Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65ef92f0-7d7c-3a79-bfe6-e01f36f54b74.roa
File:                     65ef92f0-7d7c-3a79-bfe6-e01f36f54b74.roa (raw, json)
Hash identifier:          wm3vsi3X2eb+bv9UQ/+ReuwIoE2c573QN8RW4K0jHsM=
Subject key identifier:   D3:49:D7:E3:BA:92:34:64:8A:96:0B:2B:2A:36:7E:9D:92:E6:A1:EB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E98854B3BBEE899420280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65ef92f0-7d7c-3a79-bfe6-e01f36f54b74.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        70.27.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:98:85:4b:3b:be:e8:99:42:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=e678ab9f-62c9-4376-8ad1-37c07fd4e1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:aa:2c:6e:2d:ae:bc:b7:7d:ff:77:63:bd:
                    97:12:24:df:8c:a9:0a:80:47:e4:82:3d:3f:db:74:
                    d5:fe:74:6f:5e:26:c1:5a:df:da:22:2e:57:3b:5a:
                    40:75:48:69:79:3b:04:ed:86:17:f0:20:6e:cd:52:
                    81:15:fe:58:03:31:7b:aa:98:6d:b7:59:13:a4:40:
                    7b:d9:31:77:cd:8a:f8:67:c5:4c:e9:8e:cf:c6:9a:
                    ae:60:c6:02:28:06:e8:20:e3:24:dd:be:08:42:9f:
                    c9:3b:c1:dd:c6:bd:88:48:d7:98:b7:85:38:72:2b:
                    7c:b5:5a:9e:ec:d5:60:8f:8c:36:9f:88:b5:a5:26:
                    dd:f3:69:72:78:30:33:4e:47:b6:76:78:c2:97:e9:
                    58:70:a3:27:1b:28:9a:e4:00:fc:8f:df:7e:ae:8f:
                    2d:a9:f4:a7:15:2b:bc:95:ca:0a:5c:37:0d:3c:fa:
                    e3:9c:a7:b7:8a:4c:71:58:02:18:fc:d7:a3:a4:72:
                    3f:0a:3c:c7:6f:8f:7c:79:3d:b3:f3:af:24:58:ba:
                    d8:c4:00:3a:6c:4b:aa:9b:eb:4d:2c:67:17:b6:8f:
                    66:ec:f1:3d:be:40:66:9f:0b:2a:29:3a:7c:a1:89:
                    00:01:b3:31:9d:07:8c:8e:8f:51:6a:82:d0:b5:8c:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:49:D7:E3:BA:92:34:64:8A:96:0B:2B:2A:36:7E:9D:92:E6:A1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65ef92f0-7d7c-3a79-bfe6-e01f36f54b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4a:1f:b7:e6:e0:22:09:a0:64:08:72:65:de:37:4e:b0:75:
         39:3b:bc:02:09:b5:8c:32:a4:53:d3:8e:f5:2d:01:dd:29:c8:
         08:3d:59:4a:45:df:d1:ba:aa:67:c6:92:cd:95:6b:03:b5:d6:
         fe:63:d4:f2:51:ee:2b:f2:3e:f5:78:cd:ae:fe:a0:80:e3:be:
         af:10:bc:78:ca:2a:0e:66:eb:1d:5b:ba:0c:91:86:5f:b9:3e:
         bf:75:07:fb:62:0e:0d:d2:54:c6:cc:92:64:bb:15:05:89:02:
         38:32:b6:10:2b:43:81:e3:0a:bc:8a:e1:7f:a2:71:3f:31:90:
         56:b2:5d:7a:c8:6c:49:79:95:54:6e:f1:a3:b8:35:98:84:a4:
         19:fb:33:43:5e:37:48:26:f4:c1:a6:5f:0e:28:ed:21:7c:ef:
         c0:cc:2e:d0:f5:92:56:b9:cc:0a:51:e6:44:7d:0f:31:ae:d0:
         f4:64:db:a4:91:5d:b6:f2:8c:22:d1:ab:a5:51:a6:ee:37:a1:
         68:ba:41:14:56:39:cc:d5:b4:bf:4a:10:3d:21:e9:67:3c:91:
         c8:d3:10:2e:2c:cd:62:25:83:5c:4b:85:e9:1f:a6:91:d8:98:
         a0:64:58:b7:47:c8:65:84:a8:cc:7a:51:5d:cf:6b:0b:cd:ae:
         6a:67:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org