Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdd7e102-e856-3666-9fc5-586d9326e60e.roa
File:                     cdd7e102-e856-3666-9fc5-586d9326e60e.roa (raw, json)
Hash identifier:          XSyOTVz+wXVPaZYFYwgKOTZp/I1EgEjbOjOBnGuYi/w=
Subject key identifier:   6E:2F:7C:ED:8B:5F:D6:4C:71:6B:E4:5F:59:24:FE:0F:AC:FE:1F:B8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E57EC797C997ED33A1D18
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdd7e102-e856-3666-9fc5-586d9326e60e.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        65.94.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:57:ec:79:7c:99:7e:d3:3a:1d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=8df95e31-92de-47b5-91dd-438aa6220d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:4c:35:5e:01:9b:55:41:e7:f4:40:b6:1f:
                    2b:5a:41:21:0e:c9:89:a3:73:07:84:67:17:1a:64:
                    e8:d3:0c:10:f0:bd:aa:6d:b5:f2:82:e0:3c:32:7b:
                    54:91:95:75:6f:4d:56:01:db:2a:15:ca:fb:bf:fd:
                    4f:9d:37:07:1e:e4:4f:b7:e5:19:a0:98:8e:e7:02:
                    c9:21:5b:68:1a:d8:3e:cc:73:b5:ab:cd:fe:6c:2f:
                    94:8c:39:59:d4:65:0b:b4:f7:51:b5:2b:2f:62:3e:
                    89:29:8e:8c:2c:9c:84:06:e3:d3:f9:60:e6:cc:81:
                    42:1a:ef:a7:aa:5e:44:f6:56:3e:30:cf:1f:2d:f0:
                    f9:a1:f6:64:a4:ae:62:ad:97:2f:c1:f4:a3:07:7f:
                    cd:74:10:72:89:3d:c8:02:08:ec:a3:37:23:99:d3:
                    76:1d:be:7b:20:d0:fb:51:49:52:b3:d2:be:32:93:
                    01:8a:a6:82:c1:96:ac:e7:f2:9f:ce:8e:2e:06:ae:
                    62:99:4b:f7:db:fd:33:9f:04:0a:3f:fa:0b:f7:b0:
                    ca:ae:29:a3:44:3e:58:80:71:f0:79:74:ac:d7:16:
                    16:da:71:c0:d0:82:b5:7d:66:b6:93:26:9f:3b:17:
                    b9:37:41:5b:5f:26:03:07:8b:82:67:84:e6:21:62:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2F:7C:ED:8B:5F:D6:4C:71:6B:E4:5F:59:24:FE:0F:AC:FE:1F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdd7e102-e856-3666-9fc5-586d9326e60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:75:fa:4c:2a:45:5e:54:db:53:23:50:dc:02:cf:f7:d4:
         ec:4a:c8:15:70:3b:17:86:91:49:13:d3:4d:4b:b9:68:c5:c1:
         a5:67:1a:5b:25:1c:ab:c4:dc:48:ec:81:75:e6:a4:9d:f5:d1:
         83:be:be:36:23:ef:9f:b9:c7:40:20:7e:9b:c3:63:68:9f:42:
         c7:79:a1:2b:dd:64:b7:87:0e:01:1e:32:03:1b:70:6e:8d:eb:
         e6:23:64:f7:00:6f:84:29:02:a2:6b:2e:fe:94:ac:e4:6d:1c:
         d5:fd:8f:71:cb:0b:c2:a3:c4:17:7e:fe:11:8f:bd:4c:37:49:
         1f:9b:75:d9:00:57:f0:b0:b9:5e:bb:cf:2f:5c:8c:cd:9f:a6:
         20:10:e7:18:e6:64:68:c5:ff:49:67:71:a1:af:d1:74:b6:bd:
         51:d3:f6:c2:58:85:4b:4a:2e:3d:ac:94:3c:6e:7d:fe:72:a1:
         da:3c:0f:53:9e:59:52:bc:2b:96:18:1f:86:31:64:ae:01:bc:
         96:2b:e4:18:09:c2:09:a5:19:ac:2c:cf:29:a4:24:ca:21:37:
         22:70:d8:24:e3:92:a2:5b:ff:a3:7c:57:8d:92:09:e0:17:3f:
         c6:6c:f4:52:ad:69:de:56:94:73:39:e1:4f:c6:4a:ae:ea:57:
         39:6c:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org