Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
File:                     2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json)
Hash identifier:          V5Cr6ciqVapezpm2nmt7zRWVT8oFVFz55/0Bb3BVjgc=
Subject key identifier:   27:4A:FB:A5:BC:D8:ED:25:F4:77:05:F1:83:7F:22:67:0D:4A:2B:03
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F432858473FF08CE8DDD7EFF8F2653140
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        143.220.144.0/23 maxlen: 23
                          143.220.146.0/23 maxlen: 23
                          143.220.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:8c:e8:dd:d7:ef:f8:f2:65:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=0505eafb-a0d0-466f-8572-ed22a43404f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:45:c2:d5:12:e5:d3:b3:d7:7a:b9:82:c0:
                    5f:73:a9:48:f2:e2:bd:7c:6d:7e:9d:41:35:7e:9b:
                    0e:13:91:40:f3:fd:5e:cb:c1:f8:20:7c:29:ea:90:
                    53:52:2d:56:38:21:0a:d3:9a:e3:54:c0:4c:0b:d5:
                    43:58:70:73:53:36:4c:a8:42:bc:ef:25:c3:61:83:
                    65:df:1a:be:86:aa:cb:8e:39:cb:c8:dc:51:8b:49:
                    60:7e:28:1b:c4:5f:72:16:4c:c3:21:92:e4:c7:6c:
                    5a:bc:cd:38:95:5a:bc:a5:04:00:91:af:93:b1:f5:
                    62:a8:55:c7:bf:fe:14:1a:28:d9:8d:c4:63:12:b3:
                    5d:b8:a6:0f:03:0c:da:f5:db:f0:4f:43:6f:3b:2c:
                    02:0b:09:84:d8:48:7f:fc:de:5d:28:7f:0b:b9:e8:
                    99:66:f6:6c:e2:17:39:4d:e2:15:82:63:b1:12:33:
                    49:63:f1:50:6c:43:af:b7:26:5c:25:67:6e:07:cf:
                    96:66:c9:24:4c:e7:86:9f:14:32:97:77:1a:bb:83:
                    5c:b2:57:a4:04:2d:3a:7d:8e:40:33:f0:9b:8e:7f:
                    94:69:9b:48:6f:1d:d7:c7:f3:b3:df:9c:e6:67:aa:
                    df:1a:ee:cb:49:8b:a2:bb:ed:69:d4:8f:28:3e:06:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4A:FB:A5:BC:D8:ED:25:F4:77:05:F1:83:7F:22:67:0D:4A:2B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.144.0-143.220.149.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6b:9b:32:76:8a:17:22:f2:75:af:d0:d6:dc:18:24:8c:f7:
         d0:cc:71:85:79:34:1e:86:74:43:12:c3:0a:f0:6f:95:e1:96:
         b5:6e:e4:ee:f6:f1:53:14:55:13:fa:60:bd:aa:7d:5d:34:83:
         ec:07:90:59:19:07:c1:55:8a:f9:15:5e:e0:2c:a3:e8:05:34:
         6f:4a:7f:b8:0f:4e:28:97:cc:75:0f:f1:c7:92:a3:3b:d9:83:
         13:4d:8c:8b:6e:4d:48:7a:e3:6f:4d:f3:47:57:26:2c:e8:bc:
         b0:7b:b5:78:9a:af:9b:78:1c:72:db:f8:12:af:2b:dc:86:40:
         b0:a9:55:ae:ff:b2:19:a4:c1:8b:12:27:0a:a8:20:d1:56:8f:
         c8:f0:51:b8:66:84:50:2e:aa:b9:14:68:8e:e9:52:c8:f8:54:
         e8:2b:ff:de:14:d9:42:54:61:3b:50:4a:3d:f6:3a:ab:66:55:
         24:2b:d8:fa:74:70:6a:ee:67:3f:92:d6:18:08:41:5c:24:1d:
         a5:83:d0:12:03:27:d8:e1:f6:16:27:07:ab:38:18:fa:ec:c2:
         cc:f6:d8:94:ba:de:f9:90:ba:62:32:83:b9:7e:de:30:c2:ff:
         f3:d4:f3:62:5e:35:bf:72:e8:d8:9f:5e:9b:8f:a2:be:78:34:
         80:56:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:06 2024 by rpki-client on console-ams.rpki-client.org