Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a30b0d-4aa7-3f42-a07a-e7086de1f1c0.roa
File:                     d3a30b0d-4aa7-3f42-a07a-e7086de1f1c0.roa (raw, json)
Hash identifier:          5t+Z+JTAazXZKD/L/x8DF1Mjx/RCgbGXVAM1pdtmT9k=
Subject key identifier:   08:9C:54:29:28:34:90:C3:55:9C:C5:43:41:BB:BB:B4:8D:87:B9:92
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E960C18E09301C159F3F0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a30b0d-4aa7-3f42-a07a-e7086de1f1c0.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        70.26.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:96:0c:18:e0:93:01:c1:59:f3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=88fb3d06-ca0e-4f52-af14-96457b1367a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:0e:2f:be:a0:d7:f8:e7:af:96:85:a8:8f:
                    96:c8:77:24:2c:d2:7c:3d:d7:a8:58:ea:6c:e3:42:
                    6a:16:c1:a7:eb:44:f6:61:f1:45:af:3f:f8:04:e8:
                    0e:90:c2:c8:2d:aa:02:12:94:29:9e:79:a7:58:88:
                    b1:be:ea:32:ac:9e:87:ae:a6:19:ba:92:ed:f8:12:
                    df:41:97:89:4a:63:19:82:67:a2:d4:26:b6:a0:37:
                    af:df:db:ac:be:e1:59:23:b6:d5:d0:6d:ea:bd:ee:
                    98:55:1f:49:ba:7b:15:d7:7a:6b:fb:03:6c:36:cc:
                    58:98:df:5f:23:4b:5a:3c:62:9b:6c:2f:4f:7f:8c:
                    df:a8:52:0b:7f:15:68:2e:5e:8b:4c:b5:13:96:2c:
                    26:43:b0:1c:ae:13:00:16:0d:6d:c5:d0:3a:cb:f0:
                    d7:f0:65:4f:0d:cd:de:cf:f2:55:35:27:52:80:00:
                    78:0e:6b:1b:48:e3:41:dd:2b:bb:ee:b3:ba:6a:f0:
                    7c:da:3f:a5:9c:a0:d8:1c:86:1e:4b:c9:6f:af:7f:
                    30:37:41:a6:32:b0:76:54:c8:77:d1:17:f0:8d:63:
                    c8:dc:48:08:33:78:ff:c2:73:8f:b8:c2:94:9e:a5:
                    b2:70:23:0b:8e:ab:88:13:22:0e:4c:65:e1:65:c8:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9C:54:29:28:34:90:C3:55:9C:C5:43:41:BB:BB:B4:8D:87:B9:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a30b0d-4aa7-3f42-a07a-e7086de1f1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.26.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:79:4f:d0:de:f6:df:28:5b:1c:82:ac:cc:0b:0c:f2:c3:
         5d:f0:21:73:76:75:c3:06:8a:30:58:7a:27:96:d1:4f:cc:46:
         69:32:a8:47:e5:e6:09:12:65:0e:0e:b3:cc:a8:35:80:e3:5c:
         f5:83:62:be:1f:03:7f:c6:7d:8d:de:61:09:27:4c:0b:9e:61:
         65:05:64:eb:3a:e4:1f:40:49:e2:9e:66:a2:25:2e:6a:ea:61:
         5f:e4:d4:05:de:f0:4b:43:70:19:c2:13:b4:26:ab:96:18:6b:
         60:ae:a5:68:ad:f9:92:83:11:b3:56:df:d1:2b:bc:d8:74:23:
         27:07:63:9f:60:cc:dc:7d:91:7f:42:88:30:3f:26:18:be:9e:
         28:50:ac:fa:99:51:8e:9f:e7:85:fa:6e:3a:06:a0:14:55:9b:
         6e:23:f4:ad:72:27:13:68:c4:0b:fe:eb:61:a0:cf:b1:57:3f:
         e1:55:16:3f:8b:49:ef:91:b8:aa:e3:d4:56:fa:dc:57:6b:8e:
         1e:17:66:ed:10:77:54:de:d5:9c:e3:bc:27:44:ef:03:81:18:
         8f:7a:49:90:5e:5f:a0:8e:77:bd:d3:06:fe:70:f5:34:2f:74:
         b8:0f:0d:0d:c0:1f:13:47:47:a1:fc:f9:a4:0d:cb:e9:5e:3e:
         f3:5e:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org