe:7c:d1:ba:7b:0d:58:cc:19:
                    9d:fc:76:d5:96:5f:d2:a9:95:7e:8d:ef:7a:3a:ae:
                    f1:5f:60:8b:8c:06:86:67:34:54:b8:4f:a3:62:1f:
                    f7:c0:f0:ba:27:c8:0b:ba:ff:94:72:a3:e6:97:12:
                    83:f3:a2:b5:a0:2d:79:eb:21:0f:b8:37:0e:5e:46:
                    bb:5c:12:f6:f2:bc:1a:a8:67:67:8c:98:89:ef:69:
                    60:24:fe:67:13:74:88:37:b9:72:22:93:5d:96:8c:
                    ff:31:4e:a2:ea:dc:36:97:ed:9f:83:b6:3e:03:9d:
                    48:38:57:12:80:b2:6e:99:fa:92:0a:a5:99:28:f9:
                    8c:09:72:d7:ac:49:8c:fb:69:98:9e:51:22:bc:27:
                    3e:08:7d:f4:33:89:c8:55:26:91:a4:0f:e7:af:ec:
                    9f:df:ea:66:61:df:3a:9c:8b:06:b0:d4:7c:e3:ec:
                    0f:71:e5:e0:64:09:20:fc:b3:8c:2a:bd:a5:f2:ca:
                    59:56:1c:7c:50:37:ac:b7:72:25:56:5d:fb:30:2d:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E7:9B:20:B4:94:95:50:E0:AF:3E:ED:9A:1D:0E:18:16:50:DC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:c2:e2:5a:1a:f0:ee:93:e3:18:e1:75:e2:15:ec:4c:6b:
         56:a5:e8:43:ff:1d:9b:24:00:17:06:6f:6d:21:8f:e4:91:b1:
         c4:69:5c:f1:2b:aa:64:fd:ba:34:2c:f1:1a:be:13:20:c7:74:
         e1:58:1f:8c:5e:df:1d:c7:91:bf:16:4e:9e:2e:bf:18:96:ae:
         a1:93:6d:3a:1b:f6:c7:29:98:05:8d:f2:df:ea:0f:1c:9d:bb:
         c3:d6:5e:06:8a:96:b0:3e:d3:39:0f:55:44:51:f9:0e:0e:9c:
         13:f8:c6:7f:33:a2:b4:63:34:61:16:b1:e3:23:b4:b2:fb:8c:
         c2:e3:84:e5:0a:66:75:80:3e:51:1a:fe:a3:1c:e6:bb:b5:e0:
         4a:73:2c:53:44:1d:4e:34:b1:49:13:00:9d:18:73:c2:48:ec:
         2b:c7:f1:ba:21:91:a4:97:b4:26:d7:cb:99:b9:c6:db:fb:91:
         31:9a:b0:8d:a4:be:76:cc:dd:48:8e:0e:50:df:76:1d:17:65:
         eb:a1:6e:da:c1:13:04:1f:77:6c:b4:bd:90:f3:c0:68:1d:08:
         f9:f8:fc:87:e0:92:30:cb:38:7e:9b:22:62:e1:52:f6:c7:21:
         d9:4d:3e:43:87:1f:6a:ee:a7:50:2e:a0:7f:bf:0d:08:6d:de:
         dd:a4:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org