Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16193faa-91d2-3bb8-b307-f9985eaeb9df.roa
File:                     16193faa-91d2-3bb8-b307-f9985eaeb9df.roa (raw, json)
Hash identifier:          JsXVcCKXYnxBzX0HmMCibfaBblniiwHfxxvGhXJgmoM=
Subject key identifier:   58:AB:A3:F5:3D:32:D2:66:3F:E2:5D:FC:67:BB:EE:A9:6D:17:A8:C5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B37D631BEEA3707C29A484
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16193faa-91d2-3bb8-b307-f9985eaeb9df.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     855
IP address blocks:        142.134.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:7d:63:1b:ee:a3:70:7c:29:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=8281de4d-264c-441c-b860-fa7679565da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:b3:e5:f0:43:95:97:8c:44:97:b6:05:6e:
                    74:e7:8a:86:d7:15:9c:ca:2f:49:4c:ca:a2:bf:fe:
                    ca:c0:6d:3d:e0:e3:e1:ce:bf:0f:5f:c4:f9:b6:83:
                    ca:35:b9:8a:71:15:93:73:b0:af:0e:f1:02:cc:38:
                    14:bf:dc:58:5e:72:a1:dc:59:80:70:c3:cc:29:7a:
                    18:7c:25:77:d3:83:9f:39:19:87:be:d7:1d:c2:0a:
                    75:83:ad:63:7f:82:75:09:74:8f:4e:6b:c2:26:c7:
                    ec:57:8b:2c:b1:d9:5e:2a:f5:42:90:e2:c1:31:d7:
                    60:a5:2d:42:b6:79:f2:7f:c4:21:5d:b6:6c:78:fe:
                    a0:a7:41:6e:c3:df:25:cc:b8:c4:6c:71:a4:b0:d7:
                    48:91:43:6d:76:5d:cf:a4:f8:cc:84:1f:fa:06:f8:
                    5a:e3:4d:17:63:97:a1:a5:42:d9:d9:1b:43:b1:57:
                    5f:c8:ef:45:aa:e9:ed:23:f7:5c:08:42:f0:71:55:
                    80:a9:16:53:a7:17:ac:c3:e2:25:05:7f:22:4c:49:
                    3b:1b:69:7a:f5:49:b3:65:ea:92:4b:1a:8d:14:6f:
                    ac:27:ac:7a:f1:e1:64:a5:41:54:81:cf:d3:21:a4:
                    bd:47:a8:98:3b:fa:d0:03:aa:9a:d4:a1:eb:4f:06:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AB:A3:F5:3D:32:D2:66:3F:E2:5D:FC:67:BB:EE:A9:6D:17:A8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/16193faa-91d2-3bb8-b307-f9985eaeb9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a3:97:76:d5:7a:6c:c6:e5:c8:c4:0c:d4:26:c6:cc:fc:4d:
         10:02:32:57:4f:dc:01:af:c1:89:11:b7:a2:54:27:fa:66:c6:
         3b:74:14:0e:3e:d0:bb:03:5a:32:11:6f:aa:6c:04:8f:3c:4d:
         d7:8a:05:26:10:26:65:80:58:c9:ca:94:bf:c5:b5:10:45:58:
         96:37:1f:88:ef:61:8d:6e:3c:e6:d6:9b:4b:3f:90:04:75:6f:
         61:7d:b2:b2:89:29:e0:6b:9f:23:a6:28:85:73:fc:f6:aa:07:
         35:a8:ca:2d:df:fe:b1:f1:b7:7e:61:c8:38:c4:3f:a2:ed:ef:
         61:2d:60:64:26:72:a0:a8:fb:09:3f:21:a7:ba:b2:b9:17:24:
         a3:b7:c7:7b:52:c5:69:12:46:3e:0d:26:eb:a8:08:f6:49:85:
         85:d7:28:e6:66:82:47:53:a7:cd:ec:f2:13:bb:b1:d8:53:1b:
         3e:75:dd:4f:77:6d:ef:0e:df:0a:56:cb:10:7c:fd:16:3c:93:
         3d:da:69:03:f0:b6:eb:a9:23:b1:3e:3d:de:bb:60:f2:ed:f9:
         f1:f8:65:1a:1e:85:3d:1a:f0:a4:24:26:61:f6:5d:48:03:74:
         16:cb:6a:55:4f:0c:32:94:4b:1c:95:be:8c:fd:f3:55:a2:a3:
         00:45:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:59:42 2024 by rpki-client on console-ams.rpki-client.org