Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6e567f6-bd85-3ea0-b5de-7e29eb66d20b.roa
File:                     b6e567f6-bd85-3ea0-b5de-7e29eb66d20b.roa (raw, json)
Hash identifier:          +3GSt/W+TGf92jx6kJyg/GmQYO5z80YQwF4funE8KjQ=
Subject key identifier:   A9:1F:D9:7C:29:49:F9:B7:E7:69:1F:98:57:5D:21:05:2B:88:03:8E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E64527B87B2FF42F7CF30
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6e567f6-bd85-3ea0-b5de-7e29eb66d20b.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        67.69.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:64:52:7b:87:b2:ff:42:f7:cf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=04f5d3a5-d2fa-485c-934f-6f1fc5afdb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:2b:54:cf:5f:c8:19:ec:0d:5b:9f:eb:e3:
                    48:05:34:f7:db:c2:3c:55:6b:23:3c:89:33:b2:6a:
                    34:0d:a0:09:fe:75:0e:1d:b5:1a:01:6c:0c:81:05:
                    54:bd:07:ee:ae:d9:3e:83:3c:d9:8c:5e:55:52:14:
                    a9:74:57:1a:45:8e:8f:3d:6a:df:c9:ac:83:1a:f7:
                    a0:da:0f:6d:4a:da:b3:06:3f:d8:a1:f9:e9:38:5b:
                    24:40:d9:84:cb:b5:a1:68:71:25:68:fc:50:23:1a:
                    c2:33:1b:b2:f9:04:8f:5c:e5:a6:6e:71:5e:46:2b:
                    44:c9:9e:c2:5d:00:db:2c:2d:4f:f1:6c:10:37:10:
                    35:70:5d:ef:94:22:26:62:58:d2:4e:53:da:f0:88:
                    b6:22:7f:35:8a:35:1b:80:0e:c6:52:5c:9b:e2:0a:
                    ff:12:48:1e:b2:dd:5b:06:18:4b:73:fc:5c:64:54:
                    75:1d:c8:bd:80:09:6a:21:43:8e:f4:7f:43:15:3a:
                    75:34:2b:a7:08:39:c6:05:a0:01:41:6a:0d:f6:31:
                    51:64:1c:5d:d0:a2:e5:54:53:3f:ba:40:dd:df:7d:
                    b2:71:ad:1d:97:23:99:71:3f:82:c7:2c:3c:3f:43:
                    68:67:ec:62:6e:33:63:a4:21:81:63:eb:f4:47:d4:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:D9:7C:29:49:F9:B7:E7:69:1F:98:57:5D:21:05:2B:88:03:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6e567f6-bd85-3ea0-b5de-7e29eb66d20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:11:04:54:6d:c3:bf:38:62:08:d0:fa:74:e0:2e:9a:6f:16:
         d4:0b:f3:b6:4b:15:e4:76:9f:ff:50:49:2d:a4:0d:90:24:b6:
         8a:41:c5:2c:de:73:91:ab:21:1f:84:e6:b6:12:e2:e7:5d:8f:
         96:b4:f8:61:c0:61:c9:0e:58:d8:f9:a8:33:9c:ac:97:dc:31:
         10:46:57:fb:60:7b:be:48:79:1f:4f:42:5e:55:c9:dd:46:3d:
         a2:aa:d3:93:9b:2f:9e:7e:ac:88:a0:3c:e5:cd:f2:7b:7f:5d:
         38:71:38:07:6f:04:24:7d:1b:6d:e8:7c:37:b6:b8:15:90:d6:
         49:e2:40:eb:05:3b:37:42:8b:db:3a:cf:bc:6e:56:f9:75:9f:
         b7:65:7b:62:90:aa:1f:68:ec:c0:4a:fa:af:6d:23:a4:82:61:
         2f:1e:76:8c:f7:89:11:4e:75:5b:4e:9a:cc:01:80:1b:09:4d:
         35:37:d6:21:8e:92:2b:93:34:93:3c:11:3e:35:fd:31:af:d5:
         e1:f7:90:48:53:9a:86:f0:85:55:59:27:29:d1:1e:d9:b5:e7:
         15:79:5e:b8:b5:17:ba:67:5a:a6:ac:e4:74:74:2a:d5:69:95:
         6c:98:bc:fc:38:ae:56:68:c5:88:3e:dd:dd:5c:11:2c:32:f8:
         73:47:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org