Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf1ebb17-2ccb-3ee7-9e20-a852b00094a4.roa
File:                     cf1ebb17-2ccb-3ee7-9e20-a852b00094a4.roa (raw, json)
Hash identifier:          CrdWANXEla7YCSTDwozAC6xPP06BruvAjz70yC1q/VU=
Subject key identifier:   ED:E9:D8:26:7D:DD:83:FE:AF:F7:AB:81:18:B0:D5:C8:C3:95:27:A5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA113FF92C2DB75845519480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf1ebb17-2ccb-3ee7-9e20-a852b00094a4.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:3f:f9:2c:2d:b7:58:45:51:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=241c9e59-c713-40e9-9d3f-6f05a6c90512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:7b:e1:84:3b:0e:fa:ce:82:72:31:92:25:
                    ec:7b:52:6d:6f:36:44:44:71:b1:3e:44:3f:fa:4e:
                    c1:da:d2:c8:40:48:d6:a1:61:a9:1d:d2:47:30:78:
                    39:14:f8:9d:20:0f:3a:23:8a:4a:34:5e:93:d6:e5:
                    ed:79:15:f3:2b:2e:b7:ef:a8:14:a5:b5:fc:32:5f:
                    70:02:54:21:ff:5b:07:2f:ad:77:60:18:ad:1a:57:
                    6e:dc:3a:90:04:d9:a0:28:aa:9d:9d:5b:89:a8:90:
                    e6:46:94:ea:26:df:a5:9d:e3:d0:c4:1e:4d:79:aa:
                    d4:f4:06:fa:3b:24:fa:52:70:f4:b8:54:30:19:09:
                    9f:f2:ae:a2:33:de:44:4e:4d:bb:1a:ec:5f:9f:9b:
                    e4:11:dd:65:70:a2:7c:5e:58:f6:0a:88:42:ab:ab:
                    bc:56:d7:f6:cf:da:bf:cd:b7:a8:06:ee:50:30:0f:
                    56:27:69:ea:01:a1:8f:9e:85:90:56:cc:00:2a:e1:
                    d3:e8:fa:2f:60:34:72:8f:7b:b5:81:60:84:eb:8b:
                    64:b8:13:70:d4:48:de:cf:0c:3f:c3:58:bf:71:99:
                    b0:b9:b8:91:b8:d7:eb:4e:f1:85:7b:e2:c2:1e:5d:
                    3f:cb:80:f5:17:6c:c9:3d:eb:72:f1:8b:86:c0:36:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:D8:26:7D:DD:83:FE:AF:F7:AB:81:18:B0:D5:C8:C3:95:27:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf1ebb17-2ccb-3ee7-9e20-a852b00094a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:59:8b:9d:5e:8e:a3:7e:76:68:a6:99:4d:7c:37:bc:06:
         ae:00:7f:17:58:50:ff:89:88:36:04:c5:1d:d3:95:51:ca:ac:
         ab:ce:d0:ed:08:40:cc:73:3f:3c:5e:b0:d6:9e:35:42:3a:f4:
         e5:b6:ed:e1:66:16:52:08:c3:33:41:1b:d4:8b:57:31:5e:ac:
         05:59:1f:5f:70:6c:5b:cc:a4:fc:56:4a:0e:38:ce:44:69:0e:
         5e:05:dc:36:79:13:d3:41:68:3d:2b:6f:9c:79:38:4d:1e:26:
         c5:63:46:36:25:72:db:84:38:92:ee:eb:93:53:a1:2f:93:12:
         33:fc:72:cc:3a:dd:ae:e0:d8:cd:b2:cb:a9:43:0f:54:cd:54:
         47:c7:08:be:de:30:40:c8:57:0e:03:d6:e8:5c:31:f3:a6:88:
         fc:77:60:9a:98:e6:1f:60:f8:eb:19:96:cb:94:cd:be:49:49:
         74:85:07:3a:03:e1:ce:0c:b1:d4:77:d2:ac:15:c0:e5:a6:88:
         b7:37:1b:d8:38:d4:2f:22:dc:73:24:aa:ac:f7:c9:97:1c:ef:
         78:2f:d8:3f:0a:48:43:92:a9:d2:08:7e:70:89:6f:8b:ee:a3:
         9f:9e:ab:64:fa:48:fd:8e:84:ec:f3:17:dd:b2:88:65:00:c2:
         f3:59:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org