Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a352691-b163-3237-9f00-0273d614046e.roa
File:                     1a352691-b163-3237-9f00-0273d614046e.roa (raw, json)
Hash identifier:          L2fajrkQ7fG7VovuJyDGGuWTp69h6vK/U19llGExmaU=
Subject key identifier:   C5:31:D1:2E:49:D9:CC:FE:90:06:38:9E:A1:77:3A:3E:9D:BB:57:84
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3845280D23807165D8200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a352691-b163-3237-9f00-0273d614046e.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     855
IP address blocks:        142.162.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:84:52:80:d2:38:07:16:5d:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=ed755444-61c3-4f92-9147-8cff3ef2879c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:10:84:74:c2:30:32:77:61:43:7c:f3:6a:3f:
                    c2:ef:f8:20:a0:dd:4f:d1:f5:a2:08:bc:65:96:5c:
                    96:3f:6d:88:6f:6d:c7:8b:9a:32:b5:16:6e:ab:b0:
                    32:1f:16:62:bf:ae:3d:b8:ac:97:69:d4:d9:84:18:
                    52:b0:ce:f1:44:f4:09:e0:cd:47:c4:e1:14:25:15:
                    ae:cb:d4:b1:76:74:ff:15:f3:b6:00:80:c1:21:3a:
                    b5:89:17:64:76:21:bf:ce:e5:08:cb:d3:81:d7:b9:
                    91:dc:3e:32:d0:49:cb:f7:a2:62:7d:40:bf:c4:b7:
                    45:d8:82:87:c4:47:14:a5:94:d7:e7:9d:59:42:22:
                    bb:c0:cf:3b:30:7c:e5:1e:46:f9:cf:9b:bf:a8:a5:
                    5e:7b:a2:31:cc:29:be:01:7a:ee:bb:99:a1:c9:08:
                    d3:bd:33:0f:8d:5d:1e:f6:27:95:d9:31:bc:db:6b:
                    9b:1d:80:f2:fb:00:fe:31:68:96:35:25:55:e1:bc:
                    f0:40:d0:8b:4d:89:3b:5e:18:99:51:83:dd:64:bb:
                    21:3d:0d:e8:2b:5c:05:a4:ee:e5:a9:78:87:bf:35:
                    b1:3a:d9:27:b4:72:d7:45:d7:17:fc:4c:4a:4d:f4:
                    5f:9b:ba:b8:47:2f:98:e1:af:0e:9b:a5:6b:8a:d4:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:31:D1:2E:49:D9:CC:FE:90:06:38:9E:A1:77:3A:3E:9D:BB:57:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a352691-b163-3237-9f00-0273d614046e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:ae:50:96:86:5f:f8:d0:ce:ae:fa:96:fe:3a:6d:26:44:
         c7:b2:51:8c:65:5e:de:4a:77:2c:99:09:82:dc:24:82:70:b1:
         cb:7c:35:4e:1a:62:26:4f:0a:18:b8:34:f9:9a:28:1a:76:a1:
         9a:58:6b:ab:29:73:8e:a1:30:0b:42:f5:fd:3a:16:72:6b:bc:
         a2:ab:72:2f:45:3b:f8:c8:e7:4e:bc:82:e7:fd:49:f1:2b:ec:
         82:12:4e:8f:c7:a3:9f:4b:17:8b:1e:a7:44:bb:23:24:39:45:
         03:64:b8:a9:d2:97:11:b7:ed:b4:4a:14:b0:61:75:cc:09:b6:
         94:fb:65:06:57:4d:ef:c2:be:76:f2:8a:ae:c3:08:42:e1:f1:
         51:7c:80:62:25:fc:81:4c:88:6b:b9:7d:42:80:d3:2c:ec:58:
         22:7f:bf:1f:6d:2a:07:cf:50:96:ee:30:4d:2a:f8:6f:d7:0b:
         bd:74:ae:50:ac:be:87:4b:4a:39:18:1d:52:4a:ec:83:8e:a5:
         6e:09:38:8e:26:8a:fe:43:40:c4:f9:80:5f:aa:83:7d:7d:65:
         06:a3:0e:24:22:28:06:4c:02:6e:a4:0f:db:1d:ea:86:ab:05:
         16:4e:cd:80:c5:2e:59:63:a3:43:df:a7:b8:3f:7d:01:9e:6b:
         04:f3:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-fra.rpki-client.org