Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3f563e4-0d72-3f0b-8c94-c15ece685288.roa
File:                     a3f563e4-0d72-3f0b-8c94-c15ece685288.roa (raw, json)
Hash identifier:          mFHO51I3JQQ7qLYbxH6GU69kOzC0YG9YZWeFkySwrlA=
Subject key identifier:   41:FF:CB:31:16:19:3F:AA:CE:EE:AB:97:42:F1:C3:B8:AF:59:15:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EA52186199E97733B4400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3f563e4-0d72-3f0b-8c94-c15ece685288.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        70.28.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:a5:21:86:19:9e:97:73:3b:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=e37e59a9-debf-4a3d-9d42-9fcbc1cecabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:18:ad:8d:d7:85:34:e9:da:ad:93:b1:14:
                    37:4c:cf:ec:3b:ff:48:60:f3:38:3e:66:8d:fe:ab:
                    61:09:2b:8c:0a:bd:cc:c0:ea:c0:90:41:7a:fe:f8:
                    c9:f9:6e:45:44:f4:cd:8d:a6:74:76:45:e4:a3:c6:
                    00:42:10:af:be:43:16:a9:4a:cd:0e:58:11:b4:c9:
                    37:2c:3b:a9:fd:5e:b7:25:ff:1d:9a:9c:71:02:e9:
                    b8:00:05:3c:4f:d0:bd:12:40:d0:13:06:65:be:19:
                    e1:19:4e:9e:98:ed:03:75:6c:b7:56:6a:6f:26:f5:
                    c8:78:e2:2b:d9:da:9e:a5:52:31:29:33:80:ca:23:
                    79:29:37:5d:98:1b:9e:09:74:a9:2e:c0:64:41:78:
                    71:b5:28:03:8f:75:f1:67:9b:81:08:ff:b9:07:3f:
                    fa:c0:1d:3b:59:ae:80:53:be:a3:06:45:b2:cd:75:
                    7e:a4:d0:a3:fe:07:08:2a:3e:ac:7c:f4:5b:40:bc:
                    25:7e:ec:34:78:f4:90:a4:59:49:56:23:71:fd:87:
                    d8:09:8d:65:8c:78:d0:d3:e7:1a:79:47:6e:6f:39:
                    c9:8c:b6:af:d9:57:57:80:7b:e8:10:5c:c8:69:c7:
                    7e:72:3c:c5:3e:03:05:a3:a4:ec:26:66:89:f9:7d:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FF:CB:31:16:19:3F:AA:CE:EE:AB:97:42:F1:C3:B8:AF:59:15:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3f563e4-0d72-3f0b-8c94-c15ece685288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:57:69:e5:61:5e:2f:78:20:9b:ce:da:fb:a7:59:f3:e9:f9:
         e3:ff:dd:6d:4d:60:7a:7b:36:b9:e5:d7:ac:64:f8:65:07:53:
         7e:7f:6b:19:4b:04:6d:fe:33:67:c0:3e:1a:ac:a4:af:77:a6:
         28:26:13:b9:fa:97:2b:53:71:d4:a6:9e:0e:de:a6:a6:50:57:
         fe:e3:0d:4a:d0:5d:ec:ac:5e:19:d7:b9:c6:ca:88:6b:7e:03:
         92:5a:37:cc:a8:4a:ee:73:a4:e2:f4:ff:15:8c:39:36:85:16:
         18:35:c1:f6:3a:34:29:bf:2c:52:69:f7:9f:cf:98:d3:4e:52:
         04:24:fd:74:09:80:b8:db:19:1b:b4:64:05:33:66:61:77:e2:
         7a:d5:73:5d:41:17:74:42:15:18:18:53:d5:39:fd:29:c1:4f:
         a8:fc:4e:e8:8b:ab:8c:60:97:bb:a0:3f:d8:61:a4:55:0b:82:
         2d:5a:ce:b5:91:b4:7d:4a:90:8c:24:3a:4b:5f:37:a2:64:49:
         d4:d1:e6:63:bc:05:9f:cd:c7:84:27:ac:e3:45:66:19:e5:71:
         d3:45:e2:44:d2:50:c0:51:97:d8:a3:9e:4f:ef:45:91:db:87:
         40:44:94:f0:ad:9f:1c:18:1d:fc:ee:af:c5:4d:11:fb:65:e7:
         18:39:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:10 2024 by rpki-client on console-fra.rpki-client.org