Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820832e4-96f4-30c5-9299-d33ffe87c0da.roa
File:                     820832e4-96f4-30c5-9299-d33ffe87c0da.roa (raw, json)
Hash identifier:          f7TDn7ADpDpVHg2nj7FGbsMFB0QssjlYbzudIIHTwho=
Subject key identifier:   D4:C4:5C:53:1F:7C:62:B4:0F:E9:78:39:A4:44:F6:36:BC:AC:3B:88
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B313A2A17FB352B4E18280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820832e4-96f4-30c5-9299-d33ffe87c0da.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:13:a2:a1:7f:b3:52:b4:e1:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=f775ed99-6f90-40ca-a947-d83d0d82626a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:39:cd:7a:36:f2:b8:10:ae:eb:25:e2:3d:
                    0f:41:8c:2e:7d:eb:ac:c7:d8:ca:fa:58:d5:8d:81:
                    45:b9:67:94:06:28:2b:c5:9f:09:c2:bd:85:c8:87:
                    d4:92:90:0c:be:09:90:a0:aa:03:fd:c4:f5:ff:86:
                    59:fb:73:26:d6:52:52:95:a0:1e:36:fb:c2:36:59:
                    a6:65:62:01:f6:31:58:64:25:75:3f:92:52:9e:0c:
                    70:6a:82:26:6f:f7:76:86:ac:9f:09:83:f6:4a:30:
                    da:4a:75:b9:ea:d8:df:e0:a9:3a:02:f4:cd:67:24:
                    48:8c:4b:d2:e5:94:1a:8d:39:d3:c9:e9:ec:9b:b2:
                    41:13:a2:66:11:4c:e1:5f:0f:63:76:d6:d0:16:53:
                    38:a0:4f:40:9f:4b:1a:1e:d6:ba:f2:d2:87:16:c0:
                    a6:7c:a6:77:98:10:44:13:29:7b:d4:d7:c7:c0:34:
                    e3:5a:1b:e0:cc:19:dc:eb:7a:98:e2:e0:d9:2d:44:
                    03:58:f0:02:d9:b2:c8:0d:2a:d7:23:42:75:59:c2:
                    da:15:b6:9b:a5:e4:41:2d:94:37:b1:75:44:16:45:
                    96:4f:b8:86:12:50:82:01:e4:f9:10:74:0e:c7:44:
                    10:2a:a9:67:c2:50:75:0d:4f:d9:08:a1:69:28:0a:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C4:5C:53:1F:7C:62:B4:0F:E9:78:39:A4:44:F6:36:BC:AC:3B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820832e4-96f4-30c5-9299-d33ffe87c0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6b:0a:2b:7b:e8:87:ce:dc:a0:3a:82:06:b7:e9:b2:0f:13:
         b5:6f:41:e7:86:55:fd:2b:84:ba:59:51:b4:a8:f4:62:51:17:
         bb:5c:98:dd:ef:3b:66:20:67:e5:54:7f:4f:7b:98:30:68:d6:
         01:ea:7a:2f:be:e5:64:83:31:0a:aa:70:20:b7:35:79:9a:33:
         74:55:b0:4f:1c:3c:dc:26:d9:f2:1b:2a:62:2f:2c:3b:ed:99:
         9b:83:69:d8:e5:24:59:9f:2d:1e:ae:bc:c3:83:2a:d4:f4:1b:
         21:5f:d9:55:82:96:01:44:55:c8:9d:52:5d:c9:52:f5:10:ea:
         14:42:73:c7:32:91:bc:1a:5b:43:18:82:90:a1:69:4a:a4:db:
         01:85:09:4f:6f:55:0f:88:ab:92:3d:44:d1:13:13:92:e1:dd:
         4d:b9:21:ad:7f:53:bd:f6:a8:e9:ca:a4:7a:71:af:bd:92:ed:
         63:96:ed:69:85:91:80:d0:22:2a:d9:ae:c9:71:c1:fb:ba:28:
         9c:ef:57:da:1a:0c:76:14:c7:9e:cd:95:46:ca:25:0e:af:e8:
         d1:a4:6e:12:6b:f9:49:2e:94:cb:ba:18:b9:c1:71:54:ff:39:
         f5:a8:7c:7c:94:a1:18:bd:3d:fb:e3:18:df:18:33:ac:3e:8b:
         67:ce:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:40:43 2024 by rpki-client on console-ams.rpki-client.org