Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54511fe0-4a82-32ab-a210-f632e134a799.roa
File:                     54511fe0-4a82-32ab-a210-f632e134a799.roa (raw, json)
Hash identifier:          JiO1k0nsatA/swm80EIsFcmcTpPP3Ekgu5tX1796t0A=
Subject key identifier:   28:14:01:07:62:A1:CB:DB:31:5B:F9:CE:4B:5B:A1:EA:65:D5:19:49
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12011697618C4F75750180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54511fe0-4a82-32ab-a210-f632e134a799.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     32678
IP address blocks:        174.90.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:01:16:97:61:8c:4f:75:75:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=656358d6-d87b-4c66-a3d9-ba4a97b58b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:7b:b1:e9:da:88:2d:72:11:87:c7:14:fe:
                    36:ac:45:18:23:eb:7a:90:91:9a:d2:8d:ff:15:32:
                    0e:34:7b:e5:2f:62:c2:ad:24:d2:11:b0:22:63:7c:
                    4a:bf:36:c0:44:86:3b:e6:63:25:05:a8:06:dd:82:
                    09:21:ff:0e:53:54:92:38:20:62:c6:97:3e:62:a2:
                    0e:be:f6:48:49:67:1a:10:2c:af:8c:7e:a3:74:b6:
                    6d:74:5e:36:70:8c:bd:88:65:42:11:4d:dd:db:d0:
                    e6:04:2f:9c:dc:d7:de:7f:8f:f1:16:33:8b:00:da:
                    1a:e6:a7:ea:77:26:2e:4d:ff:d5:d5:94:d4:23:38:
                    01:04:23:ee:d2:d2:51:66:f0:39:49:9d:49:60:88:
                    c7:3d:cd:43:2c:1f:f4:4d:09:ad:cb:42:b9:5f:e9:
                    11:70:5e:bd:27:d3:10:47:19:fa:70:90:b7:bf:63:
                    fe:26:e1:fb:d1:61:f5:7f:c0:d0:13:62:5f:0f:08:
                    99:d7:53:42:7d:5f:46:99:16:50:67:5a:ca:19:b5:
                    db:ef:b3:17:47:69:82:b4:78:1c:bc:5c:ae:3a:89:
                    03:82:94:b5:15:37:83:82:ae:92:26:29:ba:28:b0:
                    33:73:d0:c5:f6:1a:fb:b6:ac:ba:68:29:fb:66:4c:
                    20:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:14:01:07:62:A1:CB:DB:31:5B:F9:CE:4B:5B:A1:EA:65:D5:19:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/54511fe0-4a82-32ab-a210-f632e134a799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:f4:93:b5:ad:b7:fd:ec:43:6e:84:a5:22:b9:05:ab:c1:
         07:89:a9:ee:15:b0:85:a2:61:87:1c:37:31:18:6d:be:71:5d:
         77:89:56:b9:69:43:01:7a:79:87:2a:60:1a:38:64:ad:3f:c3:
         45:16:69:4e:f0:28:a8:04:cd:a5:47:1e:9b:b5:ed:74:86:29:
         6d:64:e3:d2:ce:6e:37:e7:e6:0e:2f:89:4a:da:3d:d4:e3:8b:
         b1:e9:43:b1:21:67:1a:21:6a:db:0c:ab:ad:e0:80:2d:ef:1b:
         34:bf:47:47:c2:6f:9e:cf:a4:80:5f:5a:12:8f:ab:05:3b:92:
         5c:d8:13:8c:c0:c0:e1:1a:8d:ec:7b:0d:10:16:6a:f1:c8:5f:
         0a:2c:e0:ea:4c:f7:6d:26:56:25:b5:45:b7:dc:6e:4a:5f:94:
         e6:3c:0b:30:92:e5:68:d8:b0:f3:d3:aa:25:5b:c0:5c:30:eb:
         00:5c:f8:e4:1b:91:f1:38:13:1f:cf:c2:c3:00:f8:74:d1:9c:
         9c:63:11:08:b7:1d:20:e1:f7:cc:81:dd:89:6b:15:8e:73:10:
         64:5f:57:37:4d:f6:bb:45:60:29:f8:49:da:1e:e6:f5:3e:e9:
         e6:7d:54:8d:ef:a2:88:c3:b2:ae:68:94:5d:5c:a7:a6:97:9e:
         d2:9f:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org