Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
File:                     2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json)
Hash identifier:          mwoXlOVv0PjYRHOKgRfpeKugBEROqQ1EGe9mgWJPpl4=
Subject key identifier:   6B:7F:19:81:43:2B:CD:D8:8C:8B:3A:B7:E8:C5:A9:B2:4A:37:55:82
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F432858457FDDC98A59589E7A8073C200
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        143.220.146.0/23 maxlen: 23
                          143.220.148.0/23 maxlen: 23
                          143.220.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:c9:8a:59:58:9e:7a:80:73:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=dd333275-7f33-4a59-a174-78e959817494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:12:07:e1:0c:1c:39:86:55:61:ed:c0:e5:
                    52:d3:58:28:fe:39:30:47:f6:b9:f4:96:1c:cb:49:
                    1d:7e:4e:55:a2:96:b4:f6:01:15:89:d1:00:8c:3b:
                    51:a9:03:4a:11:b8:11:ac:51:01:12:47:9e:7e:76:
                    30:a7:a6:6a:3a:ac:42:50:44:22:c0:bd:15:41:bc:
                    7f:43:31:f7:62:0f:29:f2:a8:6d:53:a9:92:56:6c:
                    1f:44:72:31:1f:8f:dd:72:88:30:81:0b:6d:20:21:
                    9d:64:f4:14:d8:57:ee:63:42:52:06:01:4f:22:34:
                    94:7b:c7:a2:5d:04:bd:cb:02:b3:7a:d0:c3:0e:a5:
                    70:e5:8e:b1:b2:7d:4f:f8:65:c6:bc:ca:35:07:0f:
                    b9:71:2d:a5:93:81:70:91:6e:44:9e:6d:dd:6d:43:
                    a3:f4:e9:ab:f0:f3:92:d3:4a:38:bc:bc:69:f3:6e:
                    f0:3c:b5:43:d6:05:0c:99:dd:bb:b8:3f:bb:37:7e:
                    6b:a5:de:4d:45:b4:c7:40:07:d2:75:15:84:98:96:
                    97:c4:26:8b:c2:e1:7c:08:d8:76:a1:48:85:3a:9a:
                    c4:8a:5a:26:39:cc:73:15:b2:0a:84:77:32:1d:4c:
                    f2:f4:84:69:48:36:f6:84:9b:79:fc:f2:6e:14:21:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7F:19:81:43:2B:CD:D8:8C:8B:3A:B7:E8:C5:A9:B2:4A:37:55:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.144.0-143.220.149.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:67:dc:80:86:4a:52:71:d1:20:18:37:e7:96:8e:a6:0b:34:
         89:6a:eb:90:f2:1e:d5:10:14:44:ab:1e:e4:f1:bb:36:2d:83:
         f0:37:93:2c:98:66:79:f7:b8:37:a9:8a:c4:71:2f:ae:b0:d7:
         30:b9:a9:38:3a:c8:3e:6a:1f:ad:8e:f8:1d:0c:87:7e:7a:5f:
         96:61:be:05:02:7d:62:84:a5:1f:59:9e:1b:20:72:ba:db:91:
         09:e7:17:8f:40:42:6f:21:0b:7e:f0:90:46:37:dc:ab:72:63:
         7e:53:89:ab:90:cc:45:39:8c:31:ba:9e:d6:da:6a:18:5a:c1:
         31:1f:40:0c:67:d0:e1:8c:dc:40:02:20:f1:d9:76:38:86:5e:
         0e:1a:e5:99:e2:58:da:6b:b7:c3:e1:66:a2:03:6b:ba:76:45:
         98:e4:8b:ae:53:01:d0:07:33:63:4c:b9:62:cd:25:7b:43:55:
         fc:90:e6:80:30:cf:4b:6e:02:35:9c:91:c9:db:cf:3f:ba:f4:
         54:ec:4f:ee:9b:e0:39:76:ae:59:01:39:09:68:3b:8a:1a:4c:
         13:40:93:a0:f6:56:f1:74:e3:9f:54:f0:e3:7d:96:0c:99:98:
         7b:b5:18:07:41:aa:d6:b5:3d:7c:ec:8f:05:be:4a:dc:b6:8d:
         80:d2:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:32 2024 by rpki-client on console-fra.rpki-client.org