Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/87383dd7-8d97-3388-9cde-818290c41f42.roa
File:                     87383dd7-8d97-3388-9cde-818290c41f42.roa (raw, json)
Hash identifier:          ot/M9JF6v38/kxlwj3ENBkW1H6HBvz2uRacj4igYw80=
Subject key identifier:   E5:7F:22:13:15:3C:8E:07:0A:D6:81:D3:6E:00:63:57:93:A3:75:FE
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285844DFCDB80E70A3C07DCF1240C0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/87383dd7-8d97-3388-9cde-818290c41f42.roa
Signing time:             Tue 13 Feb 2024 04:58:54 +0000
ROA not before:           Tue 13 Feb 2024 04:58:54 +0000
ROA not after:            Mon 13 May 2024 03:58:54 +0000
asID:                     9009
IP address blocks:        69.91.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:cd:b8:0e:70:a3:c0:7d:cf:12:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb 13 04:58:54 2024 GMT
            Not After : May 13 03:58:54 2024 GMT
        Subject: CN=0fed2089-dad7-46fc-b6fb-21662f9392e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:f2:0f:d2:c0:73:c4:2d:6d:25:9a:e7:35:
                    51:ce:09:e5:d8:61:21:b3:77:2c:f5:f3:30:b1:76:
                    1d:fd:a9:cb:c5:d1:0b:42:09:ab:5b:dc:d6:e6:f1:
                    46:76:28:a1:b4:df:27:dc:ca:77:57:9a:18:c4:e4:
                    1a:b0:82:6f:cd:6d:7f:fa:b2:b9:4d:14:6d:ca:19:
                    48:61:45:c2:93:5e:19:8c:37:d1:e5:70:63:75:62:
                    d9:3a:39:00:42:5e:bc:2e:c8:9f:f1:7e:9d:85:0d:
                    24:e1:b4:90:b4:41:c4:13:a3:de:41:5c:c4:38:30:
                    f2:45:09:8d:4f:19:72:71:9c:98:03:1f:04:af:2c:
                    d1:0a:cb:08:d1:bb:54:5b:d5:ba:f9:fa:e9:63:45:
                    88:4f:e8:0a:37:55:93:96:7e:74:8e:43:b9:0b:93:
                    31:2b:64:2a:d6:24:0a:86:a0:9c:f5:d1:cf:b5:3f:
                    0f:62:e0:a4:d4:8c:fa:06:95:9b:ef:3a:f8:d7:f9:
                    a2:d0:68:b8:d7:c4:6b:84:4b:d1:03:8d:cd:e1:8a:
                    a8:97:83:77:a6:60:04:e6:38:a8:d1:07:3a:c7:cc:
                    7c:33:25:f7:cc:71:62:59:bc:79:16:67:7b:40:18:
                    03:81:26:87:f9:2d:81:90:28:3a:fe:06:d4:a4:17:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7F:22:13:15:3C:8E:07:0A:D6:81:D3:6E:00:63:57:93:A3:75:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/87383dd7-8d97-3388-9cde-818290c41f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:d7:62:e6:e7:2e:98:88:07:61:af:9b:62:91:a4:b8:a0:
         81:c6:10:46:9a:83:a1:9d:06:20:72:11:7e:ed:18:0d:04:92:
         38:cb:54:2e:e2:4b:ea:20:ce:17:2f:01:7e:74:df:5a:b9:8f:
         b7:92:62:c5:6d:6d:f2:e4:eb:f8:f6:bf:af:ab:2b:f9:cb:6f:
         92:89:5c:eb:8a:28:f5:b7:3b:b6:f0:5f:b8:fa:5a:71:06:ac:
         6e:be:0a:2d:a6:7d:e3:2c:22:94:0f:41:5e:3a:7d:96:69:86:
         d7:9b:8e:c9:ef:af:30:62:32:cf:8a:ac:b9:55:75:45:0c:af:
         b0:d1:cc:e1:a8:8c:fe:6a:8a:d0:1c:55:b5:a5:42:f3:4c:2e:
         cd:05:9e:b8:7c:d6:f0:a6:b2:02:50:1b:51:17:c4:6a:a2:f3:
         c0:1f:ce:d1:c6:70:60:b7:b7:c4:31:3f:20:1b:c5:98:33:57:
         b5:e8:f9:43:d8:dc:dc:aa:b4:4c:fa:dc:a1:e9:f0:94:84:25:
         56:96:4b:d5:f6:1b:dd:cb:7d:7c:8a:87:41:e8:04:c4:18:82:
         d8:12:ec:4c:ac:5b:6b:93:24:3c:67:bf:52:74:ff:25:db:cd:
         51:51:ea:03:63:ae:6b:f4:07:ac:ba:ef:c9:31:11:d6:ca:c9:
         c5:a1:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:56:22 2024 by rpki-client on console-ams.rpki-client.org