Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa
File:                     2c777c15-0aed-3183-a577-cc62d7729532.roa (raw, json)
Hash identifier:          G0yfF9SiwooQxiiK0nDX1maWFjt0zJPBqQyLDHqPTPE=
Subject key identifier:   45:3B:B1:4B:78:BA:EA:24:2E:E9:E0:3E:EA:E0:00:D1:F6:89:94:C5
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584A050A7616F51F203B93D91500
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     398156
IP address blocks:        168.220.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:76:16:f5:1f:20:3b:93:d9:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=b20b5d80-7a63-42b6-87d7-0ae650a8458e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:83:ad:76:b8:3e:3a:0f:97:1c:1a:e2:4d:
                    2a:5d:00:02:6c:df:04:58:f7:af:80:ab:e3:47:4e:
                    ab:e2:7c:70:d3:90:a2:be:e2:67:ab:1d:82:92:80:
                    ce:42:15:70:00:f2:f0:e3:08:db:03:75:4f:5c:8c:
                    9c:72:bb:c5:c3:8f:9f:ac:2f:bc:05:a4:32:02:5f:
                    12:67:c7:98:b4:a9:94:98:a5:5a:7b:62:53:26:ea:
                    62:d2:1c:01:57:76:65:8b:00:0e:cf:d3:d8:72:93:
                    23:3e:df:26:ab:ed:9f:cf:aa:d9:70:e7:e5:9c:f3:
                    3f:b9:53:bd:a3:7b:c1:16:41:4a:30:53:48:a7:0c:
                    b6:71:0b:ec:c7:30:f9:ed:98:f5:83:e6:1d:35:59:
                    0a:09:0f:00:b5:ec:f9:56:ee:d8:24:75:d0:7f:d2:
                    1b:3f:b8:ca:c3:7c:c3:5b:fd:7a:42:a7:25:75:91:
                    f6:93:3c:a6:0a:85:73:8e:6e:07:e8:9f:1b:79:74:
                    99:5d:fb:36:e7:79:f5:c0:43:75:64:a6:04:5c:69:
                    f9:3f:b9:f3:0f:b0:c8:c2:a7:be:53:f9:ee:1c:65:
                    97:9e:16:d8:71:b8:cf:bc:40:8e:b7:18:c2:d7:b9:
                    d6:e5:14:c5:34:e9:8f:ae:7f:15:be:51:8b:7e:63:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3B:B1:4B:78:BA:EA:24:2E:E9:E0:3E:EA:E0:00:D1:F6:89:94:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2c777c15-0aed-3183-a577-cc62d7729532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8d:d4:4b:62:f9:3f:e2:62:ac:bb:bf:9f:53:7e:3f:8c:90:
         7d:c2:60:3a:4f:7d:af:88:89:af:6f:ea:a1:b1:e1:41:3e:93:
         f8:d8:c8:10:9c:9d:a3:8f:d0:4a:07:6f:7a:25:72:08:06:29:
         4e:7f:25:b0:84:af:6a:a1:47:3d:df:fd:22:96:5c:f5:ec:3f:
         fa:fa:43:90:f8:c4:d1:dc:df:81:de:9f:78:82:62:9f:9e:97:
         b7:7a:0d:a8:c6:e4:65:b3:4c:5c:92:23:60:6c:91:f3:f5:44:
         23:96:51:cf:5b:93:d5:0d:6b:e9:3d:43:1f:6e:7d:9f:07:5f:
         f5:9c:16:5d:b5:de:33:e5:aa:8a:ee:f4:30:33:68:47:e3:54:
         ce:a8:02:ab:f4:b1:1b:60:94:05:c5:98:85:c3:e5:e2:fc:03:
         29:ac:77:12:38:bc:65:cc:d9:f6:7d:d4:c4:11:bf:34:a6:21:
         27:bc:0f:75:b1:08:3b:9d:da:3f:a6:29:9f:17:50:02:51:8e:
         75:b5:f9:21:10:57:01:47:7d:a4:61:04:d2:a1:18:ad:3c:8e:
         0d:93:bf:94:c9:74:27:98:42:ad:73:94:1e:5d:75:d8:1f:f5:
         a8:27:8d:d6:4c:5b:eb:2c:36:71:96:d8:c2:81:a8:4e:47:89:
         3d:54:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:24:49 2025 by rpki-client