Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
File:                     cfa4f32e-c53a-3acb-998b-283e18217244.roa (raw, json)
Hash identifier:          4BTYIhUrNJ3YB4rweyd4rqMrQWWmZKr2AQT/Vj9ACfM=
Subject key identifier:   68:6C:0B:8A:5D:B8:F1:85:28:9C:54:3B:2A:73:DD:5D:56:73:85:D1
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F432858457A4868FD0B7481BC730E4280
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        143.220.138.0/23 maxlen: 23
                          143.220.140.0/23 maxlen: 23
                          143.220.134.0/23 maxlen: 23
                          143.220.136.0/23 maxlen: 23
                          143.220.132.0/23 maxlen: 23
                          143.220.128.0/23 maxlen: 23
                          143.220.130.0/23 maxlen: 23
                          143.220.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:68:fd:0b:74:81:bc:73:0e:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=ecdc5dfd-9fe7-4a1b-adff-4fc8725dcd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:37:d8:5d:d0:b8:90:10:3e:2a:61:6f:2f:
                    36:02:3d:60:12:49:5d:c5:ec:7d:47:ee:e4:cd:78:
                    70:e5:f7:43:01:39:a1:0a:3e:74:8a:cd:09:8b:a2:
                    6e:5c:51:9e:b2:1c:3a:a4:3a:26:09:ae:9e:46:18:
                    e2:2f:36:32:29:e0:cc:25:72:af:d8:41:7f:0f:31:
                    dc:c7:cd:a1:c5:95:66:47:43:d0:9d:90:94:1c:2f:
                    22:78:85:40:39:ad:12:7b:7c:1f:70:8b:f9:88:fd:
                    c9:13:7c:22:a2:5c:37:42:6d:c0:60:23:65:39:4d:
                    1a:bc:56:42:00:7b:e6:1d:58:a0:f0:5c:a9:d7:66:
                    9e:d6:db:40:68:5f:22:e9:0a:4b:47:8e:c2:d9:12:
                    05:b2:8c:fd:e6:dc:66:00:5c:58:cd:97:75:f5:10:
                    35:eb:7c:3d:95:09:de:c2:50:e7:93:5f:b3:47:f0:
                    3c:96:da:e6:76:d3:98:96:b4:14:29:64:5b:a9:74:
                    f2:84:e4:1a:8c:c8:a9:e4:f4:ab:56:43:d2:14:9b:
                    bc:49:40:9b:bb:ac:63:6a:60:90:72:f1:0a:f4:29:
                    d1:d3:a7:54:66:57:a7:1a:30:f0:77:a2:4c:34:9f:
                    d3:50:16:1a:5d:aa:37:31:0c:76:33:5b:ab:ee:d4:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6C:0B:8A:5D:B8:F1:85:28:9C:54:3B:2A:73:DD:5D:56:73:85:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.128.0-143.220.142.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:0e:d9:d0:9e:50:cc:b7:43:49:d5:f9:8f:48:f2:b4:93:87:
         bc:db:30:3a:83:26:e7:77:fe:5c:bf:1b:1c:5d:cf:fd:63:39:
         06:a2:72:6b:fb:97:7f:bb:ec:aa:9e:6d:3c:03:9b:e9:50:68:
         77:1a:76:30:82:e2:51:f4:8a:d0:91:84:ca:27:6a:3c:ab:98:
         21:c9:25:d0:c6:22:e0:a4:80:e0:ab:7a:f3:60:4b:a0:e5:f8:
         b2:93:3c:e5:e0:2f:51:e0:f9:4b:1d:be:bc:78:95:e9:a0:3f:
         e2:40:a0:38:e1:9d:99:cc:ca:ad:c4:a7:27:a3:ea:44:74:cc:
         f0:dc:90:0a:1f:11:78:b3:12:78:bf:a6:73:3d:cb:e2:37:c8:
         0f:ce:97:90:db:b5:1e:3b:ec:68:12:63:d1:6b:57:3d:6b:a7:
         81:6c:98:62:19:11:b5:37:af:03:cf:57:70:c5:ab:a1:5c:44:
         2c:35:db:60:95:22:28:53:94:83:07:9c:5f:1b:b1:9a:9f:2a:
         03:b6:26:3c:b8:30:96:56:1a:82:3f:05:05:26:92:37:9d:dc:
         3c:9e:17:6a:65:54:e7:e2:3d:a4:4d:65:7a:1b:d4:db:51:04:
         d3:08:b6:b4:11:18:18:9a:32:7c:7a:d1:5b:77:2c:15:22:78:
         02:62:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:52 2024 by rpki-client on console-ams.rpki-client.org