Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c75b8d15-56dd-32d3-a0f4-6dc589c863fc.roa
File:                     c75b8d15-56dd-32d3-a0f4-6dc589c863fc.roa (raw, json)
Hash identifier:          DkFVH5wOcGYmWQXMaF5QDJBQsI5++yzxLXsnV81y5Ec=
Subject key identifier:   C1:E4:95:0E:4E:24:6D:CA:DE:32:94:7E:B5:DD:7B:9A:F6:68:87:42
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA14F8EE8A2C4BBA8056620C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c75b8d15-56dd-32d3-a0f4-6dc589c863fc.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:732::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:f8:ee:8a:2c:4b:ba:80:56:62:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=b17bcdbd-be2f-4d8e-a853-365d76103ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:70:86:25:87:0e:13:58:6d:ec:eb:23:33:da:
                    2b:c5:c1:2b:10:e7:9f:82:18:35:63:1c:20:21:aa:
                    8a:4c:4f:28:fb:19:2e:cf:28:e4:b6:a8:da:9c:33:
                    58:7f:46:c5:0f:3d:41:7d:07:d3:12:3c:6f:e6:b7:
                    ec:9c:39:1a:45:43:e7:25:1d:10:04:ef:ca:a2:79:
                    11:fc:62:ba:bb:09:55:06:80:bc:7a:65:af:38:05:
                    cd:12:9e:fa:08:9a:5b:49:0b:21:72:39:98:21:63:
                    0e:a8:b0:83:d7:0e:f2:91:40:85:f1:d7:4a:38:c9:
                    91:85:b6:20:78:38:5f:11:4b:d3:3f:ed:c3:85:84:
                    3f:81:c4:33:ed:1b:1e:4c:f4:fc:6a:0c:e1:50:59:
                    f1:41:79:1e:36:5c:2b:f2:62:67:be:c7:b0:9d:0b:
                    7a:31:b9:1a:39:06:2f:1d:cf:81:b5:8f:c1:2f:f1:
                    46:2a:24:27:1c:29:3c:3c:08:ab:c5:91:6a:74:9d:
                    82:5c:ab:9e:71:35:8d:fc:42:23:a5:b2:ea:f0:bc:
                    7c:30:f8:4c:5d:4b:f9:bc:2a:1c:a9:66:f2:8d:28:
                    bd:4e:81:4c:b3:1e:4e:81:b3:17:09:8d:71:35:79:
                    d0:c7:e4:12:75:ba:57:d8:5f:83:53:c5:f5:52:b0:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:95:0E:4E:24:6D:CA:DE:32:94:7E:B5:DD:7B:9A:F6:68:87:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c75b8d15-56dd-32d3-a0f4-6dc589c863fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:732::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:bb:33:fc:cb:38:57:59:9b:31:c9:b0:5e:ab:de:4a:37:3c:
         bd:13:27:25:86:7c:7f:72:35:7a:4f:41:34:35:fc:e3:b6:48:
         1c:8d:b2:89:00:c8:87:23:c0:d7:c4:90:d3:8b:21:20:f5:0e:
         36:65:89:57:f5:3f:a1:7f:2c:2a:ba:25:9f:c2:58:83:ff:33:
         91:36:78:82:ce:22:94:3a:f2:dc:fb:0c:dc:ca:49:7c:ff:ba:
         85:e6:b8:8f:e3:e5:01:cf:cd:9a:c4:f1:78:bf:78:ac:49:7d:
         d6:71:b6:5e:45:b8:d9:cb:b5:aa:41:25:f6:e0:fd:90:00:7c:
         79:46:ee:c6:2a:5b:ea:68:c7:59:24:9e:31:d0:84:a0:4f:cf:
         91:d4:ae:21:ef:3d:a2:82:72:51:ba:c7:f7:99:7a:64:b3:93:
         48:d4:ca:55:72:a0:bd:fb:d6:9b:1b:3b:5d:0a:d4:23:47:c6:
         01:1a:ed:f1:53:84:8e:1d:e2:a2:19:d6:61:08:fd:06:10:59:
         c7:10:a8:14:43:21:d5:de:77:5b:2a:2d:a0:ec:f2:31:b0:03:
         1f:53:d6:4f:8d:29:96:39:32:48:82:bd:c7:41:7d:3d:e7:1f:
         3c:0f:38:10:30:8c:93:46:29:c9:fb:c7:bc:4b:9c:b1:bb:19:
         3f:44:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org