Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa
File:                     c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa (raw, json)
Hash identifier:          TdJKPG0aaXnFwYfpZUU6UCEifSEVYC4WJSyOnUcRf38=
Subject key identifier:   B7:B5:25:58:E2:48:44:95:8E:ED:FA:AA:3D:DC:A4:03:E1:42:9A:15
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134337ADDF45C52734F7C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa
Signing time:             Sun 09 Mar 2025 10:20:41 +0000
ROA not before:           Sun 09 Mar 2025 10:20:41 +0000
ROA not after:            Sat 07 Jun 2025 10:20:41 +0000
asID:                     855
IP address blocks:        142.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:33:7a:dd:f4:5c:52:73:4f:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:41 2025 GMT
            Not After : Jun  7 10:20:41 2025 GMT
        Subject: CN=4e68b7df-94c8-4c4b-965a-0b2dea17c350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1f:af:87:ca:5a:a1:ea:59:4b:e8:13:25:93:
                    81:d2:77:c7:15:16:52:eb:51:e9:16:ce:96:6f:12:
                    f0:16:af:17:c3:63:d2:de:b2:f8:ba:e3:3b:28:81:
                    fe:6b:39:ed:53:50:87:26:42:5d:5f:c3:a0:a3:50:
                    1a:81:38:80:d0:4e:e3:2d:07:b0:86:b0:ce:bc:b5:
                    c7:a6:8f:fc:30:e6:ed:96:4e:f7:65:0d:5a:90:01:
                    c3:f9:16:e2:2e:65:07:93:2b:79:e3:d5:41:11:0f:
                    1e:25:8a:2c:2a:82:28:1e:e0:a1:7a:b2:17:65:22:
                    8b:6e:f5:3e:35:4b:b2:66:3c:65:1d:97:d4:5e:66:
                    90:73:c7:50:cf:21:df:d6:8d:d2:27:ea:54:24:77:
                    4f:f7:07:6d:60:fd:f3:e8:f4:da:e4:81:fa:07:22:
                    cb:6a:fd:c0:a7:05:e3:f4:fb:f7:ec:cb:68:e5:83:
                    e3:57:f2:71:6e:9f:f1:47:80:54:7c:33:f3:88:97:
                    3a:2a:e3:8b:3c:4d:30:95:e3:6d:c3:97:4f:0f:09:
                    23:fd:bd:0d:14:6f:9d:3b:0e:1f:01:46:e5:1d:67:
                    ec:d9:df:60:20:f3:94:24:4c:46:22:d9:36:94:d4:
                    c1:fb:eb:b9:21:3b:95:66:7a:3f:79:6e:a4:cf:b6:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B5:25:58:E2:48:44:95:8E:ED:FA:AA:3D:DC:A4:03:E1:42:9A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c5669750-9e14-39b7-a0fc-71a0f8fd57a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:2a:74:ce:18:21:dd:43:92:48:21:8a:b2:54:3e:68:13:
         ea:27:21:c4:2b:be:a9:c5:35:43:f3:69:c6:10:39:09:ea:06:
         38:9d:73:18:de:b4:7e:0b:04:45:b6:bb:b4:c3:b8:a7:fa:27:
         0b:a8:18:d7:a8:02:16:c7:b1:73:d2:c6:43:ed:1f:71:9f:3b:
         c4:00:2b:99:64:57:83:c7:4e:dd:57:6c:6e:55:e9:bb:c7:63:
         fb:72:a7:0e:38:9b:fd:9a:61:df:5a:a0:ad:bf:67:92:6e:a5:
         ab:68:2e:99:3e:c7:a1:58:fa:85:cf:96:f2:54:36:d0:72:ab:
         66:8c:ef:69:48:e7:d6:23:69:08:f4:1e:b9:7c:bc:ff:20:b1:
         36:e8:b1:45:83:88:96:38:c8:e0:47:8f:cd:bd:5a:e0:3c:d7:
         b8:d4:5f:c3:06:37:ea:e3:00:38:05:c6:6d:4e:2e:51:3c:f4:
         86:5b:23:ac:ca:1a:27:82:2e:f0:ce:54:c6:4c:c1:ef:ff:ae:
         da:cc:48:91:6b:b1:7f:03:11:e0:b6:11:5c:8a:0b:6c:ff:ec:
         0e:a7:5c:02:a9:13:3b:21:fc:e5:b8:28:df:d3:b4:70:2b:79:
         f5:db:f7:c7:82:2f:17:86:8e:e3:cb:c1:6c:29:d9:12:aa:a1:
         3b:1b:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:58 2025 by rpki-client