Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c250c21-8f30-3596-9e92-a5854a797136.roa
File:                     9c250c21-8f30-3596-9e92-a5854a797136.roa (raw, json)
Hash identifier:          S5GUf03hdIMfVLaV9gxyoAKvwKJ0WRqYFLTE0b2xyf8=
Subject key identifier:   B4:0F:BB:0B:20:EF:51:92:18:CD:E0:C1:C3:ED:04:FC:3C:39:9C:B6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA11B9F7096F486325DFA8C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c250c21-8f30-3596-9e92-a5854a797136.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     855
IP address blocks:        142.134.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:b9:f7:09:6f:48:63:25:df:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=9313b37e-aa67-4dba-bcdc-d7ee291c20ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:d0:66:68:94:71:b8:7c:1e:cf:63:90:03:
                    9c:3b:38:98:4d:f8:10:06:f0:19:b7:de:21:65:f8:
                    9b:bf:65:37:04:fd:cd:5f:58:31:41:81:bc:c9:d7:
                    2b:b2:9f:f1:76:15:56:fc:ad:56:1e:4d:a8:30:af:
                    2e:eb:81:32:93:21:32:a3:d1:96:bb:c3:59:6e:71:
                    3a:c5:68:fa:bb:6a:e1:8e:48:3c:14:b7:f5:19:19:
                    5a:08:dc:90:93:62:13:7e:fd:92:53:e2:20:d3:cb:
                    0d:62:4c:72:e3:c9:47:c9:72:7e:e3:88:e1:c2:ef:
                    7e:9b:c4:5c:f5:82:2a:b9:77:69:3a:67:07:c9:25:
                    15:e8:34:3b:05:a2:18:8e:de:7f:aa:dc:1d:29:76:
                    99:ce:80:80:4b:ad:57:05:71:27:a3:55:56:df:e6:
                    34:bf:fc:b2:3c:6f:5d:3b:c0:80:cd:f3:d5:d8:05:
                    8a:6b:57:b2:60:72:ef:c5:21:1b:48:49:ad:2b:e3:
                    83:03:af:3a:86:22:f0:3d:05:8d:69:14:f9:dd:0e:
                    b1:9a:05:fa:e7:5d:e2:0a:67:dc:5f:2e:08:b4:24:
                    bf:8d:a7:d6:db:9c:b1:db:0e:b6:e1:1c:6a:db:c5:
                    ac:74:4b:95:45:ab:45:66:f9:30:c6:4d:44:81:ed:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0F:BB:0B:20:EF:51:92:18:CD:E0:C1:C3:ED:04:FC:3C:39:9C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c250c21-8f30-3596-9e92-a5854a797136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a5:c8:ee:cc:c2:11:95:c9:9e:bb:83:de:52:6d:7a:b5:b1:
         5d:aa:0e:e0:81:19:33:30:a5:3a:89:be:82:63:eb:77:5b:4f:
         cd:1d:b4:1c:bf:e9:9d:8d:3f:3b:63:b7:58:39:98:5a:01:8d:
         d2:1d:c6:e9:2f:e8:ca:f0:38:9d:17:0f:51:ca:36:be:22:e5:
         92:d9:7e:2a:19:47:29:1b:52:cc:ff:25:d0:0c:b4:5a:d9:41:
         26:64:38:70:97:25:25:0a:2f:4e:cd:0e:1c:f0:80:f6:0e:76:
         0f:72:52:37:99:fc:33:4c:42:aa:fd:36:97:8d:83:10:9e:15:
         c6:fb:e3:6f:ae:58:a7:bb:c4:a3:c2:f7:2a:8c:10:a8:47:04:
         13:a5:63:8f:da:13:e9:cd:6f:e3:39:98:44:e1:10:22:8a:65:
         92:b2:fe:85:a7:62:47:d0:b5:2d:ca:31:d5:e9:69:c6:fe:c4:
         b2:ee:4b:43:10:91:e1:c6:03:24:ef:6a:0c:2f:84:93:9a:92:
         b8:14:be:e4:a6:a7:cc:e8:eb:a1:77:fe:30:e3:ab:18:cb:69:
         e9:c7:b7:1a:f2:88:f5:df:fa:5e:5f:0e:19:bf:8a:a8:df:16:
         31:08:07:c0:9b:4c:71:89:a7:86:3e:ae:28:03:6a:fa:22:0e:
         a5:ff:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org