Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa
File:                     b596de48-c39a-3bef-8e7f-6c5138de76a0.roa (raw, json)
Hash identifier:          BuRCY+Kj53Gn47haiaPpYbSPEas1KR5yTt4tqJ2GxLs=
Subject key identifier:   50:3D:A7:33:81:5B:8E:00:F3:3D:C4:D1:CD:30:A6:57:0F:A0:D1:F7
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285847665C032F9D91004FFDB1E580
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa
Signing time:             Tue 01 Oct 2024 19:17:48 +0000
ROA not before:           Tue 01 Oct 2024 19:17:48 +0000
ROA not after:            Mon 30 Dec 2024 20:17:48 +0000
asID:                     398156
IP address blocks:        168.220.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:5c:03:2f:9d:91:00:4f:fd:b1:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Oct  1 19:17:48 2024 GMT
            Not After : Dec 30 20:17:48 2024 GMT
        Subject: CN=6afb611c-c025-4ce4-b876-55f11c05132f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:ee:a0:6b:9f:5c:65:c1:db:d9:59:a2:0e:
                    ac:e4:2f:fa:8a:56:9e:04:f0:25:c4:60:50:ba:9c:
                    c2:9a:44:b2:b4:9f:55:42:84:29:c6:fb:e1:4a:74:
                    4b:1a:f1:a5:ff:67:24:47:d9:58:f6:c3:23:6d:b2:
                    68:99:64:25:85:11:59:08:5d:c9:3c:2d:8f:28:f9:
                    59:ea:cc:89:3e:c4:06:a6:05:ca:e8:a7:4a:26:c5:
                    85:80:74:80:70:b6:76:5e:be:b8:94:ca:75:2b:fc:
                    f6:73:08:21:d1:70:56:07:54:65:5f:d8:f8:03:d2:
                    6b:7d:92:cc:88:37:d5:a0:8c:e5:ca:63:16:4a:f9:
                    8a:1f:7c:7a:b7:24:2e:6f:e8:0d:f1:f0:55:67:53:
                    69:b3:3b:c8:36:c7:1e:37:36:a0:3e:fa:7e:3f:e8:
                    64:7d:0b:60:40:b4:30:11:ca:70:61:29:27:f2:b8:
                    10:eb:59:64:12:23:09:8d:1e:bb:97:9c:0c:25:eb:
                    ab:da:68:a5:8f:3d:e4:83:f9:c0:f2:eb:e1:90:b0:
                    4a:0e:2a:f7:4c:53:53:00:c9:81:40:ab:3a:ef:a4:
                    98:b7:97:32:a3:c5:6c:e6:ff:b6:e8:01:ad:d4:66:
                    8e:d8:88:da:39:2a:1e:7b:0e:53:32:e5:84:b0:0a:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3D:A7:33:81:5B:8E:00:F3:3D:C4:D1:CD:30:A6:57:0F:A0:D1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:fd:6b:c1:32:fa:4c:b0:30:62:5d:f5:64:eb:cd:8a:e2:e1:
         d1:68:f9:cb:25:cb:56:a7:0e:82:f0:71:fc:3a:a8:d5:85:b8:
         6c:ad:c3:0e:60:e3:86:25:3a:7d:b7:c3:cd:56:de:48:2f:1b:
         d2:2d:73:10:ff:17:79:63:c1:e5:65:f4:1c:31:7d:25:dd:6f:
         c6:98:dc:1d:45:24:ce:9d:d9:8e:83:fa:17:47:ac:1f:b6:ef:
         66:c1:e8:d9:af:d3:fe:20:56:f2:76:4c:28:7a:86:d8:7f:ff:
         47:3b:6d:20:8c:95:b4:d9:34:9b:c2:8d:e3:41:f0:8e:3e:cf:
         5e:1d:10:af:17:78:12:ad:15:b9:5f:b2:50:7d:07:53:fd:68:
         45:e1:d0:44:96:8a:43:0d:33:84:30:49:c1:94:29:cb:40:0e:
         5c:bd:fd:47:48:06:44:51:ba:ae:07:ce:7f:e3:53:ac:6b:11:
         21:5d:6b:27:01:21:76:3e:2b:ee:0e:21:ba:a4:b3:0c:37:78:
         0f:76:09:62:d2:e5:05:ae:f7:63:1d:21:fa:8b:5d:b3:8b:4d:
         86:b7:ad:ca:3d:ec:33:35:fd:0a:08:e1:5d:bd:66:aa:ac:ec:
         7b:0a:15:45:40:71:d3:9f:a5:2f:c0:cd:3a:88:01:e8:e1:1e:
         91:41:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:38 2024 by rpki-client on console-fra.rpki-client.org