Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b52252da-9aef-34fc-b81e-d579bc984d82.roa
File:                     b52252da-9aef-34fc-b81e-d579bc984d82.roa (raw, json)
Hash identifier:          elZtuDUlHUojSXJs/j7xM4J10ZeLYNkrAZMaQFpXvM0=
Subject key identifier:   3A:12:C0:5A:4E:B9:91:20:85:B1:E8:E6:64:14:62:83:3D:5E:29:84
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B312C568AB62EDB3496CF0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b52252da-9aef-34fc-b81e-d579bc984d82.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:12:c5:68:ab:62:ed:b3:49:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=14f7f6c4-2d68-4586-b9d7-edc749030f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:12:9d:5f:90:71:4a:1a:0a:ab:a9:e8:88:
                    bd:cc:ad:52:13:4a:57:6e:f3:4c:a4:b4:91:af:61:
                    60:dd:b0:27:bc:3f:51:31:64:1b:aa:d4:dc:f7:b1:
                    ac:88:e2:17:5c:50:19:75:e0:98:e6:5d:5f:d6:a4:
                    51:e9:71:3f:d2:24:65:ad:95:e7:06:7f:07:46:63:
                    c3:1c:f5:a6:89:d8:92:6b:ce:51:de:6f:19:1a:bd:
                    5f:a7:a3:db:db:21:67:4e:ea:04:df:87:1b:1d:7a:
                    6b:49:4b:a9:92:71:fc:a8:fb:5d:f2:07:c8:eb:da:
                    d4:7f:63:71:8e:19:b3:6d:45:c8:6b:ac:9d:17:82:
                    ab:ef:96:c6:32:41:3a:45:43:73:f6:85:2b:f2:34:
                    53:fb:13:bf:0a:45:34:e8:71:7f:e1:6c:07:9a:1f:
                    a0:34:02:76:25:5f:69:d1:9c:ff:36:d8:eb:1f:96:
                    99:86:8e:79:51:b3:d8:c2:66:c8:ca:5f:d5:69:9f:
                    d4:14:75:f9:57:9b:d5:4c:99:ec:f9:22:0b:12:27:
                    99:ad:3a:62:0d:f2:dd:f6:e6:0c:6d:4f:ba:16:20:
                    ad:d0:50:56:18:a3:23:a5:d5:63:81:46:dc:d1:3f:
                    76:8a:a8:a9:f2:b4:7a:6a:86:7c:8f:3e:87:30:30:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:12:C0:5A:4E:B9:91:20:85:B1:E8:E6:64:14:62:83:3D:5E:29:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b52252da-9aef-34fc-b81e-d579bc984d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:1b:89:2d:b0:54:4e:07:d7:9a:65:c8:cc:5d:e6:d4:ef:
         c4:d4:0a:6b:80:10:f6:12:34:98:65:10:3d:c5:2a:b9:f5:80:
         b8:a7:0f:7c:b4:32:16:e8:39:36:7b:2b:56:a6:27:cc:cc:a4:
         d7:ed:51:61:8b:9b:30:7c:55:47:54:30:12:32:6f:8e:a0:a7:
         34:2c:c1:7c:ca:1c:a3:01:95:f5:10:73:ca:c5:7f:b4:19:ac:
         5a:eb:2a:12:18:01:f9:12:32:e5:08:ed:3b:84:0c:d2:dd:a9:
         87:67:4f:5a:bd:57:93:25:87:a1:39:83:ed:3e:cd:e7:69:51:
         e2:ce:e8:1b:de:e6:c6:5e:57:30:f6:30:ad:0b:5a:64:13:26:
         67:24:16:29:e8:a4:aa:27:c1:78:07:b9:e8:b5:ab:79:1d:fc:
         30:14:68:9b:27:f6:c4:9a:7f:d3:67:be:58:b9:2a:28:0b:11:
         bb:1a:e9:88:06:46:7c:d1:70:60:6d:98:90:de:c9:08:1a:f7:
         4d:53:4c:ce:2c:60:24:30:1c:f8:af:2b:e9:e1:93:66:74:69:
         6b:12:99:bd:f4:e6:b8:2f:65:64:76:f4:be:36:90:1e:0e:49:
         2d:3d:c5:41:3b:51:c7:9a:2d:6f:87:bf:41:a5:bd:8b:c0:eb:
         bb:68:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:34 2024 by rpki-client on console-ams.rpki-client.org