Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/753a8887-0883-307e-b643-0a03e2201c7f.roa
File:                     753a8887-0883-307e-b643-0a03e2201c7f.roa (raw, json)
Hash identifier:          /bBzrRAC+QQLKCEOYLEJDewaIn4nSK5Vd2gZOc3mQa0=
Subject key identifier:   F3:4B:94:01:BD:AE:C8:C5:A7:67:4D:7D:CE:1C:FB:CA:4C:26:45:FF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F00B986387E2447FE4970
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/753a8887-0883-307e-b643-0a03e2201c7f.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        142.134.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:00:b9:86:38:7e:24:47:fe:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=65be458e-1363-4bec-9be7-11e8e09cf715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:0e:e6:2e:9d:ab:a6:70:9a:5b:5e:24:49:
                    11:41:30:00:af:d2:28:da:93:c1:c5:6b:7d:5d:71:
                    2c:fb:93:b9:40:58:6e:e7:87:51:71:b1:f7:5b:94:
                    92:c9:57:f4:d8:16:e8:21:69:c7:84:b0:ce:16:9a:
                    ee:4e:d7:1d:29:7a:0d:b6:b8:75:68:20:97:36:fe:
                    f1:db:b0:1c:fe:31:65:d2:9c:b7:16:12:7c:46:7e:
                    85:c9:8d:4c:21:66:5c:78:50:36:e1:ea:dd:e2:1f:
                    8a:57:81:1c:30:e6:c3:e1:7c:00:e3:d4:38:39:7d:
                    1e:aa:98:ca:ce:cc:fc:f7:f5:3f:de:22:db:7e:e5:
                    7c:78:b9:48:26:a4:07:1b:7a:8a:d4:5d:a5:f7:a1:
                    af:73:29:27:3d:80:0d:41:34:08:86:fa:47:a1:22:
                    70:95:fc:8d:4c:e2:77:2c:76:96:bd:10:b8:38:62:
                    d4:c4:57:e3:2e:c0:dd:c2:0f:69:55:15:6b:8f:bf:
                    2b:99:17:c3:68:51:83:99:9b:7c:2f:04:ca:ff:db:
                    eb:e7:de:e7:a3:59:6b:de:90:8c:1e:8f:6c:10:0a:
                    54:db:61:b2:78:6a:07:cb:68:4b:e4:c7:50:46:7f:
                    bd:0b:fc:e3:47:aa:72:00:61:b9:0f:02:47:4a:15:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4B:94:01:BD:AE:C8:C5:A7:67:4D:7D:CE:1C:FB:CA:4C:26:45:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/753a8887-0883-307e-b643-0a03e2201c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fc:e6:3d:4f:c0:42:c5:4c:51:c4:07:b0:46:7c:32:5f:81:
         bf:8f:38:5a:e1:07:06:69:b5:ba:bd:1f:df:98:4c:66:48:1b:
         b6:bc:6e:30:55:f9:4f:c6:23:b3:c2:0e:a7:31:14:34:53:39:
         3c:17:24:35:66:16:6c:19:59:2b:a9:1b:97:dd:86:dc:87:37:
         ca:85:f4:e2:79:e2:06:8b:84:30:c2:5e:0d:4e:39:d5:e3:1e:
         d3:5f:38:86:7a:20:e3:74:07:66:d9:4f:98:e9:76:9a:08:fb:
         03:2b:0b:23:03:30:f3:56:47:e5:e2:39:9d:4f:d6:da:18:d4:
         f2:a9:25:4d:38:60:00:6b:bc:f8:ac:9e:78:dc:af:37:d4:e5:
         60:38:83:c8:c1:2e:2e:4d:56:cf:bf:0d:71:9e:20:76:52:2d:
         92:41:db:47:33:09:5c:df:04:76:a5:3c:7f:80:3d:e6:0f:e7:
         14:99:df:86:e6:4d:40:a2:b5:9a:35:51:db:b4:0d:fb:56:40:
         57:d2:88:c4:5f:54:d0:c6:4e:d1:ac:5a:11:3b:5d:b9:44:e3:
         64:f5:b2:d4:d0:35:c7:ea:4d:e8:86:dd:31:7f:ec:c7:ad:29:
         2e:fc:18:f1:8a:0d:1c:ba:01:72:59:17:0d:87:3c:be:1b:d9:
         cc:13:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:11 2024 by rpki-client on console-ams.rpki-client.org