Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/547ac737-9059-3ab3-aef9-85b68ef139c0.roa
File:                     547ac737-9059-3ab3-aef9-85b68ef139c0.roa (raw, json)
Hash identifier:          CiAySMThgoklaqNbHSkX3HWhe4RIBmORQrLsScOJtjs=
Subject key identifier:   0E:AE:C6:AE:51:50:08:D0:05:24:4D:8E:AF:33:FE:BF:87:7F:29:0D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E566B14B4250B0A73F400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/547ac737-9059-3ab3-aef9-85b68ef139c0.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        65.93.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:56:6b:14:b4:25:0b:0a:73:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=a6551cf8-715c-4cf3-94ae-1a26eea119a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:e7:c8:70:c2:2e:50:2c:89:43:19:a6:ae:
                    15:62:61:f8:58:d6:d8:da:8f:36:d6:45:e8:13:47:
                    35:98:ad:6d:1a:e9:f5:6f:d8:86:24:5f:ff:a6:ac:
                    a3:07:9e:5b:f0:91:95:73:6a:90:b6:94:5b:06:2e:
                    09:67:22:a0:6b:02:88:4d:51:a5:9d:44:8b:a1:d4:
                    8f:38:52:a3:65:8c:9a:46:ee:e9:44:e5:fe:cd:cb:
                    f3:89:19:83:c5:28:2e:3d:88:6c:40:df:4f:db:18:
                    48:23:93:01:af:97:d1:39:06:52:16:76:9d:38:6a:
                    89:6a:bd:78:63:6c:3d:79:4b:17:a5:08:33:f6:f6:
                    31:11:b8:4b:fd:e9:ab:2b:9d:53:0e:b5:f8:80:37:
                    48:e8:39:b9:82:90:b6:be:35:65:e4:0d:a7:eb:69:
                    94:82:9a:2c:ea:62:69:50:c5:70:6d:1d:c3:dc:2f:
                    55:f2:2d:97:3e:74:fa:db:4c:b6:24:d4:8a:00:c1:
                    02:78:24:5c:8f:98:3f:5f:06:b8:40:6d:6a:49:3c:
                    72:12:b7:9a:37:93:1e:3d:81:fe:ff:23:cc:5e:4c:
                    39:c8:f0:ab:af:74:bf:5f:e9:0c:08:f4:f6:da:34:
                    c0:5b:c5:d9:3b:7a:f9:ea:ad:d5:47:ba:fa:a6:b9:
                    d3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AE:C6:AE:51:50:08:D0:05:24:4D:8E:AF:33:FE:BF:87:7F:29:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/547ac737-9059-3ab3-aef9-85b68ef139c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:33:03:28:20:75:ba:1b:6e:dc:ee:f4:fe:23:73:05:39:
         18:b3:fb:75:1d:54:0d:08:2b:96:a5:da:26:7a:9a:93:fb:84:
         01:90:e7:04:67:d5:42:d8:32:00:03:a2:eb:c8:6c:c5:a8:31:
         e1:50:71:e1:86:43:15:23:a8:29:72:37:d6:44:72:f0:01:42:
         be:06:55:77:a4:91:89:6d:d7:d5:7f:42:99:ba:5f:13:63:62:
         59:a5:62:57:d0:2f:60:b4:e6:1a:d2:39:b8:44:f8:12:f6:23:
         a7:9b:2a:6d:28:f1:4d:7d:f7:53:84:4d:0e:7a:ef:9b:cf:4a:
         46:1b:7b:ec:8d:d7:31:f6:a1:75:b3:91:a9:ae:03:8e:4f:cf:
         7d:a3:8e:43:e6:a1:04:20:db:2d:2e:89:f3:26:ab:10:07:fe:
         e4:7c:0c:37:cd:bb:99:60:60:1f:da:ca:08:89:2f:50:d9:8e:
         c2:02:d2:33:3f:12:6c:78:78:1f:3f:f2:ea:57:bc:68:b0:72:
         5a:76:fe:00:d2:4c:d7:7d:83:bf:51:89:4b:f3:0a:d3:e1:8f:
         2c:91:bf:e2:90:d1:33:fe:0e:83:8a:b1:3c:5c:5b:4e:cc:dd:
         d5:b9:9b:f2:f2:1f:51:9e:60:3a:33:1c:64:4e:80:b1:e8:42:
         2a:7b:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:59 2024 by rpki-client on console-ams.rpki-client.org