Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7475adb8-c318-3011-b695-56c8a4bd76f5.roa
File:                     7475adb8-c318-3011-b695-56c8a4bd76f5.roa (raw, json)
Hash identifier:          Yn/gVnz8i2AL6WnpChBTlFk+UaL1VCTfiJBcF2vUGWY=
Subject key identifier:   7C:A7:A2:BF:F9:5C:C8:65:72:25:CF:B0:18:B8:62:62:7A:DD:9D:63
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B33ECA9E61008E44F0CC40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7475adb8-c318-3011-b695-56c8a4bd76f5.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.29.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:3e:ca:9e:61:00:8e:44:f0:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=130e662c-6ed0-47f8-8b60-78d2ec9201cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:59:cd:69:66:76:b7:3c:d1:2a:7f:06:2a:
                    be:e5:2e:d7:bd:4d:6b:19:22:16:b8:4f:d7:70:44:
                    e6:87:f4:bf:f0:4f:ee:99:01:4f:27:cf:c2:a0:ee:
                    c0:32:86:e2:dc:01:53:0e:b4:21:c7:ae:cb:45:2a:
                    fa:cd:f6:44:d7:7b:45:88:82:7b:11:2e:2d:20:90:
                    83:3e:8b:42:7f:59:bb:41:db:c1:14:fb:e3:bf:43:
                    6a:05:16:cf:72:8e:8f:f5:52:93:a0:22:f6:3f:ab:
                    e2:3a:b9:24:f4:9b:63:7b:8a:ac:89:69:08:49:4e:
                    dd:ea:4f:e7:d7:b4:e3:f5:65:90:23:d6:36:70:2b:
                    39:dd:93:88:3c:d1:e0:18:d5:e6:17:f1:5e:d3:c9:
                    67:22:af:80:f1:cd:7e:d7:a7:9e:0c:6f:c2:05:d5:
                    54:10:bb:a0:6f:6c:86:1e:5c:af:0b:0d:73:a4:00:
                    64:9e:5e:d1:d6:34:bf:b4:18:ee:b8:bb:89:b5:63:
                    2c:40:58:3f:26:cf:54:ac:f4:2d:91:fb:f8:7a:ec:
                    02:4f:7b:2a:ff:83:4e:fb:c4:90:4b:c1:28:c0:e5:
                    16:33:ca:84:2e:76:04:30:28:e8:f0:d8:7b:c0:76:
                    a4:b5:14:6b:26:1d:7c:fc:90:87:5e:ea:9e:da:f2:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A7:A2:BF:F9:5C:C8:65:72:25:CF:B0:18:B8:62:62:7A:DD:9D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7475adb8-c318-3011-b695-56c8a4bd76f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:36:02:1b:44:d4:d7:eb:13:7a:b2:71:de:ea:05:95:eb:0e:
         48:c6:3e:d6:ee:76:f5:df:41:5a:e5:24:8c:e4:69:64:78:bf:
         23:3c:4b:e6:03:7c:a6:1b:a7:9a:3a:b5:85:d0:ec:d9:b2:43:
         3c:bf:96:0f:24:bd:42:28:40:64:ff:d5:f3:4f:af:9f:d2:f4:
         bb:6c:11:98:7b:e6:f7:dc:0b:25:a4:c2:25:d0:d0:09:f0:8a:
         c8:ba:b8:4c:38:12:c3:11:84:34:8e:36:77:3b:57:0b:bd:e1:
         2e:9f:13:07:d0:5c:4c:a2:9a:10:5a:d3:73:ca:32:7b:43:4b:
         0e:8b:51:60:20:2b:8b:fc:f6:65:8a:3e:08:fd:f7:7a:5c:69:
         9a:1e:eb:72:c1:11:9a:b7:08:08:3a:b6:93:4d:12:d0:05:71:
         88:a5:f0:a7:b7:3b:fe:38:8d:76:59:41:3c:50:90:28:df:dd:
         d1:71:0f:6c:f9:4a:6f:86:53:0f:3d:7c:74:ec:27:c0:86:88:
         0c:45:45:e4:af:06:b7:e1:0a:19:ba:21:72:33:54:cf:bb:c1:
         21:a0:97:9d:40:e8:3a:18:84:ed:9f:44:30:5b:88:24:99:fd:
         fa:66:e7:ba:87:54:02:0f:f7:6d:1c:9a:d0:1e:c8:a3:b4:df:
         c8:c4:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-fra.rpki-client.org