Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67ba62a8-92a8-3eef-92f7-61e1d889d98a.roa
File:                     67ba62a8-92a8-3eef-92f7-61e1d889d98a.roa (raw, json)
Hash identifier:          1xO0O5RLubKd12GSsxUgyM/MRnrgsZMNni72iqMpk94=
Subject key identifier:   21:00:03:E9:B4:E7:D8:D3:06:28:CA:6F:26:7B:E6:01:E8:8F:7A:79
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EEDF688D8F5F69C7D00C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67ba62a8-92a8-3eef-92f7-61e1d889d98a.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        142.114.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:ed:f6:88:d8:f5:f6:9c:7d:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=1d06f027-3600-4bb7-96f8-9609161a8abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:05:92:6e:46:11:59:58:69:37:d6:71:b2:2c:
                    85:bc:2d:95:dd:2d:ea:fe:27:51:63:2e:5f:b3:6a:
                    1e:e7:b1:8e:b2:43:d0:6d:35:eb:0f:73:39:37:06:
                    46:3b:20:6e:2e:81:cc:cc:44:c6:80:d4:77:41:9d:
                    3d:37:a5:f2:30:93:10:f1:d7:5c:48:05:76:a6:81:
                    1b:18:24:e4:00:00:88:c4:31:42:a3:fa:2a:cc:b4:
                    5d:19:ce:e1:be:f2:18:09:4c:b7:c5:c1:71:5f:b2:
                    f2:e9:51:d7:73:47:60:bf:f1:27:73:16:18:34:86:
                    44:ad:de:9d:b5:a4:48:2e:75:4f:75:a4:fe:f3:06:
                    72:b5:16:8e:cf:1a:2b:38:06:0c:9b:c5:13:fe:a9:
                    7a:c9:c1:b7:f8:54:07:09:d2:66:85:c0:b0:d6:aa:
                    dc:fa:09:6b:61:df:fd:6e:ca:08:ea:2b:9f:31:1b:
                    2f:28:ce:f0:19:2b:04:bc:ab:91:02:04:03:df:1a:
                    53:33:36:38:53:cd:6c:2b:eb:64:80:a1:e1:13:1b:
                    8e:6e:5b:e9:94:a9:50:a8:c2:69:19:10:79:21:bb:
                    76:db:1a:cc:94:cd:39:0c:53:ce:b5:5e:bb:6e:ae:
                    d7:68:8a:8c:d9:57:c1:19:62:e0:13:0b:85:29:9b:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:00:03:E9:B4:E7:D8:D3:06:28:CA:6F:26:7B:E6:01:E8:8F:7A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67ba62a8-92a8-3eef-92f7-61e1d889d98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:b7:ea:5c:d9:33:37:68:b0:b5:7d:e8:4d:00:64:ce:f3:
         69:a2:57:ee:00:6c:7d:df:8e:1c:e8:48:8c:9c:05:06:22:8f:
         cf:43:53:0b:1c:64:d0:7a:34:08:09:3f:02:9b:b5:c8:94:fa:
         72:45:0e:a0:a4:04:fa:d2:9a:73:2f:9e:79:dc:41:f6:f0:8e:
         f9:2f:fb:96:46:32:42:31:12:bf:f7:b5:0e:ce:77:16:fa:bf:
         65:46:66:d0:bb:d7:e9:ad:cf:21:4e:1f:48:a0:64:91:e4:82:
         de:80:5c:83:64:25:fe:21:32:3c:2a:b6:b3:6a:e8:db:55:35:
         4f:a7:76:24:3a:b1:ad:51:d1:7a:fa:f3:e4:38:9a:33:da:71:
         a1:9e:56:e9:a4:bf:76:20:2b:12:2f:09:b2:f6:ee:94:eb:fe:
         e4:4a:22:aa:d8:0b:fa:c2:a3:ba:b4:8d:68:0e:06:28:7f:e9:
         47:50:13:1f:50:19:61:ab:d2:26:6c:c4:99:1b:38:43:51:4d:
         34:9f:02:12:09:29:25:48:02:cf:cc:5c:b3:a2:a6:61:5b:eb:
         51:8b:4d:fc:8c:b5:7f:89:af:60:a2:a3:63:0d:ae:e0:5e:d0:
         0f:9b:a6:06:5d:9e:83:39:5e:64:03:fd:67:2e:f3:be:42:13:
         7f:16:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org