Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/605b6655-2258-3e2f-b8e2-21d1b4590afe.roa
File:                     605b6655-2258-3e2f-b8e2-21d1b4590afe.roa (raw, json)
Hash identifier:          G7oYALfmAjIfOO87P9clx1FZyA2qk90pO6OjZ0ACj6U=
Subject key identifier:   6B:6F:AD:12:EC:23:7D:42:2D:BC:75:95:80:E6:EF:03:2C:6F:43:EF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA116B2E2C5828486ECE1980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/605b6655-2258-3e2f-b8e2-21d1b4590afe.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        70.28.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:6b:2e:2c:58:28:48:6e:ce:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=f4ffb379-05c5-41de-8166-5c9f81ece17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:5f:4a:62:44:51:f2:cf:8c:ab:a4:4d:d0:
                    4e:f8:0a:c3:fb:95:13:ab:34:a1:1c:95:86:a8:e1:
                    f8:02:0b:b3:2f:77:0a:5a:05:ac:a5:16:69:74:22:
                    a9:64:67:8c:13:24:67:d9:70:46:65:a9:7d:45:0b:
                    f6:b3:21:d5:97:2d:4d:a6:7f:fb:83:9b:a3:18:9e:
                    02:19:1e:ba:81:4f:c4:93:ed:9c:14:8b:b3:3e:c7:
                    58:18:0d:0e:d4:27:b4:bc:9d:13:a7:69:fa:8d:0c:
                    60:34:dd:db:47:b2:ba:7f:e5:63:59:12:e1:26:79:
                    07:2c:6a:62:a7:2e:7f:e4:24:e7:df:9c:a9:c4:91:
                    87:b7:13:a8:76:9c:e8:12:5b:a2:d0:5e:39:76:6a:
                    11:46:66:f0:97:b6:7f:61:74:5b:aa:db:dc:34:22:
                    0e:48:51:4f:bc:95:6a:95:d1:4e:2a:d5:ef:fd:60:
                    3b:d2:e3:ed:13:1f:29:ef:fb:26:f2:20:d5:ea:da:
                    bf:1e:6e:08:cd:b8:4e:04:5e:ec:1a:0e:d1:aa:21:
                    4d:c3:4e:72:c0:8d:98:13:90:5e:22:0f:ff:94:9f:
                    68:c5:f9:54:0c:10:01:7f:de:0d:c2:11:90:ac:bb:
                    28:a8:59:3a:59:30:be:63:10:73:53:0c:e2:39:5d:
                    91:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6F:AD:12:EC:23:7D:42:2D:BC:75:95:80:E6:EF:03:2C:6F:43:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/605b6655-2258-3e2f-b8e2-21d1b4590afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:a4:7d:3b:1c:a5:c0:c2:ca:d9:7e:e3:4e:8b:32:c0:c7:
         57:06:13:eb:c8:b0:d8:fe:a7:b4:cb:46:a6:70:1f:b5:1a:76:
         64:60:84:57:0e:13:cd:8a:97:44:2d:f4:86:fa:66:b5:73:02:
         de:92:4e:04:0a:06:3c:33:12:c0:65:7a:89:b1:8a:a8:41:31:
         35:b6:bb:6a:db:0b:58:27:f0:c9:40:55:89:b9:cb:7a:0f:2f:
         50:93:8b:0e:69:f4:c9:2d:38:48:60:23:8c:a1:66:3a:42:c5:
         03:b7:20:a8:f0:0d:c5:91:e2:f3:6c:a6:02:95:b5:d8:60:31:
         a5:80:5d:89:e8:fe:2b:15:0c:f2:1a:1e:0d:bd:d8:c3:23:6c:
         e0:f8:95:ec:4e:8c:86:3f:56:0c:b6:cd:86:67:98:3d:19:88:
         80:98:f6:27:af:a7:51:59:ef:c8:32:13:fc:9d:e8:45:ed:60:
         94:bc:cd:5a:16:46:2a:08:bc:68:c0:4f:f6:6d:c7:10:c3:c3:
         3d:fd:b6:ba:53:c0:4a:dc:eb:08:0b:06:d8:58:74:bb:c7:2f:
         75:18:15:ea:95:92:c6:dd:29:29:3c:94:02:90:4c:4a:a7:3b:
         e7:8c:05:fd:40:e6:db:85:80:82:8d:05:f1:19:fb:14:8d:a7:
         bb:c0:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org