Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/213919b0-0aa0-34d8-a6ea-47ff49d36b83.roa
File:                     213919b0-0aa0-34d8-a6ea-47ff49d36b83.roa (raw, json)
Hash identifier:          Ns73nwbnFi03PQr1OmklCZZcjUgjhVroypfC7ThEPQ8=
Subject key identifier:   37:6B:C5:4A:FB:E2:C0:5F:AC:E8:7B:09:A9:98:A3:3B:D6:69:BE:67
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3559172EADF67663B4F60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/213919b0-0aa0-34d8-a6ea-47ff49d36b83.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        76.67.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:55:91:72:ea:df:67:66:3b:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=f05621bc-58ee-4f99-826f-25c26f982f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:e4:ee:70:61:fc:17:1c:fd:3d:a7:49:ae:
                    9f:7f:4b:89:91:14:17:11:68:d2:20:22:f8:f6:51:
                    b5:f4:9e:c7:0d:9e:90:1f:fd:48:10:21:e4:50:4b:
                    24:b7:22:51:42:72:43:50:76:4b:98:7b:33:88:51:
                    43:f0:d1:a4:c6:55:5b:5f:f2:d5:01:8f:67:c4:ea:
                    12:ef:e3:9a:ab:6f:d7:de:b6:54:6b:67:19:1b:7d:
                    4f:e7:00:3e:8e:4b:22:38:ba:a7:a5:b8:78:99:71:
                    57:6e:1e:60:d5:26:9a:b8:1d:c2:1a:b8:e9:a4:d5:
                    1c:16:c4:d5:57:a0:9d:cd:45:9b:be:79:92:02:be:
                    b7:5b:30:b2:02:30:12:b0:62:ae:1e:8a:78:7b:8c:
                    de:32:79:16:a5:53:de:10:4b:b3:f9:43:f4:c7:ed:
                    a5:74:08:37:ba:cb:72:59:f1:0b:73:ee:93:d6:99:
                    12:e6:0b:17:a0:37:d1:d1:c4:a0:ec:8a:5c:55:c3:
                    52:a3:c9:1a:fe:7f:77:22:1d:a4:bd:9e:25:d5:a3:
                    40:3b:45:05:e2:ac:7e:37:f0:db:a3:fd:c3:b1:f6:
                    33:91:0e:d5:2e:d9:64:2c:35:82:b2:71:3d:51:be:
                    52:3e:46:00:af:b8:a9:e8:6c:ab:ac:39:a5:ab:a5:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6B:C5:4A:FB:E2:C0:5F:AC:E8:7B:09:A9:98:A3:3B:D6:69:BE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/213919b0-0aa0-34d8-a6ea-47ff49d36b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:85:2a:27:a0:65:de:09:d8:9a:fd:b1:78:5c:20:03:ab:
         1a:71:25:60:12:8a:c6:33:c9:91:38:58:dc:56:9f:11:5a:98:
         fb:0e:c7:71:36:5b:40:4d:70:67:6e:88:5d:d0:ae:3c:1e:6e:
         b9:88:1b:f8:e7:30:2a:3f:76:33:af:a0:9e:bf:ee:d7:52:f6:
         f9:44:1c:e4:6a:a0:45:2e:a6:7f:dc:dc:fd:fb:4c:f8:0d:dd:
         30:ea:7d:37:a9:57:f4:c5:ac:2d:6e:a8:8a:58:e0:c7:1c:55:
         f6:2f:fb:0d:9b:0d:fd:20:87:8b:e0:ab:69:f6:3d:31:89:ac:
         c7:de:f9:67:fc:26:b6:61:a2:a2:c6:7c:a8:cd:62:99:b0:d5:
         5f:71:d5:23:94:b8:6a:69:20:b0:b5:cc:36:d8:0a:45:93:d0:
         de:eb:be:b6:20:17:7c:12:c2:fe:8e:d7:e4:3b:9d:2a:1f:0d:
         91:8b:7c:ab:55:7a:dc:c9:ab:4d:ba:6c:74:6f:5a:93:bc:48:
         a8:27:b5:9d:39:78:21:bf:e8:9f:c7:ca:b4:53:2d:57:7b:1b:
         7e:32:40:8b:5e:cb:49:1f:d5:92:33:71:4e:af:ef:5e:fd:5a:
         a6:13:cf:db:bd:1b:41:30:40:c8:0d:43:5c:1c:f4:a7:fd:6e:
         98:de:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:50 2024 by rpki-client on console-ams.rpki-client.org