Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
File:                     fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa (raw, json)
Hash identifier:          IhIMFodUeaTz451ydToJztGKBdbWYAJAgITPidTPZbo=
Subject key identifier:   EF:B6:52:09:4E:2F:A5:28:CA:78:D6:9C:AA:D7:B8:2E:53:CF:F5:BA
Certificate issuer:       /CN=4d6573b2-9f3e-43b9-a710-eaee606df226
Certificate serial:       010D0C9F4328584792938CE339483110E9139A00
Authority key identifier: 20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
Signing time:             Thu 17 Oct 2024 15:25:16 +0000
ROA not before:           Thu 17 Oct 2024 15:25:16 +0000
ROA not after:            Wed 15 Jan 2025 16:25:16 +0000
asID:                     3128
IP address blocks:        143.200.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:93:8c:e3:39:48:31:10:e9:13:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6573b2-9f3e-43b9-a710-eaee606df226
        Validity
            Not Before: Oct 17 15:25:16 2024 GMT
            Not After : Jan 15 16:25:16 2025 GMT
        Subject: CN=9db82d2f-6b18-426f-ad0c-9d910f819f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:63:bf:8a:88:c9:34:7a:8f:a9:00:f9:b6:
                    77:ac:c1:4e:af:7b:48:96:0d:a3:25:fd:26:d2:f4:
                    53:e8:4d:5e:8b:d3:f5:5c:eb:d5:42:0f:2e:6b:a5:
                    6d:3f:c6:8b:1d:21:11:4a:44:04:2f:9b:12:d8:1b:
                    3a:db:38:84:f5:d7:62:10:24:3f:99:fe:cd:47:75:
                    c8:10:3a:38:91:5b:1e:68:2b:42:45:54:25:3c:61:
                    b8:30:68:b8:1e:98:86:5e:68:3a:2f:8b:68:e2:99:
                    6a:4f:e4:85:b5:4f:0f:39:fb:30:68:06:79:0f:43:
                    e2:17:b4:69:ad:11:36:4e:9c:0b:46:03:c1:4d:9f:
                    8b:b4:58:60:e7:f8:71:83:77:70:37:5c:e8:43:e8:
                    9d:8a:c4:c0:79:4d:7e:23:03:19:51:1f:79:ca:43:
                    66:d2:5d:9f:47:61:ad:95:2e:74:56:19:bc:70:08:
                    93:64:90:64:89:41:70:0b:0a:60:3c:ed:aa:49:ff:
                    77:32:9f:35:1f:25:22:eb:71:23:06:1e:62:a0:1a:
                    7c:0f:a9:b5:8e:95:79:3a:6c:62:3a:ab:f4:ef:58:
                    93:28:b4:da:db:22:2f:a9:45:ef:6d:36:ac:47:94:
                    f9:60:3d:9f:b6:33:55:03:77:2d:9a:91:98:6c:4a:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B6:52:09:4E:2F:A5:28:CA:78:D6:9C:AA:D7:B8:2E:53:CF:F5:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl

            X509v3 Authority Key Identifier:
                keyid:20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:76:ed:07:b1:06:78:56:b3:22:64:55:3b:99:bb:e6:00:8d:
         18:79:21:fa:dc:f2:70:44:0c:f8:8a:3a:b6:b3:96:29:9f:10:
         b5:5f:bf:be:21:f6:97:e7:46:5a:18:05:53:31:a9:23:cc:4e:
         d9:43:77:58:35:3b:b6:7a:c3:10:5a:25:53:82:75:b0:8a:f9:
         bb:1d:99:06:1a:65:6f:c9:ac:ba:c2:0f:4c:ed:bb:8e:b9:76:
         f0:e6:c0:63:dd:ac:69:ce:46:d6:54:0f:4d:23:22:60:dd:24:
         b7:53:2a:f1:89:4f:47:a0:3b:ac:c3:da:6b:4d:b8:7d:aa:02:
         d9:6b:10:99:05:7c:41:6a:3a:72:5a:91:59:0c:45:b8:e7:6a:
         27:c3:69:cd:3c:48:47:73:8e:41:8f:04:70:b1:5a:49:78:8b:
         0d:75:21:00:0f:36:73:d9:2f:d1:8f:4e:3c:7c:d3:c3:e3:8e:
         8d:d9:f9:56:07:83:e0:38:61:94:49:0d:be:64:ff:91:d9:a0:
         34:8d:5d:58:be:e5:d0:06:b5:49:33:5e:93:c2:fe:a8:62:c4:
         18:63:58:77:68:c7:4a:d8:04:a9:8e:42:fb:c0:6d:34:34:1e:
         9b:7f:b5:f9:d8:6d:82:d5:de:b1:20:0d:4f:b6:ae:ec:0f:ea:
         9b:24:d1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:51 2024 by rpki-client on console-ams.rpki-client.org