Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c0c464c3-1917-3dae-bad0-238936f78927.roa
File:                     c0c464c3-1917-3dae-bad0-238936f78927.roa (raw, json)
Hash identifier:          dNvz/5fIsPcnO3gQGh2XrhjxOFAUSP/Ow8ZxpG94Vho=
Subject key identifier:   24:D9:DB:EE:0F:62:DC:0B:3F:4C:C0:73:AC:5C:AA:A7:C5:A5:78:F4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA120DB12939E7B4AECD6EA8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c0c464c3-1917-3dae-bad0-238936f78927.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        174.91.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:0d:b1:29:39:e7:b4:ae:cd:6e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=cefa8df5-077b-4f10-8ea4-702ee8950c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:59:52:5c:d4:bb:66:5f:81:e8:16:a3:76:
                    f1:ed:64:3a:72:81:b8:92:62:d0:ea:2f:9a:61:6a:
                    58:1a:90:d1:59:e8:78:df:14:18:e7:e5:fa:0c:83:
                    64:10:c1:a4:f3:db:89:50:5f:ed:9d:e9:2d:0e:6a:
                    ba:bb:04:c0:85:8e:79:86:ff:6f:0a:b6:57:69:1a:
                    a8:ee:6a:21:c4:a7:10:c6:64:d0:ad:21:48:8b:71:
                    e7:f3:cc:3d:70:4b:6b:45:32:94:db:9d:5c:7b:11:
                    aa:f3:1e:d3:1d:12:bf:66:66:f5:a4:56:11:83:db:
                    da:bb:60:ae:bd:2e:0a:26:30:3a:27:98:45:57:70:
                    be:e0:8c:ca:3f:bc:d7:34:b3:3a:06:2a:f2:a9:82:
                    05:0f:48:49:ce:38:63:eb:99:c6:94:2d:e1:86:bd:
                    99:f5:d1:d6:aa:c1:96:1d:28:c5:1c:1b:b3:eb:2f:
                    d3:22:a4:27:bb:47:90:6a:dc:11:86:bb:e4:92:64:
                    4d:b4:eb:ae:3c:08:e0:04:2e:10:f9:03:87:95:f2:
                    83:62:00:9b:34:6e:88:e9:89:f6:73:e2:e4:4b:51:
                    98:fa:cc:38:c9:3d:8e:52:6d:2f:73:53:f5:9f:cc:
                    15:89:ab:85:eb:eb:8f:77:02:10:cb:51:45:e7:49:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D9:DB:EE:0F:62:DC:0B:3F:4C:C0:73:AC:5C:AA:A7:C5:A5:78:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c0c464c3-1917-3dae-bad0-238936f78927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.91.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:29:c9:ba:4b:f5:ce:95:3d:05:99:ba:63:f6:c3:a5:0d:19:
         09:9e:26:6f:1d:07:6d:6d:ac:c8:c1:0b:51:15:d0:55:24:d4:
         e1:be:6f:43:25:91:e1:aa:bf:3b:f8:2b:57:98:38:e1:59:0a:
         b2:d6:b8:42:20:72:64:3c:c6:cc:eb:16:02:2e:ae:53:c1:56:
         bf:5f:3f:a9:0b:a1:22:ef:11:9d:b3:eb:43:60:82:bf:ff:68:
         d1:38:47:6e:a0:5c:98:c7:76:12:70:4f:a9:42:b7:71:af:c9:
         78:e5:45:08:98:1d:48:d3:e7:53:4b:dd:6b:a1:3f:1e:d5:89:
         db:94:ea:78:73:1d:44:7d:89:89:78:8c:21:bc:51:ed:4a:b2:
         20:7c:58:ca:e7:e9:4e:45:68:e9:2d:2a:b6:d6:a4:4d:5e:92:
         ea:ed:13:42:10:b0:ad:88:92:67:c6:fa:89:97:04:d5:21:51:
         59:55:c5:6e:6d:84:bf:bb:38:1c:96:96:d1:9c:19:5e:12:2f:
         7b:f2:95:e5:b9:97:4d:ee:bc:e4:74:5c:21:a2:ea:9f:95:3e:
         f9:b4:35:d3:05:fa:bf:52:ea:2c:5a:2b:02:b0:63:ad:30:78:
         46:d9:c4:df:30:46:29:1a:20:b7:6f:98:eb:72:d3:bd:50:fd:
         0a:7e:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org