Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9ccad81-cf02-30b8-b217-f1d22a659d6b.roa
File:                     c9ccad81-cf02-30b8-b217-f1d22a659d6b.roa (raw, json)
Hash identifier:          2gzzS5nMpSpD5g4Rx19TPAuHKeK6olyXi3fCOZ5yd0A=
Subject key identifier:   59:50:1F:8C:B1:E4:02:FF:60:CF:B2:63:97:36:ED:60:5F:50:B9:5D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA113EE99455824D170FF000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9ccad81-cf02-30b8-b217-f1d22a659d6b.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:3e:e9:94:55:82:4d:17:0f:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=0b18ddc3-afee-4464-9560-9c4d9f41177d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:fe:b9:a7:1c:a3:3f:e0:6c:ee:ba:45:6f:
                    82:5d:66:f6:73:1a:d6:da:74:d3:2f:9e:13:e5:cc:
                    3f:aa:52:d3:cb:a7:5d:d9:92:b6:27:84:73:f4:b6:
                    b1:49:b3:4f:f6:50:46:1d:d2:57:4e:fd:32:24:bd:
                    8f:e0:f7:d3:60:c7:11:87:45:97:a9:56:c2:f4:ec:
                    ca:d0:54:85:07:8e:b0:a6:0c:a5:16:4f:8e:ab:40:
                    04:80:0d:0b:f4:4f:6c:b8:76:f2:02:97:a3:b1:bb:
                    01:b3:ab:e2:1c:96:b7:e4:33:cf:d2:36:7e:08:c1:
                    b1:13:54:9f:6c:e3:b1:e7:0b:d2:46:71:b2:ae:4d:
                    da:9a:18:25:5e:5f:51:65:8a:91:bd:88:39:68:1f:
                    51:4e:c2:73:23:75:c7:c7:0c:b8:d2:41:57:2f:3d:
                    b2:30:98:0f:a8:a8:af:6d:b6:d8:5c:11:95:39:1f:
                    31:ed:20:bf:46:bb:92:ee:aa:fb:fb:40:9b:4d:f1:
                    38:be:b7:e1:89:3d:5b:5e:6a:ab:7a:c3:28:b4:ca:
                    f2:a5:75:74:d2:a1:bd:dd:f6:8f:f3:25:da:c9:38:
                    ad:bb:6b:72:2d:10:f9:b3:cb:50:55:25:a3:93:64:
                    eb:c1:38:05:ec:3e:1d:d2:db:8c:a9:91:cb:6f:56:
                    ff:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:50:1F:8C:B1:E4:02:FF:60:CF:B2:63:97:36:ED:60:5F:50:B9:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c9ccad81-cf02-30b8-b217-f1d22a659d6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:9d:2c:25:90:b8:eb:7a:ee:80:8f:5a:a4:a3:75:2a:a7:
         e4:fc:9e:d2:89:19:e3:b7:33:d0:7f:96:fc:18:4b:fd:e2:79:
         f5:ed:87:aa:f4:7e:68:a5:a0:fb:67:02:f7:b8:c9:3b:f7:6d:
         da:4c:36:df:b6:00:46:53:92:d0:c8:fd:4f:a3:eb:f5:79:5e:
         c2:e0:5e:78:13:a7:1f:ee:76:ac:9f:88:93:3e:e9:44:e7:74:
         cd:cb:c9:db:ac:12:21:e1:fd:64:45:9d:75:bf:b4:76:c5:a9:
         52:bb:12:ef:06:5d:eb:36:70:ae:f1:f9:b2:f8:5f:bb:ad:07:
         bc:33:89:58:5a:82:50:4f:a8:0e:35:14:50:78:47:39:e7:e5:
         aa:67:9e:58:76:04:fd:7d:3f:3b:d0:12:75:fd:00:59:5e:41:
         04:05:39:f4:71:a1:c9:3f:cf:fc:da:07:ca:6a:a3:f5:5e:62:
         ce:a2:8a:dc:81:ca:b3:57:e2:f5:1d:6b:23:86:58:e9:7f:50:
         a7:c1:96:e4:d0:17:06:58:35:3e:31:92:68:ac:69:25:21:7d:
         8b:0e:57:a3:60:2c:a6:fd:f6:db:e5:62:43:c8:0d:8b:f6:9a:
         b7:54:6a:26:7b:a1:64:7c:bb:8d:c8:6c:d8:9a:0d:29:49:e4:
         b1:88:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org