Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0021b4e-31be-39c7-a757-2d9e3899fede.roa
File:                     f0021b4e-31be-39c7-a757-2d9e3899fede.roa (raw, json)
Hash identifier:          Lr2rW5oE1fsQv0xyMLsX00nJQy/bW7sagEtUSVAY6Co=
Subject key identifier:   54:3A:A5:87:E5:44:E2:43:5D:0E:43:49:72:BB:5E:75:9B:A5:71:51
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B398A61E9130019DFAEE30
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0021b4e-31be-39c7-a757-2d9e3899fede.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.188.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:98:a6:1e:91:30:01:9d:fa:ee:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=789f8e02-00f0-43e7-8423-1548c5486cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:78:03:de:e9:64:5f:d8:08:bd:6e:61:71:
                    48:58:9c:fb:ec:a4:71:33:2b:e7:34:8d:81:2f:40:
                    b6:48:5c:11:71:0a:b5:61:bd:9f:8c:95:78:fa:aa:
                    b3:8a:56:b2:29:6d:c3:0c:bb:c2:63:32:ea:54:40:
                    6e:b6:10:ec:dd:e2:ea:66:51:8f:b1:31:35:d3:b5:
                    cc:d7:fc:ca:42:98:81:bd:72:8f:b1:5d:a9:6c:f4:
                    55:84:6b:ba:7c:52:80:07:4c:fc:41:5f:9a:03:9b:
                    a4:3a:c1:d7:79:f1:cf:e7:eb:ed:a2:05:79:69:b8:
                    53:64:73:f0:c5:48:3d:1f:ae:63:fe:ff:96:7c:bd:
                    68:a5:75:a6:9e:c6:4e:17:a6:60:bb:23:fe:bd:b1:
                    1d:04:2e:55:ff:aa:6d:dc:9c:d3:3c:3a:24:81:5e:
                    11:9e:71:27:69:84:23:38:05:39:e3:b3:fd:33:f6:
                    08:69:01:e5:f6:cc:6a:7e:24:61:07:98:61:0d:7f:
                    db:12:0b:47:16:c7:c4:64:dd:45:02:10:65:ba:c5:
                    bf:f7:47:66:fb:db:1f:fe:8d:ea:36:71:60:04:0b:
                    cd:e8:2d:3f:92:d4:84:df:5b:a1:af:2c:2e:a2:88:
                    77:72:29:07:f8:43:1e:fd:e2:3c:a5:bd:d4:28:44:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3A:A5:87:E5:44:E2:43:5D:0E:43:49:72:BB:5E:75:9B:A5:71:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0021b4e-31be-39c7-a757-2d9e3899fede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:61:45:e4:74:d6:1f:b8:cf:bf:80:a4:3a:57:f9:e5:ea:fe:
         67:3d:8d:b3:a1:09:34:0d:3a:04:6a:3b:5a:71:6f:a5:84:dd:
         03:de:36:1f:84:57:b7:90:bc:93:65:c5:d7:a5:0b:31:f0:d8:
         e2:09:2d:aa:67:62:33:2a:b8:62:d3:f5:1c:5c:b6:0a:38:ae:
         d7:07:10:95:d8:9a:30:98:d8:ac:23:52:c8:5a:c4:96:1f:d5:
         e2:e4:db:24:42:45:28:94:61:72:b3:e4:e4:6c:59:e7:d1:8f:
         51:ad:d1:c5:0f:31:19:d2:d3:74:42:b2:f2:f0:51:ea:91:7e:
         99:11:bf:7d:4d:9f:77:f4:5b:02:eb:b1:2a:80:df:58:89:94:
         59:f7:c5:ec:53:47:57:8a:68:ac:18:07:1a:0c:8f:58:86:0b:
         12:dd:5a:92:84:e2:b5:75:3e:a1:e0:2b:81:3d:84:23:f1:8e:
         21:02:fa:c0:84:0d:6c:3e:11:35:76:83:b2:10:62:66:29:50:
         e4:e4:73:89:24:55:71:fd:81:02:56:73:0d:94:45:b2:80:8e:
         a0:d8:fe:9b:3e:b0:8b:d1:cb:c3:58:9c:47:af:33:1f:7f:ec:
         eb:3d:08:e9:3c:58:91:fa:d2:5b:7f:9a:e9:97:33:4b:9d:7c:
         2e:8f:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:52 2024 by rpki-client on console-ams.rpki-client.org