Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1b6fcf3f-0a44-36a4-b646-50d5b3f3357e.roa
File:                     1b6fcf3f-0a44-36a4-b646-50d5b3f3357e.roa (raw, json)
Hash identifier:          nJ3Te/XlqfvcfvKbzvSuriMf0+0COm+7p1JLcnkU5CQ=
Subject key identifier:   A8:02:BF:D6:18:F2:81:29:69:C3:9D:61:2E:9E:D4:52:8C:6A:3D:43
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F105C6AC118801EF84840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1b6fcf3f-0a44-36a4-b646-50d5b3f3357e.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        142.163.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:10:5c:6a:c1:18:80:1e:f8:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=cb0a1402-340b-4a11-ab30-d007ca934409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:43:58:22:4c:b7:f3:f6:e6:14:ab:32:43:
                    63:a5:c3:0c:95:f8:9c:3b:92:8b:07:a2:8c:ae:37:
                    b6:cc:c0:13:7f:a0:b7:2d:da:f6:68:a7:d5:50:bb:
                    46:9d:44:35:a2:5b:50:c9:dc:1c:2d:50:bb:4d:5d:
                    14:75:99:90:78:0a:af:15:54:ea:fb:fd:6f:d5:19:
                    7d:f5:32:6a:dc:c7:1b:0f:df:00:27:fd:e7:42:eb:
                    e4:5d:c0:e3:14:ad:b4:90:f3:37:ca:ce:73:0f:cc:
                    7e:af:b6:75:f9:ff:fb:0e:ea:40:39:8e:09:26:d1:
                    63:0b:f9:eb:7c:3a:ab:e3:4d:12:f2:77:15:3f:c8:
                    57:67:1a:10:67:e1:d7:ac:89:db:86:8a:dd:84:62:
                    87:d3:09:53:38:b3:3b:56:8d:50:08:6f:cb:dd:65:
                    9f:01:d2:08:81:a7:6f:6a:16:cb:56:4c:2c:88:b7:
                    33:20:34:36:c6:4d:d4:04:6a:d5:02:4c:e8:25:3f:
                    58:5a:7c:f1:95:9e:dd:6c:3f:cf:c9:85:60:e5:0e:
                    3f:d3:8d:ce:a8:e6:6d:85:50:84:57:b6:14:c0:b6:
                    cb:68:6c:42:f7:a1:99:ee:0d:09:8a:bc:21:87:44:
                    38:b6:3e:72:65:0b:1d:d3:35:32:8e:ba:65:8f:80:
                    05:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:02:BF:D6:18:F2:81:29:69:C3:9D:61:2E:9E:D4:52:8C:6A:3D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1b6fcf3f-0a44-36a4-b646-50d5b3f3357e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:08:49:ad:24:0a:a6:b4:e3:bb:79:72:d3:35:b4:7a:22:ae:
         34:07:bd:7f:1c:04:a7:50:a8:e4:03:63:da:a5:00:9f:78:1d:
         35:5f:88:a2:1b:09:f9:e2:eb:25:02:fc:6d:70:ae:28:70:ab:
         6e:a3:c7:34:29:3c:4a:e4:fc:a0:20:03:ad:0b:97:41:5b:65:
         34:4a:b9:f3:fb:56:2c:c4:b0:ef:af:25:82:1f:93:96:13:a9:
         bd:a7:8a:0c:19:5f:e8:94:8b:74:95:23:9c:1f:da:25:f6:cd:
         5e:e8:3e:82:73:79:44:07:af:96:e6:4a:4c:46:51:e8:41:76:
         68:e8:e2:0b:fb:45:9c:59:a7:3f:c5:86:1a:6f:9b:5c:d1:9b:
         68:07:ec:be:9b:4c:04:62:2a:f9:67:aa:49:a6:3e:fe:69:ad:
         98:c5:99:af:ca:2d:37:45:12:e5:80:13:50:0c:5f:38:1a:7d:
         e5:5d:02:2a:57:aa:b5:ad:c0:bc:73:60:7a:c9:ba:a3:bd:f4:
         74:36:a7:fc:4e:a1:40:57:ae:b8:40:a1:56:9c:7c:19:d5:1e:
         c4:20:64:5a:71:53:a1:11:e9:6f:cf:12:1e:8f:5a:35:9f:b4:
         94:28:c8:24:d4:d3:36:33:79:d0:01:9c:56:14:8c:2d:b1:9e:
         ba:89:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org