Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/badd1e04-b6cb-37d1-a98a-01a83ebf1e85.roa
File:                     badd1e04-b6cb-37d1-a98a-01a83ebf1e85.roa (raw, json)
Hash identifier:          L5biVKtPH8MpCKXmY1EhGV4dNEq9rHWNApVuT+v0WOk=
Subject key identifier:   3F:CB:92:B6:9E:07:9D:27:CE:D5:65:08:8C:6D:9E:DB:A4:F7:02:55
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA11FD1C8505DFA0C3502040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/badd1e04-b6cb-37d1-a98a-01a83ebf1e85.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     32678
IP address blocks:        174.90.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:fd:1c:85:05:df:a0:c3:50:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=7a18002b-f4ef-4013-858f-e0157547d1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:9a:af:11:6f:c4:30:56:10:aa:89:43:b6:
                    6d:81:41:77:d2:39:df:c0:7b:33:66:9f:f6:b3:d4:
                    73:b0:0a:f6:f9:a6:07:22:d8:16:ec:9c:e1:10:4e:
                    c2:e2:ca:8e:c6:27:c7:64:39:e5:0e:1d:49:b1:42:
                    76:d6:60:95:ad:2b:f5:8f:90:54:fa:76:39:85:c8:
                    80:f6:32:9e:83:6b:14:d0:61:33:da:a5:d4:5f:77:
                    c9:12:f2:ba:7d:ea:4b:87:05:1a:fd:8f:0f:51:9b:
                    39:e9:4d:9a:04:96:34:33:7c:b7:5c:5d:77:c2:fb:
                    47:75:96:50:0b:db:46:0f:2e:58:18:82:ca:f0:e3:
                    20:82:80:bf:4c:eb:ed:ff:30:c3:4f:eb:54:5a:9e:
                    2e:31:70:4a:5d:36:22:10:29:2c:89:d0:4f:62:9a:
                    84:02:37:73:d1:3f:8d:3b:84:bb:f1:2e:83:20:f1:
                    2e:f4:b1:1a:3c:ee:aa:1b:e2:fb:bd:1f:d1:ca:d7:
                    fd:7f:79:aa:27:d0:de:fa:de:50:7e:1b:c9:40:f5:
                    0c:e2:c2:be:15:05:05:56:28:06:22:d5:b9:89:28:
                    21:73:f2:35:65:b9:16:41:7a:2a:13:7c:61:fa:9b:
                    89:ce:3d:29:da:90:fd:5f:4f:ea:32:e7:9a:57:58:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CB:92:B6:9E:07:9D:27:CE:D5:65:08:8C:6D:9E:DB:A4:F7:02:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/badd1e04-b6cb-37d1-a98a-01a83ebf1e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:bf:9a:15:96:20:37:74:03:4b:35:a2:1b:99:26:2a:5d:f4:
         11:5d:a7:d0:f9:a0:ec:94:79:33:bc:40:32:88:c2:bb:3f:07:
         6a:64:4a:62:27:fc:79:4a:f3:f5:e0:08:27:f1:69:7f:71:ad:
         61:1b:39:81:97:a7:d0:d6:55:52:48:2f:23:c2:a4:0c:4f:7b:
         0e:08:91:a5:ba:68:fb:4f:30:3d:bb:0b:05:90:d5:88:22:a3:
         bf:90:e7:8f:6a:f2:26:75:4a:12:a8:3e:9a:a4:93:c5:f1:14:
         76:63:e3:af:01:f7:e3:58:bd:91:f1:aa:59:96:bd:ab:13:6a:
         2c:ac:44:cc:c5:8b:04:91:c4:1a:bb:5e:b3:10:fe:20:7a:0f:
         24:b1:e6:03:4e:86:ee:b0:2c:dc:59:a3:04:41:20:33:b2:88:
         ff:f2:d1:af:e6:03:f2:5f:55:0c:74:10:10:78:6b:77:c8:37:
         80:0c:f5:1c:b8:bb:a5:a5:44:42:3a:f3:4d:c8:fc:ab:a4:ee:
         91:ed:ec:d0:f8:3f:f3:58:6c:ac:a7:18:14:70:eb:b4:33:89:
         ea:a1:38:f1:15:c3:ed:20:5e:94:7f:09:b9:60:2f:5a:21:a7:
         e3:1f:07:93:61:7c:3a:ff:d5:ad:7b:c6:be:13:49:f0:cc:76:
         76:d3:29:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org