Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa
File:                     4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa (raw, json)
Hash identifier:          3YA8yQOq+AD6Y6Kyl6QMT8XUvxSk4z+ikXBRopbJF8o=
Subject key identifier:   CF:F8:7F:71:51:B8:EE:47:51:39:E3:0C:39:7C:92:1E:CB:A0:CB:F4
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F4328584777C643458A21871D1E126800
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     31942
IP address blocks:        143.223.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:43:45:8a:21:87:1d:1e:12:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=3f7dd9c5-f4b4-40c1-a110-496118e941f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:d0:00:8a:9a:43:d6:89:0f:bc:64:81:ee:
                    86:60:40:f0:46:ba:61:46:87:2b:fc:27:a9:c0:3c:
                    13:47:96:ae:b8:67:90:64:19:2f:9e:3e:c6:02:cf:
                    18:ee:33:45:13:78:56:e8:a1:57:54:85:15:e7:3f:
                    37:f4:58:0e:78:04:93:df:ed:f7:62:05:74:0b:1f:
                    c1:42:00:41:b7:2c:e4:a2:ba:53:6e:fb:82:72:2b:
                    3d:99:93:f6:df:2b:86:8f:8c:37:02:fd:36:81:36:
                    8e:9a:b7:f2:b6:f3:50:e9:8c:99:36:2b:fa:a9:d4:
                    7b:2e:ac:6b:12:e0:82:ec:1b:47:34:6c:a0:81:eb:
                    f4:ca:b2:f9:bd:9c:9e:3f:82:e9:c7:21:24:a9:1e:
                    cc:7f:61:59:44:bb:88:be:61:16:18:f9:1f:8a:0c:
                    b5:ef:59:68:f5:3c:83:78:38:0c:a1:de:75:61:4e:
                    8b:90:db:6c:88:f9:69:dc:c0:87:45:5f:38:ee:87:
                    10:01:51:65:a2:7a:cf:28:12:0a:69:a2:30:da:be:
                    f6:5e:b7:66:a2:9c:44:75:e0:2d:c3:e3:c7:b1:f8:
                    9c:1c:3e:ad:0e:86:6c:c0:2b:e1:83:a6:4b:74:75:
                    18:1c:21:80:b7:8c:06:7c:de:1c:b5:fd:b7:68:f1:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F8:7F:71:51:B8:EE:47:51:39:E3:0C:39:7C:92:1E:CB:A0:CB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:76:bd:4c:f8:96:09:e3:fd:de:5d:6c:ac:3b:93:38:d1:
         95:6c:b1:4a:48:96:c8:f6:23:d6:74:eb:93:03:8e:be:af:f3:
         1d:c7:f8:9c:6d:7f:0e:34:a2:6a:08:6d:79:db:c8:61:d1:59:
         50:36:d9:b7:54:43:1f:6a:03:ff:93:44:e1:b3:9c:35:2a:6d:
         74:65:e0:bf:3b:63:53:af:54:e7:66:5b:55:93:88:2e:bc:0b:
         35:21:78:94:2f:42:bb:01:f7:68:6d:1c:19:76:c1:2c:75:e9:
         2e:8c:5d:6b:c4:02:1e:bc:eb:9c:76:7f:1c:33:17:c8:ac:63:
         36:ea:ec:d2:bd:6f:d8:21:da:ef:9e:4a:ef:84:b1:f7:c6:12:
         99:26:c7:8c:e4:38:36:de:df:dd:3f:d2:73:33:59:96:3e:89:
         f9:98:56:01:49:83:0b:0e:a1:6b:89:03:42:59:72:60:66:82:
         95:b5:7f:c5:bd:9e:c9:f2:fb:2d:a1:4f:54:a4:c4:f2:dc:13:
         e0:69:52:ac:e7:39:0f:30:1e:e3:3a:4d:60:aa:6c:95:26:b9:
         85:d5:88:37:7b:56:e3:60:b7:dc:f4:e5:f8:07:3a:19:f5:35:
         04:21:09:3e:40:f8:3b:73:bd:59:fa:8a:dd:ec:15:49:7c:df:
         51:36:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org