Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82267c91-f29e-31f9-9278-78872e506e7f.roa
File:                     82267c91-f29e-31f9-9278-78872e506e7f.roa (raw, json)
Hash identifier:          JvP/wgD2dO8xVHl6ekuutZuD3Ln3+EMlTCHyxHS9AUU=
Subject key identifier:   E6:3B:85:FD:F7:DB:4D:88:78:8F:6E:B0:FA:C2:F0:0F:5F:0D:49:8F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3314B434625A56D40E540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82267c91-f29e-31f9-9278-78872e506e7f.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.28.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:31:4b:43:46:25:a5:6d:40:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=ca2a689a-fbcf-44d4-ac9e-0fa6b0afb294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:cc:9e:65:35:ee:12:eb:6a:61:57:e4:b3:
                    de:81:2e:40:cd:db:05:3b:aa:1d:b3:17:9d:91:23:
                    6d:94:ac:89:6f:fa:d8:de:3c:d5:3d:2c:fe:35:02:
                    b8:fc:6d:ac:5b:a7:9c:98:ea:7b:6a:5e:ae:ba:8a:
                    b0:6d:d2:8a:c8:f8:89:53:ac:20:57:0b:e2:5c:b4:
                    9d:3f:c0:c1:5d:72:1a:a0:d0:77:8b:b2:91:4e:7a:
                    f3:7e:93:c4:3b:d9:0d:41:b6:51:c5:1f:e2:b4:86:
                    1e:1c:a0:8a:c4:a2:08:7c:fd:3a:9b:61:3c:88:b1:
                    0c:88:90:91:34:49:19:20:84:96:4f:a5:0a:5d:e2:
                    73:84:38:bc:e1:74:ea:1d:e3:6e:f2:a9:68:d7:43:
                    af:5c:7b:4d:95:4c:d8:a2:de:b8:59:32:07:db:ff:
                    72:75:cd:5c:ad:23:22:34:16:a1:ae:45:78:03:a2:
                    c5:41:15:5e:bc:1d:b1:ac:82:cc:35:76:bd:f0:58:
                    82:93:3e:b4:17:28:8d:cc:dc:07:1c:6d:ba:2f:c3:
                    21:9d:96:2c:36:98:77:b6:7f:61:29:b3:4a:58:7a:
                    59:6d:5a:05:37:ef:36:fc:c4:4a:7a:6d:f0:bd:1f:
                    c7:e1:8d:c5:75:06:f9:ba:07:9b:d1:18:97:ca:86:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3B:85:FD:F7:DB:4D:88:78:8F:6E:B0:FA:C2:F0:0F:5F:0D:49:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82267c91-f29e-31f9-9278-78872e506e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:84:af:44:08:b8:0b:eb:d7:e1:56:b1:f1:55:43:91:72:
         6c:0b:99:06:44:e8:5b:95:8b:42:4b:fb:ba:2f:cf:56:d3:b9:
         08:6a:0a:4e:b0:18:f4:84:c5:93:1f:c8:89:2f:60:3b:35:6e:
         7a:46:b5:0b:07:27:25:fb:d8:03:c7:a7:30:26:8f:eb:df:c8:
         96:5f:89:21:7b:43:0a:4c:14:d3:62:11:4b:53:2d:7c:63:5c:
         32:de:c3:36:5e:23:07:dc:8a:0b:df:f6:ac:3b:46:b3:b4:20:
         09:78:78:e1:1e:15:f8:e4:a6:75:11:b4:85:be:70:f9:b8:82:
         65:43:06:f0:50:1d:c3:3d:83:ae:c9:f4:a9:73:d1:1d:70:ff:
         64:78:10:09:ad:d0:a5:06:db:ed:e0:84:1f:39:4a:87:33:3f:
         95:bb:d2:28:6f:74:c8:f3:e2:5b:75:0c:86:79:08:b0:01:9e:
         d7:18:ce:eb:48:35:e7:8f:c9:f1:04:49:52:95:c4:8b:86:28:
         eb:b1:02:ce:ac:b9:0a:3c:31:31:d9:b9:6e:07:46:e4:3f:5b:
         f7:36:70:b6:ae:d0:7f:bf:75:7a:c9:7a:61:f8:4f:f3:51:66:
         f7:f7:09:62:d7:df:15:d2:af:7f:54:17:bc:20:0e:a1:bc:a1:
         a2:5f:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:41:28 2024 by rpki-client on console-fra.rpki-client.org