Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/26c8a13f-295f-3033-87a7-115e9c1a7dec.roa
File:                     26c8a13f-295f-3033-87a7-115e9c1a7dec.roa (raw, json)
Hash identifier:          IJ8yT1tW0odo9LSSdKaVlpNCWBGnhCAsr7LfT2voes0=
Subject key identifier:   93:2E:F4:42:BE:FF:23:B1:89:85:D7:BD:F8:1C:1C:E5:1C:91:08:FE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EDFFE44E22AEA7465C110
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/26c8a13f-295f-3033-87a7-115e9c1a7dec.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        76.70.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:df:fe:44:e2:2a:ea:74:65:c1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=0b499c0b-f91a-409a-94c8-cff09c735c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:4d:de:5d:14:1e:7f:fa:a6:1a:93:32:d3:
                    93:39:e4:c8:e2:3b:f3:86:5b:b0:b0:6a:79:db:93:
                    80:22:1c:56:b5:ba:37:c9:c0:24:8c:6f:d9:ed:7f:
                    ae:62:54:d0:3c:57:9a:bf:74:20:f6:d7:ff:9c:0f:
                    d7:06:25:c1:15:00:ab:ed:d3:81:da:35:08:53:9e:
                    36:2a:12:68:19:af:c0:90:da:3c:1c:99:10:b0:d2:
                    9e:11:0d:82:fd:6b:27:72:77:77:63:45:c3:9a:54:
                    56:43:d0:93:6c:f1:63:0f:72:9e:fa:3f:f9:0e:7e:
                    14:b5:96:e9:0e:27:83:ea:58:eb:46:88:3b:c9:37:
                    a4:28:ca:17:0d:75:d2:c2:d6:ff:ea:6c:4d:95:f3:
                    fc:c2:94:ff:3f:86:5d:b7:8c:76:98:b2:72:2f:23:
                    02:f1:06:f1:85:a0:c3:3a:90:60:ca:6a:91:bc:72:
                    fc:78:65:c2:67:57:27:e1:f5:df:8a:b0:cf:57:cb:
                    4b:2b:d9:8b:6f:e2:c5:92:db:59:2e:a4:1b:cd:df:
                    17:db:e1:c3:63:5c:40:13:74:bd:e3:cc:55:7f:3a:
                    81:28:18:f6:a6:84:df:24:a1:21:a1:7b:f6:4d:ee:
                    ac:f9:2f:49:94:1d:10:aa:46:d1:39:72:df:79:e7:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2E:F4:42:BE:FF:23:B1:89:85:D7:BD:F8:1C:1C:E5:1C:91:08:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/26c8a13f-295f-3033-87a7-115e9c1a7dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:1c:73:0a:49:6b:60:a9:9d:53:26:44:91:a1:26:08:e7:
         1f:95:c4:eb:88:e7:14:f8:61:60:bc:ec:2e:a3:08:29:94:6a:
         1b:39:71:81:22:26:a0:5d:a6:ee:81:a1:2d:62:0a:45:50:48:
         fc:84:7e:4f:77:b9:0d:f6:de:b6:da:18:2a:76:75:92:42:21:
         dd:79:96:e1:ca:a6:9f:31:53:45:53:9a:bb:a9:0e:b9:e2:d9:
         df:84:f2:00:a7:2b:d3:a7:68:ad:2d:aa:8f:1c:41:89:82:19:
         21:ca:06:c4:bf:3d:23:d8:d4:64:e1:0b:e0:01:8c:ec:96:2c:
         2a:2e:ca:29:22:23:09:22:05:ce:b5:3d:00:5e:ac:57:07:92:
         02:83:fa:aa:14:92:fc:80:53:0d:4c:d6:0c:fa:6f:b2:39:45:
         2e:74:1e:92:c6:c5:79:23:f2:f8:9b:5b:6c:cb:03:0f:ad:a0:
         40:a5:c8:ca:75:63:07:44:74:30:7f:db:85:24:3c:55:f9:df:
         4a:57:10:dd:c4:79:1d:a5:3a:a5:0a:1d:90:82:6e:02:6c:31:
         fa:f5:6d:f2:39:ed:94:54:a3:24:5e:79:2a:eb:1d:28:11:04:
         b0:91:e7:11:78:8c:84:b1:7c:90:70:c4:62:00:6e:ab:c7:26:
         66:5c:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org