Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/df4ed7ce-8995-3639-92cf-9ef8ac443bae.roa
File:                     df4ed7ce-8995-3639-92cf-9ef8ac443bae.roa (raw, json)
Hash identifier:          1QBHHDcx0xRtc/vSCTtzeP5k9wuK5ERdt6netWcqv6c=
Subject key identifier:   35:00:D5:F3:1C:1F:E7:89:05:F0:5F:4A:AB:B5:3E:84:99:ED:8C:CF
Certificate issuer:       /CN=2a604bed-acbd-4708-aa13-73f700eaabf6
Certificate serial:       010D0C9F432858473D25EE6D3AC6A089E6764C80
Authority key identifier: 6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/df4ed7ce-8995-3639-92cf-9ef8ac443bae.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     3801
IP address blocks:        143.55.16.0/24 maxlen: 24
                          143.55.17.0/24 maxlen: 24
                          143.55.18.0/24 maxlen: 24
                          143.55.19.0/24 maxlen: 24
                          143.55.20.0/24 maxlen: 24
                          143.55.21.0/24 maxlen: 24
                          143.55.22.0/24 maxlen: 24
                          143.55.23.0/24 maxlen: 24
                          143.55.24.0/24 maxlen: 24
                          143.55.25.0/24 maxlen: 24
                          143.55.26.0/24 maxlen: 24
                          143.55.27.0/24 maxlen: 24
                          143.55.28.0/24 maxlen: 24
                          143.55.29.0/24 maxlen: 24
                          143.55.30.0/24 maxlen: 24
                          143.55.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:ee:6d:3a:c6:a0:89:e6:76:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a604bed-acbd-4708-aa13-73f700eaabf6
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=ecd69c7b-601d-4313-a061-e6d122d7b78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:68:a7:ac:ee:e6:b8:04:78:ed:51:bd:39:22:
                    20:a7:cf:db:47:b3:ca:1a:74:41:6c:0e:6c:3a:b4:
                    2f:f8:32:71:68:86:90:67:84:3e:2a:03:ac:36:ca:
                    a3:de:6a:8a:65:a4:05:3c:e1:f1:56:8d:97:e5:b8:
                    75:8c:12:70:69:1f:93:b6:62:5e:43:21:cb:75:d6:
                    ae:06:19:9a:58:c5:a5:d1:fd:2c:db:89:d8:c3:09:
                    33:4a:16:47:83:ab:68:49:0a:7d:c0:22:28:ec:1b:
                    ac:3e:69:95:01:59:01:43:d3:45:72:58:a3:f7:ec:
                    36:cc:8c:c2:1b:93:42:f0:25:40:5c:dc:6d:5c:79:
                    e4:80:23:66:51:b7:a0:0a:27:73:ac:7d:fa:90:25:
                    a4:d8:c6:dd:3f:f7:36:cd:4f:a2:b6:7e:5e:e5:a1:
                    3d:32:f5:e1:ff:fe:9a:c4:78:08:83:6c:d0:da:61:
                    4b:5a:51:39:92:5e:18:ed:9f:fa:ca:3a:f5:7b:06:
                    2d:43:5f:5b:be:79:78:05:70:8c:70:5a:9f:62:32:
                    da:2e:19:d2:9a:3c:e9:0f:03:a9:60:da:cb:64:f2:
                    e7:2c:fc:4e:1a:a1:12:a6:cd:fd:5a:39:59:2f:ef:
                    d9:04:b5:64:8a:85:fd:1e:4e:53:4a:33:2f:c5:d6:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:00:D5:F3:1C:1F:E7:89:05:F0:5F:4A:AB:B5:3E:84:99:ED:8C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/df4ed7ce-8995-3639-92cf-9ef8ac443bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a0:6d:67:15:ab:20:73:a9:2d:c0:98:0c:4a:1e:38:63:11:
         86:fa:b7:aa:33:a1:80:ea:bc:15:ad:fc:31:6f:44:03:f6:50:
         5f:c2:55:f2:fd:f5:49:4d:ca:e4:ac:61:10:cc:fb:7a:6d:7d:
         07:65:d9:35:8d:9d:2a:fe:96:67:35:24:9c:3f:f6:5d:91:b6:
         75:70:7b:fc:f3:bc:7c:31:21:f3:a4:c4:d8:d1:0d:5c:3d:60:
         6e:5f:de:ce:50:26:23:22:84:8f:bb:4c:ed:52:0a:e6:52:8a:
         f0:f5:11:51:31:1c:79:d2:50:9c:95:9d:6b:f6:33:cb:70:67:
         2d:b6:5f:5c:49:1e:d9:6c:bb:ba:b1:8f:43:63:aa:5b:4a:f0:
         35:09:ea:49:93:f6:b5:39:e5:18:ff:15:75:e9:40:a4:d7:86:
         ed:1c:a9:ad:25:79:f6:04:31:8a:16:69:97:0b:ca:8e:00:79:
         75:9a:53:50:49:27:73:34:ba:e8:f6:86:37:56:95:22:d2:d1:
         6c:0b:4a:4d:97:17:10:8c:d0:fa:58:58:5c:6f:ff:26:64:64:
         d2:0f:90:d2:d2:f9:b3:b5:25:4c:88:72:4d:38:ad:45:20:41:
         3c:cd:80:58:ee:4a:84:31:d5:ab:3b:4e:20:f2:d7:79:b0:11:
         5f:bc:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:08 2024 by rpki-client on console-fra.rpki-client.org