Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8d2f43a-42a3-3fb1-aae1-433b9baaf58f.roa
File:                     d8d2f43a-42a3-3fb1-aae1-433b9baaf58f.roa (raw, json)
Hash identifier:          MAYLQi54HBHqUoeH09tUpdpYoBPNbhZ8baKEIOgGdeo=
Subject key identifier:   DE:FD:45:2B:77:CC:FA:D8:AD:1D:03:74:6B:8C:2F:7A:A0:44:A8:7D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E6908B1C97BC601A09B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8d2f43a-42a3-3fb1-aae1-433b9baaf58f.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        67.69.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:69:08:b1:c9:7b:c6:01:a0:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=7c2e7b37-3b7e-41cc-a4d5-700ab7f8bb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:11:bf:06:4b:4b:89:be:b7:8b:99:b1:a8:
                    d6:0a:40:29:18:73:57:b2:87:57:ff:c8:3c:16:6d:
                    7d:6b:bd:fb:8f:97:58:3b:96:48:88:49:44:1c:e9:
                    13:e3:c5:e3:eb:3d:7c:bb:2d:d0:ea:5d:fc:8d:2f:
                    e5:11:aa:7e:03:f5:cf:51:33:d4:ea:b0:55:01:d7:
                    57:3f:27:6d:06:f1:e1:f3:ae:28:f9:a8:88:89:91:
                    cf:d0:86:c1:93:eb:10:ad:33:3f:20:06:c7:e3:56:
                    8b:fd:ad:ae:c8:37:fc:4a:e2:6b:e0:96:e7:ac:21:
                    b6:44:f7:13:a8:e1:c2:e9:72:e7:66:37:1e:b2:68:
                    5d:c4:93:98:50:89:c7:4d:d7:09:96:e2:19:34:5b:
                    b6:65:55:ad:e7:5c:8f:0b:1f:ef:ed:30:e0:eb:de:
                    c6:db:b4:ba:0e:1e:77:03:83:d1:cb:bd:05:b8:21:
                    39:c2:5e:df:0e:30:6b:de:e9:3d:80:d0:b3:13:8a:
                    34:be:17:83:b0:fb:75:c3:28:ca:70:92:74:a0:83:
                    97:7f:3f:06:67:60:85:36:b8:84:4c:2e:26:5f:4c:
                    f8:28:d3:cf:68:4a:4a:75:4a:3b:00:3a:e9:d7:e5:
                    42:e0:1e:d2:ff:3c:94:77:23:b7:c0:c5:e6:fe:fe:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FD:45:2B:77:CC:FA:D8:AD:1D:03:74:6B:8C:2F:7A:A0:44:A8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8d2f43a-42a3-3fb1-aae1-433b9baaf58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2e:2a:5d:13:aa:83:d4:b4:1e:52:76:b0:6c:3d:2d:d5:b0:
         17:c9:0e:1d:9a:26:86:bc:e9:ff:6a:88:f5:7e:4d:f5:69:97:
         0c:03:44:73:e2:77:9e:64:69:cc:0e:2a:8a:95:85:73:80:3c:
         c2:d3:d5:3a:13:5d:ba:25:54:03:9c:ba:b9:1c:41:42:dd:e9:
         9f:8e:7e:79:65:28:4d:df:15:96:7f:c9:31:6b:92:21:41:59:
         4a:1e:6f:e0:f2:a9:1f:e1:42:a9:80:c5:46:d6:91:bd:8b:2f:
         72:51:d4:64:41:5e:e0:70:97:d9:90:aa:18:93:c3:0e:cc:0f:
         da:2d:e9:99:8e:1e:64:db:eb:26:da:47:86:6a:69:d6:6f:65:
         e6:22:1d:05:ae:fb:81:91:27:52:fb:86:28:21:fc:a3:77:fc:
         e8:17:98:51:56:cf:08:28:ba:fd:63:59:e9:48:2c:2f:ec:dc:
         52:a8:6f:fd:10:e5:d8:ed:99:54:f6:c6:0b:99:98:57:94:07:
         37:5b:de:54:f2:d6:8b:3d:fd:3f:c8:d3:35:c4:ae:0b:66:c4:
         61:18:db:b3:12:bf:16:d5:c3:7c:64:5d:cb:75:ce:ae:d7:8c:
         35:5b:9f:88:17:06:ce:02:44:75:8c:f4:cf:38:61:d5:8e:3a:
         1e:93:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org