Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a4c27e5-c1e3-3752-9cf3-75bef557e207.roa
File:                     4a4c27e5-c1e3-3752-9cf3-75bef557e207.roa (raw, json)
Hash identifier:          AAtiwbdVcgfjI8OGMhDIgAG0zeS2s8/K2Qo7Ezk+2XU=
Subject key identifier:   22:F7:7F:FC:59:D7:A3:8D:1E:57:CA:A1:20:A5:19:EA:C9:4A:B1:7F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EE132BE7E03FFEFA36D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a4c27e5-c1e3-3752-9cf3-75bef557e207.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        76.70.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:e1:32:be:7e:03:ff:ef:a3:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=f30149e7-8ab4-49aa-a3bf-0e9c8b0cf2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:98:72:d0:0f:7f:07:00:65:2d:1c:2b:e4:71:
                    11:30:2c:d8:aa:7a:8b:78:19:1d:d3:29:b8:d5:c0:
                    3c:b7:15:39:a0:66:92:91:25:65:0e:24:33:0d:79:
                    90:03:d5:97:06:ed:27:ee:8a:4c:d3:c5:a3:8b:f0:
                    ea:df:ab:66:d0:bd:fa:6c:67:04:a5:09:fc:50:ca:
                    64:a3:13:f7:77:72:54:d2:d1:8b:22:f9:93:2e:58:
                    29:7b:f0:70:26:c9:0e:6b:a8:9b:77:2f:0e:33:e1:
                    1b:47:f5:24:30:42:bd:3a:43:06:6b:94:33:1a:86:
                    67:86:e6:6f:bb:85:c6:b1:77:f4:d6:27:e4:ba:cb:
                    b6:f8:86:3f:a1:fe:a9:00:85:11:97:6a:a6:c1:00:
                    84:a4:11:11:2b:4d:a7:35:f3:27:eb:e6:e5:2e:4e:
                    43:63:36:d5:58:a6:18:f4:d1:23:81:2b:cb:2e:61:
                    99:6d:11:aa:77:c8:fa:37:9b:2e:16:ee:b0:f1:b0:
                    1b:bf:a2:52:8d:17:69:0c:52:25:fe:46:5e:3e:b0:
                    05:56:93:40:5d:b7:ea:d4:d2:7e:eb:21:ad:9b:b0:
                    d4:a4:39:c7:cf:96:ab:23:d5:d1:d2:f8:67:9e:fd:
                    93:93:ef:34:58:38:19:f6:1a:7f:88:95:ae:82:6a:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F7:7F:FC:59:D7:A3:8D:1E:57:CA:A1:20:A5:19:EA:C9:4A:B1:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a4c27e5-c1e3-3752-9cf3-75bef557e207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:80:92:13:5c:b2:d3:b8:e7:3d:8e:23:ac:11:23:f3:93:c4:
         1f:bf:58:03:f9:13:9b:ce:a4:36:be:9d:e4:4b:b6:a3:4a:48:
         06:06:fb:74:dc:87:5b:f3:32:3d:91:b5:12:6a:13:29:56:8e:
         79:a7:9a:1e:89:76:72:e0:38:e9:e1:49:e6:71:31:80:1c:9b:
         c7:3a:15:b1:97:6f:f1:17:aa:8d:23:a3:41:23:e3:19:c6:90:
         ff:6f:3c:20:48:f8:a5:4a:44:94:13:40:7a:51:67:cc:87:ff:
         8f:14:ea:14:44:3d:df:e8:47:b0:0a:14:45:07:09:1f:83:75:
         1a:e8:5b:bd:69:9c:9b:49:4e:1a:37:c5:2d:dc:ea:76:40:91:
         18:d9:c0:12:32:aa:90:14:3e:0d:30:c9:c7:69:70:93:37:a5:
         de:0f:ef:2e:5f:58:d4:68:d8:66:1d:69:b9:8e:62:1a:b0:73:
         c9:6b:8f:3d:30:20:02:48:a7:de:ab:7c:01:91:1c:00:4d:7c:
         da:f2:21:05:48:60:a4:36:c8:11:34:74:09:4e:97:3a:11:97:
         e4:bc:c6:47:4e:1d:85:f9:6c:8c:3f:0d:01:db:29:a6:9e:46:
         58:10:83:91:7a:bf:56:f9:24:d2:9e:3e:37:4a:66:9d:e0:69:
         10:4b:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org