Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67426d58-c3e1-3ac9-908b-efc838787f4c.roa
File:                     67426d58-c3e1-3ac9-908b-efc838787f4c.roa (raw, json)
Hash identifier:          9qtIHo0X1fyom3GIWF124fPmu2QyBpM1xAIVHPfkeOc=
Subject key identifier:   15:4F:75:D3:D3:3A:D3:D1:BE:31:E0:EE:D9:0D:1A:91:3C:75:8B:7A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA1148A5933F4B75545A1860
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67426d58-c3e1-3ac9-908b-efc838787f4c.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     12132
IP address blocks:        67.70.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:48:a5:93:3f:4b:75:54:5a:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=784dd377-3db6-4595-864d-a8f594632e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:e2:d8:89:00:c0:90:4f:cd:4e:2f:ae:f8:
                    bc:5c:af:c3:3e:de:90:96:d2:e2:af:3e:48:13:5b:
                    13:e8:4a:b0:e7:c0:dd:50:9c:f7:14:dc:69:65:67:
                    2d:5a:85:c5:89:f5:e5:50:8b:2b:c9:09:dd:2a:83:
                    1c:ed:d1:0b:4b:15:02:c7:ca:56:31:a0:38:aa:aa:
                    ec:f9:03:1a:27:ad:e0:af:7b:0c:82:dd:7f:96:14:
                    62:e3:a7:40:51:ed:51:35:db:fc:5e:fc:5d:8c:da:
                    f3:3c:28:4d:6b:26:99:f7:4a:e6:ac:12:f8:ca:ea:
                    96:59:96:97:50:28:6d:37:a7:87:4e:7d:8e:50:e4:
                    90:bb:c4:b5:5f:ab:35:30:42:a8:1a:ff:4d:7b:be:
                    55:d8:88:59:95:6a:fa:82:c0:27:4c:a2:6d:df:d5:
                    b0:89:ae:94:5b:1f:ad:ea:b4:a2:a8:a3:2a:f2:b0:
                    80:e5:30:1b:1e:43:c3:62:31:b1:21:fb:8a:a0:02:
                    87:4e:b5:aa:3e:ec:18:fc:d9:8b:09:de:91:0b:e5:
                    7b:5d:2b:04:78:ba:af:80:48:5b:ba:c4:83:4e:e8:
                    51:c1:56:3c:87:7e:c4:e6:88:43:73:71:53:79:ff:
                    ce:a0:7d:0d:5a:9e:65:e1:70:8e:e0:db:69:e9:e0:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:75:D3:D3:3A:D3:D1:BE:31:E0:EE:D9:0D:1A:91:3C:75:8B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67426d58-c3e1-3ac9-908b-efc838787f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.70.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:08:89:ba:96:32:ca:71:5b:ec:d7:c0:cb:bd:f8:0f:a1:cb:
         3b:22:e7:43:fe:65:01:a2:70:52:40:5c:17:a4:db:db:e0:59:
         27:a3:39:93:47:ae:a2:07:b8:e2:b6:20:b1:5a:6f:c4:06:bf:
         ff:66:d3:03:16:11:bd:a4:56:0b:b3:e5:89:65:64:49:80:6a:
         38:7e:34:d0:f3:79:b3:90:28:70:ba:38:c1:d3:d8:c3:31:85:
         d7:b9:0c:32:74:e7:c2:0d:f6:8e:af:9f:2a:5f:d6:7e:dd:4c:
         cc:d3:d6:90:f2:3e:7f:98:3d:cf:08:08:66:79:cd:b5:df:8c:
         67:fb:2f:e3:62:c4:94:d7:43:5a:79:04:51:15:ee:c9:50:69:
         f2:97:d5:e4:65:f0:fd:3e:27:37:6e:8d:a1:5a:d7:df:a0:38:
         2d:1e:6e:81:21:c9:4a:cd:ee:7d:61:b1:b8:8c:2c:b9:01:45:
         c2:b7:f3:96:04:9d:c7:89:4c:80:ed:ea:56:04:0b:07:01:12:
         31:e6:19:8e:f8:dc:29:c7:57:5b:24:e1:1a:9c:fb:2d:09:87:
         1b:8d:e8:68:a7:c3:f5:0a:32:7a:46:f9:31:68:ed:82:b9:a1:
         0a:dc:da:4c:17:dc:7c:fc:e8:25:b3:7a:b5:ee:43:00:14:60:
         eb:9d:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org