Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9bfd6fcb-181b-3924-ad67-b1e4ae77baae.roa
File:                     9bfd6fcb-181b-3924-ad67-b1e4ae77baae.roa (raw, json)
Hash identifier:          qmjhr07tHzJm4QtOpFjUGy1vPyPObGKJRLrOnJtp3pY=
Subject key identifier:   89:14:69:2A:77:3A:6F:69:08:19:EB:70:0F:3D:41:68:98:81:D1:4C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EACC81DD0432C44BDC480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9bfd6fcb-181b-3924-ad67-b1e4ae77baae.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        70.30.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:ac:c8:1d:d0:43:2c:44:bd:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=05d690cc-6934-4ec9-b09f-17634783929f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:51:d9:0b:f4:b0:bb:46:95:63:76:24:e2:
                    6d:e3:a9:8b:00:8e:2b:cc:57:84:68:bd:ef:85:9d:
                    69:d2:e0:7a:a1:07:d3:82:0a:e5:ff:60:31:94:d4:
                    f7:0e:b2:9c:42:d1:2b:c2:4b:b5:4f:4d:9a:a4:4d:
                    22:fb:46:f1:fe:f1:17:cb:0d:25:a2:87:f4:d4:c6:
                    95:4b:82:41:9d:b4:37:a6:18:42:e0:79:e1:f7:86:
                    3a:84:1f:17:65:c8:ef:3a:53:2b:d9:de:9c:be:dc:
                    f8:d5:55:6a:99:a4:59:a4:88:02:26:f5:18:7b:f3:
                    8a:0d:1d:e0:a7:46:10:f1:80:78:77:9d:8b:a2:b1:
                    3a:29:1c:43:d6:2e:e4:10:e2:10:d4:69:a3:86:98:
                    f5:72:09:ba:1b:bc:cd:be:8a:93:0b:be:2c:26:fc:
                    ae:ef:f1:bd:91:ca:91:b6:00:de:1b:f0:d7:0c:91:
                    94:81:0d:22:25:c5:f8:f6:6c:eb:08:2a:ab:d9:f3:
                    4f:96:8e:b9:6b:67:35:0f:ca:d1:16:b7:fd:20:7b:
                    fe:d3:12:7e:e6:08:29:06:e9:31:96:f1:fa:0a:49:
                    ce:08:7f:2f:98:2a:4b:e6:e3:d6:68:0e:c2:54:65:
                    a4:85:8b:b1:51:c6:30:91:d3:37:c5:93:39:78:4a:
                    99:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:69:2A:77:3A:6F:69:08:19:EB:70:0F:3D:41:68:98:81:D1:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9bfd6fcb-181b-3924-ad67-b1e4ae77baae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:26:f1:77:c9:c1:c2:c8:c8:ec:ce:cc:37:63:ad:59:71:
         8b:83:19:f6:c0:2c:64:67:f2:cf:bb:60:96:9c:7c:8a:e8:0f:
         dc:8f:34:7a:55:d0:43:fe:9a:fd:84:a7:47:f1:6f:19:1d:fd:
         1b:a3:00:a2:76:89:c9:d6:a9:70:52:1b:f8:b5:b6:ab:de:a9:
         ca:8f:fe:db:15:39:c1:ac:90:05:7c:dc:69:a5:3f:f7:fa:0a:
         62:c5:4e:2e:ad:fd:39:59:c8:9a:ed:30:d1:7a:59:12:8b:79:
         ff:97:86:ba:7b:9a:e8:5a:a6:b8:a7:64:be:a2:e0:88:99:e1:
         51:23:16:f5:ea:07:92:62:f7:86:c8:88:a9:53:d9:61:92:a1:
         9d:c3:17:9c:3d:33:ff:9c:3b:39:95:c7:92:bb:87:28:cd:0f:
         ab:08:33:81:73:96:33:c5:e9:d7:d5:d6:11:08:e2:e7:9b:4d:
         94:2d:d8:14:b1:38:48:68:df:5a:f2:63:f0:99:99:21:65:70:
         58:42:da:fb:66:b6:41:d4:1d:b2:93:b1:c9:10:89:cd:1b:a2:
         82:a9:1f:62:d6:e5:1a:24:b8:85:ad:a6:52:b9:6b:a4:39:06:
         ec:fd:9c:fa:40:1d:2a:cc:d9:14:63:30:6b:05:c7:be:ae:63:
         f0:14:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:59 2024 by rpki-client on console-ams.rpki-client.org