Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6bd10e7-9c81-3ed1-8422-abcf404633e4.roa
File:                     a6bd10e7-9c81-3ed1-8422-abcf404633e4.roa (raw, json)
Hash identifier:          EdEyW/pdHOiHuIAaGlMX7EQizAKwLW3OMBrj+1bq3Ik=
Subject key identifier:   BA:F4:28:8B:D9:E0:04:54:0D:07:11:0B:D1:A4:0C:61:9F:0E:DF:8C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F441B361117828DE36580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6bd10e7-9c81-3ed1-8422-abcf404633e4.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        174.91.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:44:1b:36:11:17:82:8d:e3:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=c6dbff52-4a48-4164-852a-c44c2920aad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ed:b1:c2:dc:3c:10:67:33:ba:41:a6:b3:c8:
                    85:eb:b1:87:96:7b:db:bf:20:22:c4:6d:ee:27:f1:
                    bc:68:f0:a7:9c:46:30:ce:f4:18:80:39:08:69:de:
                    b3:49:2b:07:b7:11:52:cc:d3:0e:8a:eb:a3:98:29:
                    7e:05:e0:21:42:a5:23:d7:48:dd:b4:ad:87:c6:f0:
                    72:54:71:68:cd:06:6d:45:64:78:21:81:a3:86:76:
                    04:83:e4:cf:5f:d0:d4:47:60:ff:71:54:fd:7b:8b:
                    a5:5f:df:23:4d:cb:0a:f1:f1:79:62:0c:84:e2:34:
                    83:fc:b0:80:84:fc:70:7c:34:b0:7d:e0:c3:12:7c:
                    1a:78:09:a1:6e:49:9b:0a:88:8f:22:99:58:76:ac:
                    db:51:e8:3e:48:b0:08:5c:b8:ff:97:a8:b0:e2:80:
                    9f:54:15:b6:d4:6f:75:8c:f2:55:32:07:07:a1:1e:
                    ca:b8:eb:01:81:22:10:12:fd:81:b3:95:b9:51:40:
                    0e:cf:40:b8:46:ab:ea:4a:eb:8f:a0:99:ff:12:1d:
                    89:58:16:f0:f0:d7:c2:e5:a9:71:c1:9f:71:60:88:
                    ed:a1:84:00:90:f4:d1:52:6d:3d:e1:27:47:0a:f0:
                    bc:4f:fe:af:dc:78:6a:1f:d3:ae:ec:69:65:fc:96:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:28:8B:D9:E0:04:54:0D:07:11:0B:D1:A4:0C:61:9F:0E:DF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6bd10e7-9c81-3ed1-8422-abcf404633e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.91.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f2:3c:64:07:2d:07:75:c2:ef:0e:5d:07:ae:04:cb:0e:38:
         bc:79:62:8e:20:ac:f6:9d:1b:88:f1:b3:ba:96:9c:4b:81:14:
         69:23:3f:c3:96:d3:3b:3c:38:f3:1d:4c:26:46:77:9d:e4:3d:
         23:eb:3f:84:43:67:0f:25:99:a5:9f:2d:3f:e7:61:9a:b2:fa:
         24:9a:ab:7a:57:73:d2:76:8a:5e:d3:83:c8:77:c2:75:ee:a9:
         7d:df:3c:a6:0c:6e:8b:92:8f:d0:d1:c3:8d:2f:4f:f3:47:5b:
         5d:d3:65:c1:77:3b:1f:4b:1f:27:cd:a0:8b:f9:e8:14:ed:a9:
         e3:64:7c:63:ac:38:e4:87:cf:a6:b9:d4:d5:14:24:5f:bb:bb:
         ea:5a:2c:ed:d3:44:48:1f:c0:de:36:93:48:ce:64:ae:6b:87:
         89:fe:23:21:c3:1b:5a:c9:37:65:9b:ae:c2:c0:a6:b1:ad:37:
         d4:e6:35:2b:21:1f:2c:14:39:04:df:e6:1f:66:f1:39:5c:8c:
         4c:e9:ba:37:87:f7:d7:d8:4c:bf:8e:db:e7:22:70:fc:f2:af:
         e0:6a:1c:12:cb:78:5c:5c:d1:46:9c:5f:66:56:01:2c:73:a2:
         f4:cc:fe:70:fb:23:aa:14:82:29:90:2d:a4:ee:b6:60:4c:c9:
         33:ef:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org