Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb23c6b1-3cc3-3d4d-837b-cd332df79c2f.roa
File:                     fb23c6b1-3cc3-3d4d-837b-cd332df79c2f.roa (raw, json)
Hash identifier:          PM88bwWZ0NlgQXlMJb1M2mtFJObu1hdIZC5w0GyEGQc=
Subject key identifier:   1A:1C:B6:15:B6:FD:55:4E:B2:47:90:88:BB:A4:0E:B8:9F:FE:35:57
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D28A32B264B5C7747D61080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb23c6b1-3cc3-3d4d-837b-cd332df79c2f.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:a3:2b:26:4b:5c:77:47:d6:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=9a178b45-5bf7-4e6a-b5dd-37880531ac77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:53:3d:25:8f:a5:56:13:f0:ae:84:b9:b7:
                    96:b3:30:fe:8b:fa:81:19:e6:d6:cb:3b:c2:3c:c6:
                    fc:a0:3e:d6:9b:1a:30:75:dc:ab:cf:42:af:8b:b1:
                    ad:25:b1:83:28:29:81:72:3e:d0:7a:ce:af:4e:60:
                    2e:f3:4b:4e:a6:d5:3a:db:d6:30:4f:87:dc:5b:dd:
                    01:b5:db:52:80:51:8a:c1:89:b3:d8:41:d3:e6:8a:
                    de:01:c8:77:b9:a3:70:b9:b4:b5:5b:cd:93:53:1a:
                    a7:76:7c:dd:ca:12:7d:13:5c:29:3f:0d:e3:a4:82:
                    0b:ac:aa:2d:24:0e:99:82:c2:62:f1:ef:8f:e8:96:
                    4e:63:82:be:dc:14:03:1f:e2:5e:3f:a7:3c:b4:82:
                    db:b3:13:86:bf:d9:3d:22:08:91:25:e1:e8:da:79:
                    b1:e1:c2:16:16:26:ac:65:77:fa:be:30:9c:a6:05:
                    e8:96:03:3b:1e:f4:26:ad:1a:1e:8e:04:de:d5:f7:
                    fe:cc:7d:27:de:69:ea:31:fd:35:3b:63:88:df:a2:
                    3b:fc:c0:fe:7f:80:21:35:ea:85:a7:6e:77:cb:a8:
                    46:15:8e:a2:06:bf:aa:bb:4b:34:67:82:c1:44:85:
                    e6:dc:e6:2c:ac:36:28:d6:92:6f:33:d5:de:c1:52:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1C:B6:15:B6:FD:55:4E:B2:47:90:88:BB:A4:0E:B8:9F:FE:35:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb23c6b1-3cc3-3d4d-837b-cd332df79c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:02:59:1f:ee:da:c1:d3:18:d7:bb:c6:41:7b:75:16:d1:
         11:54:96:59:ba:3b:71:2a:09:5d:eb:69:eb:74:14:dc:90:78:
         fc:aa:01:9b:a5:bd:b9:ce:4a:cb:82:dd:42:db:51:40:1f:2a:
         75:d2:2f:5c:88:37:b8:98:40:fd:75:c5:79:fa:38:82:a4:79:
         2a:bb:20:1d:5a:43:ee:ca:53:77:38:70:5a:ca:7f:c6:55:11:
         50:5d:cc:46:0a:31:1c:89:c2:8a:1e:03:d6:d4:fd:d2:98:47:
         3d:5c:30:14:69:4e:af:68:b3:aa:be:17:c2:89:33:98:3e:65:
         89:87:39:a2:ac:df:1b:60:ef:21:7c:52:10:c2:f7:21:45:8f:
         c4:65:9c:53:8d:31:68:f1:e5:61:3b:b4:f9:2e:75:74:da:26:
         39:70:34:a8:19:2f:76:20:a1:ec:4b:1d:93:97:3e:b4:d2:68:
         d9:b7:9a:b7:51:fc:91:16:85:89:84:15:03:ef:25:47:9c:8f:
         c0:89:25:b0:cb:50:0f:65:7b:f1:9a:4a:a4:d5:af:d4:42:65:
         2e:12:5f:63:21:1e:2c:ea:a3:b8:35:dd:8d:d5:b8:55:9c:02:
         ac:40:79:d5:b9:c1:a9:dc:17:cd:92:bc:5a:99:43:2c:fe:a7:
         36:6b:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:12:10 2024 by rpki-client on console-ams.rpki-client.org