Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/671bd03f-a4fe-37b9-af21-ade560c9485f.roa
File:                     671bd03f-a4fe-37b9-af21-ade560c9485f.roa (raw, json)
Hash identifier:          ZqgqM03SuGu2I+Z1QlslmyXa8OUrevmRNkokIX8pQwI=
Subject key identifier:   EB:F9:A1:6C:A4:D0:21:46:0C:D7:A6:EB:4D:FB:63:26:92:BC:7B:06
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA118DF746765DA1024F7480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/671bd03f-a4fe-37b9-af21-ade560c9485f.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        70.50.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:8d:f7:46:76:5d:a1:02:4f:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=5d251b91-43e8-4024-9d95-1641ab782a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:36:00:03:0c:2c:32:bb:4a:66:9e:83:de:
                    3b:58:3d:32:94:40:58:36:56:ec:7a:6f:36:de:d0:
                    cc:15:b3:46:17:f4:da:6d:34:99:43:2f:ad:19:7c:
                    9b:a5:6b:b2:d4:d0:4e:f3:dc:4f:c0:b2:4e:98:93:
                    76:a0:c4:ba:3f:a3:c0:89:04:b8:8c:b8:1b:56:63:
                    9e:b8:fd:f0:af:13:0e:d9:73:b3:19:fb:ee:f0:3e:
                    ea:65:dc:74:d2:30:8d:7f:29:ed:2c:78:65:c0:54:
                    de:2a:55:e9:ac:56:51:2e:3c:61:8c:f5:c8:50:56:
                    8f:58:ae:6a:b8:22:18:7e:2a:af:17:79:bd:7a:af:
                    82:3f:81:98:fa:a3:b1:b7:14:0c:ae:f9:ff:b3:66:
                    ee:3c:2c:c8:a2:60:ef:63:cc:fe:19:bd:d0:bf:2c:
                    6e:86:e2:6a:68:ca:9e:7d:04:6d:dc:1a:5a:5f:81:
                    de:6a:e6:b1:c5:1d:a2:04:8c:a5:c1:f3:87:4f:49:
                    22:58:41:b1:6d:9b:56:19:f0:eb:46:be:9e:88:db:
                    68:f5:21:61:de:b1:9c:dc:20:fd:71:8f:48:fa:a9:
                    6e:f1:02:2a:4d:08:27:44:61:db:cc:44:0b:36:d9:
                    d9:51:aa:6d:ff:6c:e7:e1:ec:05:42:9d:32:ca:24:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F9:A1:6C:A4:D0:21:46:0C:D7:A6:EB:4D:FB:63:26:92:BC:7B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/671bd03f-a4fe-37b9-af21-ade560c9485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.50.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:30:fc:c4:a0:24:71:97:cc:e3:cb:13:0c:76:32:fb:88:
         d5:c2:5e:e2:2e:8e:1b:44:30:a3:73:48:5e:9e:91:ea:98:10:
         fb:a8:68:c1:1c:55:69:c2:55:fd:e2:4f:89:60:4d:1e:29:69:
         b2:14:49:6d:a2:f2:c3:31:54:19:77:60:52:57:57:28:d3:13:
         e5:ee:c6:5a:dc:17:8c:8d:d6:0e:16:b1:ec:db:76:2f:7a:9d:
         2d:bb:61:ca:f6:04:84:98:50:ef:5a:3b:80:95:8a:c1:5a:7f:
         6f:80:60:f3:13:6c:30:c7:7f:d9:cd:a1:45:70:55:d1:04:ef:
         84:8d:25:73:76:c4:96:12:ea:be:87:e9:a5:4e:ac:7d:9e:5e:
         c6:f4:fd:30:f4:05:71:0e:ed:45:42:01:96:ac:c9:b1:6e:39:
         71:62:39:a0:29:ed:c8:9c:db:72:88:4b:5b:c4:d0:25:24:f1:
         f6:2a:d0:c1:9a:31:13:0b:60:43:73:76:22:0a:58:c5:0d:7b:
         65:26:12:bf:c6:f2:98:4a:ab:c9:5b:7f:f7:5c:33:61:76:3f:
         58:6f:6a:c8:1c:16:5f:6c:b4:36:1a:73:ae:bf:01:ec:0b:7d:
         ed:17:14:96:ea:5a:2b:80:c1:f6:3f:26:91:7c:cb:ec:17:91:
         3d:71:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org