Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf9d3091-2ea7-3775-b80e-8873dfb55ef6.roa
File:                     cf9d3091-2ea7-3775-b80e-8873dfb55ef6.roa (raw, json)
Hash identifier:          au7SVPaVJ2dkSK/Y8Ihp2Jb1BGDLE4CzchHfLLdqUMQ=
Subject key identifier:   48:3A:15:68:4D:3A:54:2D:CC:82:04:FF:B5:FF:76:10:41:00:4D:9A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F133F4F97D49ACB8D0980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf9d3091-2ea7-3775-b80e-8873dfb55ef6.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        142.166.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:13:3f:4f:97:d4:9a:cb:8d:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b26bf147-c363-4c59-8691-bd1c9ba81694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:bb:77:ab:f3:53:ff:4b:c1:5e:0b:46:62:
                    60:b1:92:53:dd:b6:fa:c3:0a:aa:fe:1c:79:44:b9:
                    36:c2:2a:09:6b:68:85:45:b6:66:22:18:2a:77:44:
                    ea:10:a4:ea:e1:4f:e9:ad:21:91:03:ad:30:f5:75:
                    f1:31:54:81:07:e3:c3:e8:b3:e1:46:3f:ce:4c:0e:
                    68:79:59:43:4b:f5:4d:3a:54:17:e1:2f:b9:63:78:
                    05:db:9f:71:88:1e:c6:96:65:fc:76:62:a1:c2:2e:
                    07:20:17:d4:7b:85:ed:b3:df:6a:b4:f3:34:cb:e4:
                    c1:95:fd:5d:f5:76:32:5d:90:89:ac:d7:cf:8a:63:
                    08:b7:05:bd:3b:be:f8:50:69:0a:5b:b7:9b:f5:d5:
                    af:8b:3a:16:f2:1c:6c:8e:3d:30:25:9d:b2:55:8c:
                    5f:af:8a:e2:c0:58:26:10:73:8f:09:38:ae:20:63:
                    c4:1e:5d:2b:56:17:a3:c8:36:36:99:17:e2:70:3a:
                    b5:29:6e:ed:4e:f2:03:4d:af:15:1d:50:98:5f:d2:
                    9f:31:16:81:69:d0:36:a1:f5:4c:07:af:19:e1:8e:
                    a0:e8:a5:c0:df:d8:9f:3e:11:f5:2f:c1:17:af:a7:
                    bd:fa:a1:ff:3a:c6:a6:98:af:82:02:46:c5:ba:82:
                    e8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3A:15:68:4D:3A:54:2D:CC:82:04:FF:B5:FF:76:10:41:00:4D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf9d3091-2ea7-3775-b80e-8873dfb55ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:5e:f5:4b:45:7f:71:20:23:b5:b3:ed:df:4a:0c:46:c7:
         16:fc:7c:23:ab:5b:40:fb:b9:e0:a4:e6:c4:a6:2b:92:4f:e2:
         dd:9c:58:e2:fe:d3:cc:a2:9f:ec:24:4a:f7:16:d7:73:af:30:
         e9:54:4b:19:57:a4:a3:1b:43:88:60:3a:9e:e3:d6:9a:aa:14:
         bb:e9:73:86:7a:c9:e3:92:dd:e2:ec:b0:59:8a:94:10:89:3e:
         5f:07:d1:8e:f9:d8:68:48:78:f1:79:fd:2b:1a:db:c6:c8:ce:
         d5:3e:43:85:23:20:e1:f2:3a:d4:4f:f7:d3:33:a8:59:f0:b6:
         2a:fc:86:93:f4:cb:1f:7f:0e:3f:ed:0d:b9:90:ff:1c:7f:84:
         60:08:f1:c6:83:72:33:fb:96:01:09:c3:92:a6:ba:b4:b1:1e:
         1a:f0:13:fc:b6:84:30:74:74:fc:b1:b1:33:3b:cb:79:25:80:
         76:dc:fe:47:7f:08:6f:f0:40:5e:7c:5b:6b:8c:9f:5a:15:6d:
         8e:83:92:a3:25:2b:da:a8:07:4d:99:af:c5:99:5f:17:a4:fb:
         71:ac:f9:11:e9:59:c2:c6:9a:1b:38:d4:49:e1:9e:10:12:ba:
         51:31:51:d0:65:02:d3:8c:32:45:e4:aa:26:4b:8d:b1:30:34:
         a6:09:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org