Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0088316b-534d-3052-b139-7ddcb3642b80.roa
File:                     0088316b-534d-3052-b139-7ddcb3642b80.roa (raw, json)
Hash identifier:          gmWH4fO9RPENP4rh3kJPL/NS8fD8Z9hR4H7VwK6bDqU=
Subject key identifier:   A5:3A:C3:0A:A7:4C:6A:6D:62:16:38:D9:A2:C9:A0:6E:65:A7:6A:DB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B337FD6BBE4C84DC008C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0088316b-534d-3052-b139-7ddcb3642b80.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.28.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:37:fd:6b:be:4c:84:dc:00:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=ce2c3e12-1f12-45b0-ab95-bd5313e087bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:5a:6a:d6:68:85:d7:00:55:3e:a6:69:49:
                    c2:85:82:0a:d6:a2:43:23:33:3d:90:a3:d5:f3:a0:
                    82:45:7f:3d:09:73:a2:d3:fe:f3:15:87:e3:e4:ab:
                    46:f6:94:75:df:68:f3:e7:cf:14:cc:a7:6b:dc:1b:
                    ad:61:dd:43:14:6b:45:cf:be:5a:73:4b:c0:7c:44:
                    fb:46:9f:48:05:1c:ce:51:8c:ba:07:36:ae:4a:58:
                    2c:a7:76:ac:58:0d:bb:a7:59:77:cf:23:db:30:2a:
                    3c:40:2d:42:3b:72:26:52:04:3f:fd:fc:3a:72:15:
                    9c:ce:68:dd:4a:7c:3a:46:82:b7:d8:52:fa:d7:52:
                    ff:5c:98:7e:8e:c6:f8:59:ec:ae:d4:99:ef:55:f8:
                    d3:2c:4c:6b:bb:06:f5:09:6e:d7:8e:23:b0:45:b4:
                    ca:8a:20:63:07:06:f8:ca:be:ef:b7:42:13:5c:c0:
                    fd:84:0e:f9:5d:10:b9:c4:66:de:b9:e9:09:f0:10:
                    ff:6e:a3:c0:02:9e:36:b7:a5:d0:ad:20:e2:77:01:
                    9a:25:25:9b:1f:8e:2c:5c:8d:6e:27:d7:ac:6b:69:
                    41:76:5d:f3:9a:58:ad:a5:75:b8:26:e3:3a:78:a6:
                    07:10:f7:76:16:0d:b1:69:ba:fa:22:b4:d1:13:a2:
                    09:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3A:C3:0A:A7:4C:6A:6D:62:16:38:D9:A2:C9:A0:6E:65:A7:6A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0088316b-534d-3052-b139-7ddcb3642b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:99:36:18:49:b1:23:6e:18:a5:84:4d:7b:2b:0b:5c:1f:
         e7:46:fe:a2:38:1b:76:38:c3:eb:82:e6:37:1d:4b:12:c5:3f:
         11:7b:4c:90:90:bc:6e:79:b6:dc:8a:21:1f:e6:f0:54:af:be:
         f5:ff:c5:8d:32:32:76:b8:50:d8:de:6e:61:70:65:5d:08:69:
         36:a4:44:82:63:54:d5:fb:70:d0:86:5c:42:bf:13:c3:dc:ed:
         51:a9:2d:fc:54:65:fb:c3:7d:f9:d2:9a:f7:8a:e4:57:ef:f1:
         89:3d:8f:27:36:ba:fb:10:bb:ca:7a:e2:3f:bf:a7:d6:3f:d8:
         55:f4:48:df:f3:1f:3b:2e:fb:d1:8c:a6:bf:08:0f:72:24:3a:
         6b:05:5a:be:b0:1a:ef:77:49:0b:82:ea:88:30:50:ca:29:f6:
         49:68:6d:61:31:99:5a:ee:37:1e:56:f8:0d:3d:9c:b9:92:f0:
         36:89:49:fd:60:bd:47:ec:b9:66:e2:2b:9d:92:b3:4b:c3:b7:
         61:ee:c8:d7:fb:e6:3c:8c:49:26:76:e3:76:5b:45:cf:9d:05:
         c0:a9:66:8f:3b:a4:ad:c7:6a:a3:f3:94:0d:7e:d9:33:be:26:
         ad:5c:66:0c:60:d0:55:65:c8:d7:3a:4c:57:bf:af:55:1d:92:
         1c:26:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:59 2024 by rpki-client on console-fra.rpki-client.org