Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa
File:                     2a008e47-d7ee-388f-8dd0-00eec15271e8.roa (raw, json)
Hash identifier:          CtLim/VP3kFGOo8GeTzaiXtEreX5WmousuRsMMHBO5o=
Subject key identifier:   55:B1:18:B1:A8:4B:5E:42:BA:16:08:74:99:A0:10:EB:BF:60:68:3B
Certificate issuer:       /CN=143c0e16-c384-40db-8cbd-7b2f4a55e007
Certificate serial:       010D0C9F43285847537B6263BAA80A872102D400
Authority key identifier: 8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     15154
IP address blocks:        64.113.32.0/20 maxlen: 24
                          198.232.165.0/24 maxlen: 24
                          198.232.166.0/24 maxlen: 24
                          2604:e780::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:62:63:ba:a8:0a:87:21:02:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143c0e16-c384-40db-8cbd-7b2f4a55e007
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=bb10d768-cf17-4888-9e61-ecc8a1f1585a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:29:e4:75:f6:de:35:c7:05:b6:2d:47:4d:
                    04:4a:42:38:57:e2:71:a4:6d:3b:0d:4a:21:92:98:
                    78:f8:74:64:21:c5:e7:88:e4:3a:95:d6:cc:2b:00:
                    74:02:c7:3f:9b:10:b2:1b:d5:63:ac:3c:11:aa:9a:
                    22:2c:9b:29:97:61:78:cc:b0:e2:5e:32:a0:92:18:
                    33:7b:be:bf:f9:2f:c4:47:be:b8:a7:7f:62:80:f0:
                    2d:1c:73:db:57:d8:69:e1:e8:a5:15:09:ce:39:32:
                    ad:e5:67:bc:04:f8:6f:12:15:b8:7d:7b:91:ee:f1:
                    3a:00:a4:1c:b8:3c:15:4c:d5:a9:c0:45:64:52:f2:
                    a8:20:41:8d:a5:42:38:c0:f2:c8:77:cf:ee:8e:36:
                    ea:97:99:c3:19:78:2d:48:5a:9e:2b:29:15:5b:ad:
                    fb:46:b2:45:47:a1:e3:93:4d:79:6d:49:27:25:47:
                    a4:7a:96:98:36:98:8c:9f:10:30:64:e1:c9:fb:3c:
                    49:27:79:39:9e:69:89:c5:d9:b7:31:b4:d0:1d:ec:
                    0d:e9:a1:be:40:9f:95:46:6f:b0:42:ea:6f:50:93:
                    eb:8b:43:d2:33:4e:ef:85:c7:dc:1f:9b:4c:17:64:
                    ec:94:b0:6e:a1:99:43:61:ae:8f:c2:58:10:c0:cf:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B1:18:B1:A8:4B:5E:42:BA:16:08:74:99:A0:10:EB:BF:60:68:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl

            X509v3 Authority Key Identifier:
                keyid:8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.32.0/20
                  198.232.165.0-198.232.166.255
                IPv6:
                  2604:e780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:32:fe:ad:9a:ee:35:ce:a3:b4:b4:dc:49:43:cd:d9:9a:14:
         39:d5:c0:8a:a6:07:47:dd:cf:9c:f8:7d:0f:c5:7b:b1:59:e0:
         af:27:c0:c7:57:39:77:0f:93:c8:06:d7:71:5e:a7:8b:c4:ab:
         24:e1:15:7e:d1:8c:bb:ac:e4:1c:65:1d:9d:89:8d:4b:a9:2d:
         50:78:4e:6c:1b:10:fd:6d:51:ee:a0:61:63:1f:3c:bb:37:3a:
         0e:71:d0:13:e0:b6:28:33:3a:34:42:e7:28:c1:ee:e2:3d:37:
         0f:94:09:1d:b7:2f:e0:e1:c9:dc:13:24:fc:27:1b:90:df:1c:
         1d:f6:bd:2b:2c:8d:10:27:28:8d:2c:b4:5b:02:ff:50:9a:84:
         a8:fe:19:e6:94:6c:2a:e6:d2:cf:98:ec:e0:35:7c:cd:0b:7d:
         ee:95:74:64:3b:ec:b3:c3:c8:28:06:b8:f4:fb:19:0c:4b:67:
         56:37:73:ee:ce:12:a8:5c:1e:1c:47:2f:26:7c:00:b5:40:d2:
         21:d9:2e:9a:1d:89:a6:a9:37:20:56:03:77:e9:4b:b3:8c:03:
         8d:5d:b2:11:09:a1:f9:2f:36:bf:26:78:87:83:01:d2:38:35:
         16:c2:66:cb:31:43:c4:19:f2:aa:a5:85:6b:a4:c0:a4:2b:e5:
         c8:c3:a8:33
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWEdTe2JjuqgKhyEC1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzYzBlMTYtYzM4NC00MGRiLThjYmQtN2IyZjRhNTVl
MDA3MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
YmIxMGQ3NjgtY2YxNy00ODg4LTllNjEtZWNjOGExZjE1ODVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfcp5HX23jXHBbYtR00ESkI4V+JxpG07DUoh
kph4+HRkIcXniOQ6ldbMKwB0Asc/mxCyG9VjrDwRqpoiLJspl2F4zLDiXjKgkhgz
e76/+S/ER764p39igPAtHHPbV9hp4eilFQnOOTKt5We8BPhvEhW4fXuR7vE6AKQc
uDwVTNWpwEVkUvKoIEGNpUI4wPLId8/ujjbql5nDGXgtSFqeKykVW637RrJFR6Hj
k015bUknJUekepaYNpiMnxAwZOHJ+zxJJ3k5nmmJxdm3MbTQHewN6aG+QJ+VRm+w
QupvUJPri0PSM07vhcfcH5tMF2TslLBuoZlDYa6PwlgQwM/2JQIDAQABo4IDcjCC
A24wHQYDVR0OBBYEFFWxGLGoS15CuhYIdJmgEOu/YGg7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNj
MGUxNi1jMzg0LTQwZGItOGNiZC03YjJmNGE1NWUwMDcvMmEwMDhlNDctZDdlZS0z
ODhmLThkZDAtMDBlZWMxNTI3MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTQzYzBlMTYtYzM4NC00MGRiLThj
YmQtN2IyZjRhNTVlMDA3LzE0M2MwZTE2LWMzODQtNDBkYi04Y2JkLTdiMmY0YTU1
ZTAwNy5jcmwwHwYDVR0jBBgwFoAUi9Pfs4d9asHh2MLHv8+hNwKNfB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNjMGUxNi1jMzg0LTQwZGItOGNiZC03YjJm
NGE1NWUwMDcuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQEQHEgMAwD
BADG6KUDBADG6KYwDQQCAAIwBwMFACYE54AwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAODL+rZruNc6jtLTc
SUPN2ZoUOdXAiqYHR93PnPh9D8V7sVngryfAx1c5dw+TyAbXcV6ni8SrJOEVftGM
u6zkHGUdnYmNS6ktUHhObBsQ/W1R7qBhYx88uzc6DnHQE+C2KDM6NELnKMHu4j03
D5QJHbcv4OHJ3BMk/CcbkN8cHfa9KyyNECcojSy0WwL/UJqEqP4Z5pRsKubSz5js
4DV8zQt97pV0ZDvss8PIKAa49PsZDEtnVjdz7s4SqFweHEcvJnwAtUDSIdkumh2J
pqk3IFYDd+lLs4wDjV2yEQmh+S82vyZ4h4MB0jg1FsJmyzFDxBnyqqWFa6TApCvl
yMOoMw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:30 2024 by rpki-client on console-fra.rpki-client.org