Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9685d3b0-37e2-31bf-b61e-59a3733d7825.roa
File:                     9685d3b0-37e2-31bf-b61e-59a3733d7825.roa (raw, json)
Hash identifier:          x9AHyT+j4/AQT4uKUWe5vLXD2jZZDkeTTCsjS8rcr2Q=
Subject key identifier:   A4:B6:EE:3A:D8:62:93:9F:3D:07:14:0C:1D:A3:2C:89:50:F6:6A:57
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B314C64727CD4C0EEBCB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9685d3b0-37e2-31bf-b61e-59a3733d7825.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:14:c6:47:27:cd:4c:0e:eb:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=651f8cb6-2e8d-41e2-a076-b46e20276456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:9c:bf:d4:5c:f9:da:cf:19:17:eb:c9:f6:
                    19:8f:fa:6f:08:89:b9:2e:2b:12:08:64:f9:6f:86:
                    83:14:00:22:75:44:6e:e3:a4:96:30:c4:90:89:b9:
                    e0:1e:3f:25:38:48:8e:15:a5:59:a2:96:c7:13:a4:
                    fa:e3:b9:86:4f:b2:1e:41:bc:01:d9:71:39:9b:3c:
                    6e:d7:48:d3:09:ee:1f:05:a0:7f:40:8a:9b:5e:e7:
                    8c:ec:9e:88:6e:08:32:6b:d3:ce:ee:42:a9:ba:95:
                    6e:49:d1:ff:06:d3:f2:5e:60:1e:10:a3:c3:f8:11:
                    cd:34:0b:c2:d4:a3:4a:0a:6a:fc:26:28:6c:cb:98:
                    2c:54:96:d4:86:87:05:2a:d3:59:4f:fc:da:cc:b5:
                    c6:f6:60:d9:23:a6:5f:9f:8e:13:45:8e:8b:63:79:
                    15:81:99:e2:58:eb:df:93:8e:15:1f:e3:c8:ad:ed:
                    cc:b3:0a:fb:77:f9:99:4e:b4:3e:fe:7f:44:c5:5b:
                    8f:b5:07:49:c3:86:8b:d3:5c:a2:aa:f6:43:40:36:
                    84:f4:b5:b1:fe:82:b5:01:a8:58:9e:0e:fc:d9:4f:
                    51:29:8b:8d:e4:d5:dd:55:4f:bd:e0:7b:1b:32:c4:
                    53:45:ad:60:b9:cb:bd:1f:40:6e:93:4a:62:be:59:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:EE:3A:D8:62:93:9F:3D:07:14:0C:1D:A3:2C:89:50:F6:6A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9685d3b0-37e2-31bf-b61e-59a3733d7825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:56:9f:db:43:25:7f:e8:bf:7c:30:35:5c:bf:93:14:05:5e:
         7d:92:68:02:7d:2b:d4:e5:ba:4d:54:61:db:ab:58:96:80:5c:
         eb:e6:c7:74:d6:a2:08:99:4c:e3:a4:20:3c:e8:a4:fd:e4:bb:
         c8:48:4a:bd:b8:06:f4:fa:38:1a:e0:df:95:df:91:54:38:d6:
         7c:52:88:7e:63:4e:25:95:98:93:f3:8a:e6:57:08:d4:01:07:
         10:bd:16:c0:98:bb:ae:f5:33:c7:f5:bc:55:aa:88:1f:98:2b:
         e9:ed:45:03:43:2e:06:b6:ab:73:c7:16:92:ae:df:44:87:67:
         2d:1a:5e:c6:83:69:9b:58:36:8f:47:54:3a:8e:57:31:70:12:
         8d:56:1b:d6:3e:56:6b:6d:a1:08:3e:54:86:30:0c:3f:d8:45:
         0a:d5:6d:fa:2d:3f:bc:56:73:8f:73:c3:7c:e5:3d:e0:27:50:
         a9:b6:49:0d:42:5e:0f:54:87:6d:29:cb:a9:ca:a9:6c:2d:aa:
         3c:de:31:8c:f8:11:b4:a2:74:47:a3:43:af:89:ab:24:36:cb:
         57:e8:d7:60:23:3c:a1:42:88:88:5c:42:26:31:5d:4a:74:7d:
         85:c6:1d:18:b7:48:91:1d:4d:a3:e7:6c:af:a4:00:14:10:43:
         b4:73:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:48:00 2024 by rpki-client on console-fra.rpki-client.org