Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cd91ae2-c3c4-30f8-96cf-9c29927e03b2.roa
File:                     1cd91ae2-c3c4-30f8-96cf-9c29927e03b2.roa (raw, json)
Hash identifier:          Zqi73rsVq2wt3kmPyCCTy7qJAZmP9/dKMtWBbM5Ytwc=
Subject key identifier:   0E:1A:52:23:8D:0D:8F:AA:3A:47:D2:45:5F:AB:2E:95:A0:58:1B:B3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B397BADCEAE1620AFA9500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cd91ae2-c3c4-30f8-96cf-9c29927e03b2.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.187.0.0/16 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:97:ba:dc:ea:e1:62:0a:fa:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=a889502b-d27f-44a6-96af-f0e138382266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:98:72:5b:d7:df:ca:93:cc:54:0a:9f:d6:
                    67:a3:9b:42:65:e7:bf:7e:5b:70:7f:9f:69:81:e8:
                    9a:b0:8c:32:d9:e5:8e:91:b4:17:37:ec:57:e1:8f:
                    98:66:68:a9:c4:63:e1:73:c0:cb:e6:97:db:a3:db:
                    76:e8:c8:5a:0e:f1:57:f9:bc:e2:3b:5f:14:c7:e7:
                    d8:f2:d9:a3:93:ed:bc:7d:df:0b:d6:3b:b9:4b:e9:
                    72:e1:ea:ce:68:a9:0c:dd:dc:5e:a4:0d:1c:7a:d6:
                    7c:89:a9:ad:a8:77:c5:32:de:c3:e8:2d:34:42:cd:
                    25:60:bc:67:e8:67:e0:d4:3e:cb:e1:6b:9f:11:c5:
                    dd:ce:86:e4:28:1c:05:38:3c:09:ae:6f:6e:48:9f:
                    56:2c:6d:b8:ae:58:1f:74:0a:aa:01:27:55:e4:cb:
                    b0:3a:d9:54:dd:91:4c:b4:20:41:d6:d8:d8:69:74:
                    5b:5d:d9:9a:12:de:cc:3c:97:a8:51:65:ae:86:46:
                    1f:0e:23:d0:ff:a5:7e:31:6a:7a:8b:34:55:e1:dc:
                    00:1a:bd:9d:fc:76:96:77:c4:68:54:23:e7:3a:5c:
                    6d:98:9b:1b:91:92:9b:e0:f7:7c:d8:44:a4:5a:c6:
                    95:63:30:76:74:22:c8:36:88:d2:73:26:a6:1b:31:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1A:52:23:8D:0D:8F:AA:3A:47:D2:45:5F:AB:2E:95:A0:58:1B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cd91ae2-c3c4-30f8-96cf-9c29927e03b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.187.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:a3:04:b1:5f:dc:e4:b4:a0:b8:be:0b:4f:57:b6:71:1e:
         7f:05:d6:6f:ab:8a:d9:88:dd:8b:19:e0:47:69:9e:b7:f3:e1:
         5e:3b:65:1a:74:1a:06:81:27:4f:43:3e:46:bd:c0:38:97:8c:
         70:de:2e:46:2e:4c:8d:75:22:af:41:6e:39:c0:fe:98:ff:33:
         40:3a:ec:85:84:8f:31:32:35:cb:50:76:b9:4d:48:a6:7e:a8:
         a0:ff:4e:b7:d0:6e:2e:85:a0:30:57:85:80:3b:ef:48:07:f0:
         13:23:48:47:3a:ca:b8:c3:94:bc:ad:c9:b6:e9:14:3f:66:4a:
         ed:c3:db:b8:3c:d7:8e:e9:91:d8:3a:4d:01:32:8d:b6:d7:24:
         9f:db:6f:71:80:b7:eb:4d:dc:9d:62:99:b0:5a:75:e0:6b:86:
         e8:48:5d:3c:16:bc:d9:34:06:1a:0e:29:92:0e:a6:83:a6:d3:
         f8:34:b3:a7:7d:8c:29:e5:30:3b:f9:dd:9d:fa:e6:86:71:98:
         ab:52:76:78:cf:ee:8f:0c:bb:b3:d3:19:82:46:ca:26:01:fc:
         8d:b9:98:b7:c3:f4:1f:ce:df:0f:7c:c8:fd:fb:68:25:e7:7e:
         89:a0:56:3e:7c:4a:0a:c0:9c:80:6a:25:c0:84:a0:35:a0:2e:
         8e:82:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:53 2024 by rpki-client on console-fra.rpki-client.org