Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/9441ac5d-8038-3804-a070-de79dbd3c348.roa
File:                     9441ac5d-8038-3804-a070-de79dbd3c348.roa (raw, json)
Hash identifier:          kZiFjkQJJ3Ykkzz0kLU0qv6FfPBZj7ph6DmDSm22/fc=
Subject key identifier:   5A:12:04:1C:BF:A4:7E:AD:A4:20:B0:47:FB:8E:9A:DB:B9:87:33:7D
Certificate issuer:       /CN=2a604bed-acbd-4708-aa13-73f700eaabf6
Certificate serial:       010D0C9F43285847256B21BD19E400C4FA9E5D80
Authority key identifier: 6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/9441ac5d-8038-3804-a070-de79dbd3c348.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     3801
IP address blocks:        143.55.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:21:bd:19:e4:00:c4:fa:9e:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a604bed-acbd-4708-aa13-73f700eaabf6
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=d2146e52-119e-4da3-9ecf-6535c128c676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:f3:02:24:c4:49:6b:1e:a2:c9:4d:3d:09:
                    51:57:bc:bc:46:93:b0:02:14:e0:3e:fc:10:18:b7:
                    6d:a6:a7:8b:3f:2c:f3:30:2c:c8:70:77:19:d6:a1:
                    c8:ad:78:b7:94:b0:6e:ad:2a:23:33:b2:bf:af:2a:
                    e1:37:e3:2d:06:a2:99:c8:eb:85:fb:37:f4:68:09:
                    41:64:ee:56:a8:43:88:69:f4:76:3d:97:5e:f1:86:
                    88:ee:87:4e:f7:ae:3d:98:c3:0a:06:87:30:36:79:
                    c3:ef:7a:8f:bf:b1:ba:81:84:bc:99:36:03:31:c9:
                    2f:82:08:41:1d:84:18:f9:6f:4d:03:67:67:ef:72:
                    f4:b1:1c:30:63:a0:50:96:e3:54:44:6c:8f:72:79:
                    4f:5d:2c:8f:ca:b5:d0:fd:2f:ee:a1:8b:6a:d0:a9:
                    3a:49:35:35:cf:e5:1d:58:25:6b:ad:ca:68:d7:eb:
                    d7:83:c9:0a:df:58:f0:3d:e5:e0:20:82:09:83:0a:
                    19:31:a6:3e:19:8d:48:88:17:b9:46:42:0a:bb:d5:
                    0d:dc:59:0e:9b:c4:67:bc:37:c7:ec:4c:83:01:86:
                    3c:3a:09:57:85:4f:91:9e:d1:17:01:68:20:11:43:
                    ee:ff:c4:b7:1a:a7:76:f1:50:d9:67:8c:7a:b6:71:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:12:04:1C:BF:A4:7E:AD:A4:20:B0:47:FB:8E:9A:DB:B9:87:33:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/9441ac5d-8038-3804-a070-de79dbd3c348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:c9:01:37:13:ef:f7:42:52:a7:1a:e6:20:24:54:15:2c:
         e9:b3:2d:20:49:0a:7e:c4:c0:66:28:73:db:71:d0:93:e5:49:
         1a:3c:e7:e6:7d:06:4a:20:d8:6e:d1:fb:34:ca:9e:44:26:0f:
         ea:75:c2:2e:f9:3d:67:b0:1c:05:d7:fc:87:8f:1f:d7:d1:dc:
         4d:bb:10:d1:a9:8b:eb:dd:e2:ad:15:94:47:57:ab:1f:4b:0f:
         ee:ea:29:20:17:5b:43:df:9f:01:78:32:f8:a4:05:ea:0a:02:
         64:12:1f:87:08:a5:cc:57:75:5a:41:ef:b1:1f:0d:25:b1:bb:
         b4:07:2a:67:1b:cc:d8:4b:c4:d7:26:f9:6b:06:3e:38:0d:83:
         c7:41:5a:d1:33:be:25:a9:38:57:25:f2:42:dd:00:6b:6e:d5:
         5f:3a:9d:0b:5f:b9:e4:4b:6f:9c:b0:f7:b7:ef:10:da:16:4c:
         6b:19:2a:23:9f:85:4f:d5:f9:da:70:ee:a3:29:1e:eb:7c:11:
         6a:2a:36:3f:ee:58:5f:8f:69:1d:93:7b:75:cb:e7:ba:69:a6:
         4f:1f:d8:38:62:e1:e0:d6:2d:a2:dd:ad:2e:13:7f:24:c4:79:
         28:af:b1:de:bc:94:4f:72:ce:bf:95:dd:56:46:d0:38:f3:83:
         d4:f7:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:47 2024 by rpki-client on console-ams.rpki-client.org