Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2e74380-c8c9-3ae0-82c9-41a12f586d71.roa
File:                     c2e74380-c8c9-3ae0-82c9-41a12f586d71.roa (raw, json)
Hash identifier:          v0WasxCYZo2WUuNlJ7XK7L0UtxI8eAfGUqis7CL9sQw=
Subject key identifier:   21:B4:B8:A1:CE:63:6D:A6:05:63:3C:9D:CD:5B:71:D0:84:98:3E:42
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0EB311A36563212711D700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2e74380-c8c9-3ae0-82c9-41a12f586d71.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        70.49.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:b3:11:a3:65:63:21:27:11:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=7094b280-cff3-4cd8-8f3b-29e200fc1fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e2:b1:43:ee:71:21:27:4d:e1:5f:3d:5a:99:
                    20:73:8d:2c:b9:f2:02:b8:e4:f3:72:09:d7:9d:2e:
                    86:cc:85:2b:7c:2e:e5:d5:0d:fd:56:e2:00:b6:58:
                    bd:d8:c0:22:aa:a8:94:70:f2:3d:d3:a0:79:f1:19:
                    ee:6a:99:06:4b:42:f5:f5:ae:4e:19:c5:b4:29:91:
                    29:90:23:ee:2d:cf:e0:41:3c:fe:fd:5a:50:aa:8f:
                    0c:86:8e:a7:b3:5f:e5:6e:13:e4:43:7d:21:0c:dd:
                    80:fc:36:a8:19:e0:06:09:ab:82:c4:28:99:aa:f9:
                    25:57:00:5b:e9:51:3c:e9:6a:ce:19:bc:5e:b3:3d:
                    e5:cd:d9:d3:25:1c:34:40:5b:b2:6e:91:35:1f:7e:
                    78:64:fa:5b:27:42:87:7f:7f:b7:ce:71:9c:eb:a1:
                    ec:08:6f:72:f7:93:6b:83:b5:16:d7:6c:da:01:6d:
                    aa:8d:fc:68:d6:de:1d:69:f7:71:10:4c:c3:1d:f6:
                    d4:ef:11:b0:4c:42:85:ee:21:93:11:7f:ce:ba:c2:
                    13:fb:8e:5b:2e:91:6b:b4:cf:01:bc:f4:5c:fb:90:
                    f8:20:4d:18:d0:ab:09:60:22:00:62:dc:55:f3:c5:
                    5a:40:5b:cb:9c:bf:e0:8c:e9:4f:11:3d:b2:15:a0:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B4:B8:A1:CE:63:6D:A6:05:63:3C:9D:CD:5B:71:D0:84:98:3E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2e74380-c8c9-3ae0-82c9-41a12f586d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:b6:51:9c:ff:0c:9b:74:1a:b4:2e:f1:f3:81:e0:63:3b:
         2f:32:49:8f:07:10:1f:90:47:b8:ee:12:7b:1d:86:23:7c:11:
         f6:4b:fa:b7:12:21:87:6f:18:69:1f:b6:63:57:e2:d4:9d:91:
         81:67:ab:b8:4a:af:be:c0:68:e0:d5:31:4e:c5:38:fd:7f:41:
         e3:10:89:c3:43:70:f0:d2:27:c8:e8:bd:9d:f6:42:f8:b6:c0:
         34:aa:b0:51:da:87:39:06:5b:9b:a7:28:55:a4:3b:fd:db:30:
         4a:d7:b9:a7:db:66:f5:da:f6:d3:72:f7:fb:53:b7:0d:e8:2b:
         04:b3:dc:6b:33:ca:db:66:c7:80:6d:0e:1a:e3:28:2d:f3:e3:
         e2:0d:16:26:27:2b:c3:04:a1:5b:4f:f9:e5:eb:b5:1d:f7:66:
         a0:54:cb:f4:37:59:65:db:aa:d7:7e:f7:08:e6:25:88:e6:d3:
         0d:e5:ef:ea:be:41:53:a7:fe:41:ee:82:2d:02:d1:aa:17:6f:
         78:f3:7d:6b:93:81:d8:c8:2d:41:d9:75:7d:2d:9c:d2:84:ae:
         5d:e2:8b:0f:08:be:1e:13:af:02:56:6b:ec:7b:b1:55:c6:34:
         7d:50:dc:7f:97:c5:a3:f9:9f:2e:39:77:15:73:81:a7:dc:b9:
         24:07:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org