Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/118e8e44-3c0d-3df9-887d-17d35dec9452.roa
File:                     118e8e44-3c0d-3df9-887d-17d35dec9452.roa (raw, json)
Hash identifier:          mdVO9q4bUSwq00tkrCJ7t5HM7oCZ+HzvtjtzFpX5w00=
Subject key identifier:   CB:2C:E0:BA:E6:8C:47:6F:E3:F5:DB:61:ED:00:81:C9:62:12:E8:99
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B32970982A55F016D8C015
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/118e8e44-3c0d-3df9-887d-17d35dec9452.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.24.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:29:70:98:2a:55:f0:16:d8:c0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=3e9651d2-9bce-41f1-88c3-7b8900245262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:44:e0:9d:bf:c5:47:64:58:85:7b:90:51:
                    6a:71:df:0a:3a:e6:55:ce:df:60:85:12:3d:9f:fc:
                    57:a5:a5:06:86:60:de:49:ca:89:a4:81:6e:95:be:
                    5b:64:f5:69:3f:c2:b8:ef:b9:e9:76:56:a3:44:a2:
                    69:a5:6e:5a:72:68:52:1c:1c:52:eb:ba:a1:2b:c5:
                    ce:81:8b:5f:d8:46:c9:86:a5:e8:29:44:bc:61:b9:
                    e9:ad:b6:06:74:21:6c:d8:e8:1b:78:ae:87:13:cf:
                    6a:70:b1:40:5a:27:a3:55:ce:0c:88:82:d9:73:ef:
                    c7:df:50:38:6d:c2:da:83:09:71:75:85:a6:0b:a0:
                    80:3b:46:bf:37:ad:ae:44:3b:77:70:58:be:e9:9e:
                    26:80:14:61:23:c9:ad:05:6a:5b:22:cc:6c:90:bd:
                    fe:af:31:dd:74:c7:43:a4:9d:cc:b2:e0:56:44:eb:
                    65:fd:03:07:9f:ca:57:7f:9d:1f:d2:bb:09:80:af:
                    3c:0d:a4:0c:dd:78:77:f9:46:6f:70:c5:47:80:af:
                    79:23:45:1f:b7:6e:e5:92:a3:a0:d8:aa:d4:26:64:
                    fe:2e:f1:b3:6a:05:dc:ce:f8:2f:2a:7e:52:81:59:
                    6d:e1:b1:66:8c:e0:c4:f9:cd:0a:42:83:34:1b:45:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2C:E0:BA:E6:8C:47:6F:E3:F5:DB:61:ED:00:81:C9:62:12:E8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/118e8e44-3c0d-3df9-887d-17d35dec9452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:c9:02:88:7c:6e:ae:09:93:6b:59:ed:55:ed:21:38:79:
         46:af:bb:46:48:ed:b8:6b:ca:a8:7e:99:1e:1d:f6:52:85:9c:
         7f:99:29:a3:85:04:68:08:96:87:8b:60:02:6e:52:e3:1c:67:
         88:dd:d2:d9:32:61:01:5e:1d:fa:0d:62:26:75:6b:b1:5d:0e:
         3f:77:87:b0:90:f3:24:db:3e:7a:fb:74:30:25:11:33:6b:8d:
         0c:ea:dd:c8:28:c7:b2:57:c8:76:80:49:ab:6c:f1:4a:31:fb:
         90:ce:1d:8b:44:3b:79:eb:87:e6:99:ea:48:a9:90:20:b0:2d:
         97:82:19:50:34:e7:93:76:b5:37:ff:db:88:b5:5b:e5:37:3b:
         41:fd:84:f4:12:91:70:9e:59:3e:b8:72:c3:99:f3:13:ef:6f:
         31:07:fa:c7:04:f5:65:99:35:84:3e:cc:d5:d9:4f:d4:5b:a0:
         6d:93:b4:68:43:bc:cc:c8:33:b8:12:53:41:c4:90:4f:fa:3a:
         06:bf:19:c9:3d:f5:84:9c:78:04:e7:bb:ca:f8:1a:01:73:28:
         58:ed:f4:8b:9b:2b:5b:a1:89:33:2e:23:e4:37:5e:3a:0d:76:
         bc:19:a7:60:7c:f1:c0:8d:3c:1f:6c:b8:43:8a:9c:ec:a3:92:
         24:ad:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:46:53 2024 by rpki-client on console-fra.rpki-client.org