Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aecb24c2-c321-3e7d-b3da-df3d5d1e177c.roa
File:                     aecb24c2-c321-3e7d-b3da-df3d5d1e177c.roa (raw, json)
Hash identifier:          blXK1HjHUdL+UOeH4sJUCtyKIxvkAHMe1gxWmw1c5SQ=
Subject key identifier:   66:EF:D9:13:95:AC:0F:12:5F:53:BC:44:1E:C3:8A:8B:35:F0:00:D5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E61D954E0F80AC6042E40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aecb24c2-c321-3e7d-b3da-df3d5d1e177c.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        67.69.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:61:d9:54:e0:f8:0a:c6:04:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=fd486977-524a-4212-9f6d-6a4a01b5b923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:89:cf:05:22:4f:a3:b2:e0:41:a4:08:f4:
                    75:fd:43:e0:34:71:42:d0:13:1b:6d:e9:23:3b:c4:
                    b0:45:8b:71:ce:f1:b5:0d:32:94:8a:0c:8e:62:c6:
                    08:f5:7b:93:b2:ed:18:a1:cf:c7:8f:de:45:b1:96:
                    9d:4f:34:29:bc:3b:e8:84:77:97:e7:27:36:3f:fc:
                    ac:f9:cb:40:f2:ca:12:59:a8:92:6e:0d:c2:0b:11:
                    51:7e:65:07:3f:8a:49:1e:57:f3:97:86:3d:97:65:
                    3f:06:4b:3c:7d:8b:71:be:85:09:95:b4:81:c9:77:
                    1d:12:a3:44:59:84:cd:d4:44:0c:3f:f5:c9:e6:e7:
                    aa:f8:93:c0:a1:62:5a:39:f9:ca:cc:86:5c:af:54:
                    d2:5a:85:64:56:2a:ed:5d:f3:08:a0:cc:4e:e9:a9:
                    31:b0:65:89:47:50:1f:31:5e:b0:6e:01:5d:c0:61:
                    39:90:00:03:c0:2d:a1:83:7c:3f:ee:76:d9:29:e3:
                    57:ae:0c:94:43:84:3d:0d:24:46:38:77:ec:c8:12:
                    61:2c:01:dd:c4:25:77:cd:e8:d0:dd:fa:09:c7:9f:
                    0d:1a:c7:0d:69:20:32:40:1a:76:8b:18:50:ad:67:
                    b1:ff:42:c7:be:70:30:b4:7c:5d:3a:ef:be:05:7a:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EF:D9:13:95:AC:0F:12:5F:53:BC:44:1E:C3:8A:8B:35:F0:00:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/aecb24c2-c321-3e7d-b3da-df3d5d1e177c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:29:30:88:a7:c2:30:fb:5b:52:47:16:ce:92:64:04:ff:
         f2:4c:4d:ed:18:9f:c8:85:ca:67:d1:56:fc:97:9e:f2:78:b8:
         a2:92:d6:78:84:48:56:e0:51:dc:89:07:d0:cf:31:6e:59:82:
         55:35:7c:37:70:5c:90:7f:65:e9:2c:7a:8a:48:06:60:7c:c3:
         95:f4:73:7e:8d:96:fc:36:67:31:59:0d:59:37:1a:64:91:84:
         58:65:e0:5d:54:e7:b7:79:b8:37:f9:06:cc:58:90:14:9c:a3:
         5b:95:05:30:42:2f:17:3a:f4:93:65:40:7a:52:76:fb:43:bd:
         49:15:8a:a0:56:7f:33:47:18:d3:51:78:86:65:42:98:ac:22:
         8e:84:b8:c7:fe:42:0e:3c:d6:a8:22:90:e4:fe:7a:31:bd:de:
         5e:62:5d:f3:8d:42:ef:a9:69:54:d5:48:c1:b5:d4:89:ba:34:
         eb:83:66:d8:5d:da:5b:e4:5f:ad:37:bf:36:c5:3c:a5:92:13:
         0f:9b:de:74:c0:f3:61:2f:f2:d8:95:5f:35:7d:ed:bf:36:03:
         4a:e2:f4:06:6d:89:bc:d6:cc:fa:f9:a8:58:f2:39:d8:44:85:
         ce:d9:7a:6c:0c:91:4a:45:32:82:38:64:64:6f:79:f8:53:d5:
         17:36:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org