Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd09f0e2-20ba-3424-81db-818bb5feb7a6.roa
File:                     dd09f0e2-20ba-3424-81db-818bb5feb7a6.roa (raw, json)
Hash identifier:          AKwwEhe9DZd5Gv+4ojgjx24iq93SdPMudqlQWkMzcxQ=
Subject key identifier:   3A:40:DC:C3:BD:79:B0:5E:EC:9F:AF:FB:71:02:1C:FB:90:86:08:92
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F170665FE005D6128FFC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd09f0e2-20ba-3424-81db-818bb5feb7a6.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        142.176.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:17:06:65:fe:00:5d:61:28:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=47a8f2ef-8bbb-4357-8629-f596ea5009ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:69:b4:76:4e:f0:27:08:e6:a2:6f:66:99:
                    bd:a5:cc:0b:7c:d6:1c:1d:26:ba:3c:cf:70:d1:f2:
                    29:cd:a0:c3:5c:b6:25:11:a4:6d:9a:53:d5:19:3e:
                    89:35:bf:ec:13:d9:b5:30:31:c3:9d:61:eb:cd:4b:
                    ce:d0:86:1c:80:b4:02:25:60:32:bb:4b:8d:86:27:
                    dc:20:dd:a7:2b:19:7a:01:a9:02:8e:51:df:a9:e7:
                    0a:ff:11:7d:50:c3:cc:e2:4f:3f:13:7b:33:90:94:
                    67:80:10:27:0e:fe:fa:0f:bf:2f:cf:18:5b:96:6e:
                    d4:b1:32:2e:ac:eb:ad:81:7f:e3:75:90:6a:fd:3d:
                    b9:10:c9:fe:bf:8f:1c:2d:d3:cd:80:4f:80:76:bc:
                    3a:eb:ae:a1:78:b4:22:ed:ee:68:16:36:1c:fd:1e:
                    f7:88:b3:7c:03:36:b3:09:9e:0b:d2:fb:8b:86:1d:
                    b8:85:ab:a8:67:ea:02:3d:6a:58:dd:b4:e1:8d:42:
                    f7:29:6f:51:74:00:89:a4:10:b6:31:f5:f1:8f:8c:
                    cf:6f:29:e2:15:dc:e1:f5:f9:fe:2d:ac:24:c8:1b:
                    f5:67:e9:03:9b:f5:77:b9:e3:47:52:45:02:0e:3b:
                    0d:79:ca:d7:2f:e2:e3:46:64:fd:b6:97:f2:cf:de:
                    9a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:DC:C3:BD:79:B0:5E:EC:9F:AF:FB:71:02:1C:FB:90:86:08:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dd09f0e2-20ba-3424-81db-818bb5feb7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1f:be:4a:7c:5b:53:c4:6a:0b:a3:80:7d:79:85:94:ce:99:
         4a:cb:bc:9c:1d:04:c7:bb:80:ed:af:2d:41:80:c2:4f:51:85:
         56:6c:5a:71:67:c0:31:62:52:4e:28:c2:08:5c:9a:51:36:22:
         53:56:15:6e:56:dc:16:7a:9e:77:19:a6:ee:e8:ef:5d:81:b2:
         50:97:5c:a1:88:54:d9:46:fa:5f:f1:48:87:5e:1a:22:c7:06:
         4c:38:fc:df:1f:12:04:2d:d9:32:80:31:11:cb:d3:6d:dc:88:
         e9:c5:f0:17:bb:db:a2:96:c1:e2:cb:39:08:10:df:ef:1c:43:
         94:e4:f3:09:43:91:4a:ec:7d:09:3e:3b:92:78:b7:c4:2b:f1:
         25:ec:3d:df:3d:21:1a:8f:47:36:1c:3c:c3:a0:6a:59:21:6a:
         84:73:d3:d5:08:32:51:9a:5e:7f:c4:b1:9b:c7:b6:95:db:7a:
         43:1e:8b:6a:3b:4d:13:ec:f1:3d:26:5e:68:d2:3d:26:2d:6d:
         88:15:43:a3:b1:5e:f4:37:01:ee:3d:cb:9e:3b:e0:c7:e4:f6:
         1d:c3:57:70:e4:d8:44:cb:cc:71:76:64:d0:2a:13:60:bd:e4:
         99:1e:65:8f:7f:69:5b:27:97:ac:04:c5:70:99:57:ab:9d:2a:
         9e:55:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org