Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53fbe28d-e4ba-3128-96e5-bc09c754f19b.roa
File:                     53fbe28d-e4ba-3128-96e5-bc09c754f19b.roa (raw, json)
Hash identifier:          5gsnSqycTwLqsAOx3tZS0FPzv8bopkKh5GsXcl97R7g=
Subject key identifier:   A9:02:C4:C8:98:D2:D8:32:3A:1B:CB:F5:E9:B1:A8:76:7C:93:D9:C8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B38833A219A9FC3D6DB2C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53fbe28d-e4ba-3128-96e5-bc09c754f19b.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     855
IP address blocks:        142.167.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:88:33:a2:19:a9:fc:3d:6d:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=e5d30abc-fb8e-4c4e-8a44-540870e1e869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:43:4a:2c:70:e2:4b:0f:de:c1:91:77:e6:
                    85:37:b0:29:40:40:f9:f5:3c:78:a2:2f:5f:82:9c:
                    e7:de:0e:bd:66:02:8d:92:c0:b8:73:cf:2a:d2:94:
                    b8:45:5e:74:39:b0:69:e3:f8:da:6a:21:b1:f0:5c:
                    a6:c4:03:98:79:82:df:d7:75:9d:69:6f:1b:dd:ac:
                    ea:24:63:ad:f2:f3:b7:82:04:bb:13:a4:1e:df:01:
                    44:80:d0:f7:e7:48:1a:16:da:59:27:1e:43:37:81:
                    28:da:dd:d8:95:57:11:76:d2:ba:66:46:03:3f:28:
                    75:76:7d:4e:6e:bc:2c:d9:82:12:38:15:7c:fe:59:
                    2a:7d:b8:2c:9a:32:d7:11:fc:97:e0:7a:1d:79:3f:
                    89:0c:b1:95:55:af:4f:6a:fe:3a:c4:9f:e7:1c:16:
                    af:68:3a:b8:3f:5f:a3:72:8a:2d:4a:ab:f1:f6:12:
                    45:17:23:41:e4:f6:ab:63:42:a8:d6:f1:a6:fa:9e:
                    f2:29:e6:af:4d:78:3f:64:91:61:6e:b3:18:ab:e7:
                    e3:3a:12:c8:3c:50:60:a0:b5:d2:78:f0:aa:93:30:
                    d5:24:d2:ca:30:46:4b:d7:da:5f:6e:56:56:aa:f9:
                    9a:bc:e7:76:34:17:01:f4:6e:a5:58:fa:7b:c1:3a:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:02:C4:C8:98:D2:D8:32:3A:1B:CB:F5:E9:B1:A8:76:7C:93:D9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53fbe28d-e4ba-3128-96e5-bc09c754f19b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:23:73:c1:8d:90:34:11:20:af:fd:aa:3a:d5:63:93:d6:cc:
         d5:96:4c:e7:6d:10:c3:3c:4c:7d:82:19:b5:92:c5:6c:5d:57:
         39:91:4c:c5:56:69:82:0f:52:e5:f1:f9:97:70:6b:be:9b:e9:
         e9:3b:01:b2:f8:2d:a1:5d:7b:44:c4:41:72:f2:af:a9:fb:0d:
         30:18:e6:c1:6e:e7:9a:45:0a:29:7c:da:7d:ee:e7:d8:fd:94:
         bb:ef:c5:3d:7e:a7:08:75:19:1e:ca:3e:1c:83:73:e2:4e:64:
         c1:6a:b4:3a:e0:7c:5d:ae:00:d6:e2:41:b4:ae:69:19:f1:ba:
         e4:92:b2:3c:52:15:5a:d2:44:37:0c:17:9f:62:23:6b:09:3d:
         10:28:bf:27:13:8f:7e:1c:3a:f4:02:bb:f6:27:85:e7:1b:88:
         ff:03:01:ff:0c:c7:25:63:2e:df:0c:64:fc:47:67:e4:0a:ee:
         0f:3c:55:d6:1a:3f:f8:f5:f5:ba:fe:e1:41:d4:88:37:0e:74:
         81:44:23:ef:e1:f6:da:75:19:55:e1:3c:09:59:c1:a4:9b:49:
         ff:ba:9a:7b:7e:1b:c9:ac:64:66:88:28:cd:b8:16:c6:95:62:
         4b:28:46:80:ac:3b:25:bb:8a:61:6e:78:b7:f1:44:db:47:c5:
         92:b8:4d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:59 2024 by rpki-client on console-fra.rpki-client.org