Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71e6725d-07e2-3b6e-88f1-429eb428bc4c.roa
File:                     71e6725d-07e2-3b6e-88f1-429eb428bc4c.roa (raw, json)
Hash identifier:          DsuO1GppSAAyT6XpOof6oml72dC9KGyExRCtLempY1Y=
Subject key identifier:   21:64:E0:C8:6D:53:39:1A:47:F5:A8:5B:93:AF:26:4B:29:D1:27:DA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E9AF6E70A7E56E4EFA080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71e6725d-07e2-3b6e-88f1-429eb428bc4c.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     398721
IP address blocks:        70.28.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:9a:f6:e7:0a:7e:56:e4:ef:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=e0436ca9-9858-4c87-a3af-91ba121a7c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:54:53:b2:f6:4f:a4:62:4e:22:33:12:16:0e:
                    e5:d6:b4:bd:bc:88:c5:f5:e7:c8:4f:06:83:84:6d:
                    b1:69:e0:37:16:ee:06:f0:d9:38:0f:1f:00:c1:88:
                    df:74:ed:7d:93:0c:f3:fe:f1:c1:f7:b0:c2:c1:14:
                    20:aa:5e:56:9e:8b:75:85:17:58:f3:06:f1:9c:4a:
                    75:46:3b:b5:84:1a:0a:f0:ba:70:0f:32:57:59:04:
                    94:3d:ae:7d:ac:f7:50:8a:af:e1:79:fd:6a:5d:55:
                    d0:b9:80:9f:0d:0a:ab:b8:b6:14:f3:ce:02:e5:3b:
                    1b:aa:54:b2:7c:3d:d7:3b:be:ed:c8:9c:aa:46:0b:
                    af:36:80:92:7e:05:f5:62:58:c7:04:e9:97:48:98:
                    a3:47:19:5b:06:fc:f7:ce:b1:e5:c5:62:ac:f4:87:
                    e4:af:ea:81:37:16:a3:e2:59:14:2c:f9:49:6b:b9:
                    9c:a0:12:c8:af:81:ec:74:0c:b7:fa:dc:6d:31:c2:
                    e8:e0:26:4b:e2:b4:f7:b5:15:10:e9:03:86:23:21:
                    6d:04:86:8a:b1:f9:92:63:cd:84:87:3a:98:a8:f7:
                    1f:cd:b7:d1:4b:a7:5d:40:ac:26:53:b6:1f:11:aa:
                    39:be:ee:ba:0e:ae:8d:86:f4:73:37:d2:17:67:6b:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:E0:C8:6D:53:39:1A:47:F5:A8:5B:93:AF:26:4B:29:D1:27:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71e6725d-07e2-3b6e-88f1-429eb428bc4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a5:78:fd:94:a3:0e:fb:51:ad:f3:08:f2:0d:d2:72:34:52:
         51:96:07:c6:39:28:b0:5e:4c:8f:c6:8f:84:e2:c0:8a:04:92:
         b0:85:22:df:57:c6:8b:ed:b5:3a:db:43:03:6c:8d:81:41:5b:
         b6:c2:4a:a6:f8:ab:07:5d:ad:33:3c:0f:56:c5:e3:48:f0:99:
         b5:c7:ee:e5:c3:21:04:3c:53:c9:78:f8:aa:16:4e:1b:fc:79:
         42:88:78:48:e1:42:97:06:c7:58:c1:9f:a7:c3:f9:37:c1:e6:
         78:e3:94:99:d4:2a:93:26:d7:b7:26:23:02:5c:a6:2d:48:97:
         b3:1f:a4:65:e3:60:fb:85:e5:54:ad:83:c6:30:98:1e:fe:10:
         39:6d:22:0f:18:30:c6:94:e6:2c:f0:71:a0:ef:3c:72:e4:48:
         69:3d:30:41:6a:bf:ca:2e:35:c3:a1:4d:00:d6:2a:a8:0f:da:
         ed:01:8a:39:61:ba:31:ca:70:c1:85:f6:58:ff:29:16:0d:aa:
         bb:37:ef:30:c2:9c:2a:84:bd:27:b2:f9:66:90:ca:e5:cf:80:
         c9:ce:69:bb:5c:e8:42:75:81:8c:b1:8c:df:98:74:3b:c6:d6:
         8e:a7:52:b4:11:36:3a:b7:76:2a:30:ee:bd:73:a1:a6:9a:5c:
         40:39:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org