Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8abee5c8-c4ce-3cbc-bacc-81df6ffe3928.roa
File:                     8abee5c8-c4ce-3cbc-bacc-81df6ffe3928.roa (raw, json)
Hash identifier:          FeFPKLAhlAZjFjDCqSetw2HP30KsMnbIExwxkxmFD5Q=
Subject key identifier:   88:BF:13:22:74:08:48:3F:CD:36:EE:7A:C9:33:CC:DD:24:64:CB:C4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EF1A39CAF86A5B5F3BE40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8abee5c8-c4ce-3cbc-bacc-81df6ffe3928.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        142.117.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:f1:a3:9c:af:86:a5:b5:f3:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=5bda3a4f-6b0f-4096-9d77-7466173b014a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:13:8a:e2:cd:af:91:19:ae:2f:70:18:2f:
                    4e:ed:94:ad:90:ef:5f:39:4c:96:48:eb:c0:f0:b5:
                    52:9a:16:7b:87:2e:e6:cc:b6:2c:63:16:f2:e1:0b:
                    4b:5a:e1:5f:0e:1f:a9:67:d6:5f:cd:f5:70:90:7f:
                    32:80:6a:5d:df:01:ce:e8:e8:3c:1c:95:45:d7:d7:
                    d3:94:46:b0:e2:c6:a3:bb:e4:16:ef:da:95:43:62:
                    17:a0:1e:46:b3:cf:a0:af:34:34:f3:4a:ae:15:4b:
                    56:a3:15:61:6e:ed:e9:ae:3f:3a:00:8a:3c:e2:06:
                    e0:af:d8:d0:6c:bb:68:b6:a6:a9:5d:fb:66:a1:13:
                    37:6f:25:61:89:ae:a4:80:d9:4c:dc:4f:9e:88:6d:
                    a3:d7:f2:68:67:85:44:21:77:5b:bd:7c:9f:04:88:
                    61:7a:fe:3a:ec:61:4b:7a:02:2e:fb:2f:24:14:cf:
                    d9:9b:fd:a7:44:e2:86:29:1d:56:e9:c0:62:b1:a8:
                    39:0a:0c:7c:95:6c:89:07:67:d3:49:2b:c2:54:af:
                    3a:e2:c7:d0:06:37:40:65:54:d4:7c:15:40:1b:aa:
                    e6:9b:bc:10:c8:18:9f:81:82:b8:73:90:14:3b:d5:
                    27:8a:59:37:9a:4f:56:78:f6:24:de:09:12:0a:8a:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:13:22:74:08:48:3F:CD:36:EE:7A:C9:33:CC:DD:24:64:CB:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8abee5c8-c4ce-3cbc-bacc-81df6ffe3928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:a6:9d:50:49:0a:ca:87:0c:a1:e4:9c:79:cf:84:49:e5:
         af:d6:e4:68:9b:95:fd:ee:2b:aa:01:cd:94:51:59:1d:c8:b5:
         3b:f2:f8:2d:90:50:3c:24:da:e7:61:30:3a:21:55:57:22:c4:
         21:b9:bc:55:8c:b4:3e:3a:cb:fe:55:40:76:05:37:1e:1f:be:
         5d:13:21:85:87:f2:ff:29:c3:91:ed:8f:33:0f:e7:93:0b:88:
         77:86:5f:b7:29:78:91:54:4a:19:36:56:8e:73:da:15:93:82:
         b0:7d:cb:83:c5:26:f4:41:24:09:a8:d8:6c:42:59:3b:a9:b5:
         09:b8:7d:b7:44:fc:b1:22:fb:d9:6e:ab:ce:e4:06:c3:8c:64:
         11:4e:96:66:16:11:86:8b:3e:96:f0:87:fe:ad:6a:f7:a8:d9:
         c7:69:0e:aa:25:39:28:fe:37:4f:bb:84:6b:57:60:f5:d5:72:
         bf:ce:8d:2d:0f:98:fb:38:64:47:dd:1a:e9:cf:90:23:15:10:
         94:81:26:de:b9:8e:06:8a:2b:68:0e:d7:7f:08:2e:eb:3c:6d:
         62:84:a3:0b:81:08:ae:66:19:61:10:8b:f2:39:04:15:86:e5:
         47:aa:5a:5a:81:6e:3a:ba:de:6f:93:eb:8d:bb:42:bc:41:ae:
         4c:ac:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:11 2024 by rpki-client on console-ams.rpki-client.org