Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e09b902c-cd43-37c4-ba93-c7fa20d51a2c.roa
File:                     e09b902c-cd43-37c4-ba93-c7fa20d51a2c.roa (raw, json)
Hash identifier:          YxZZoBQN22SKNRFPtq43LTRdSTGObLqwaB8uqmptnms=
Subject key identifier:   6B:57:73:66:07:1B:75:35:48:0C:15:50:1B:8E:06:01:9A:31:9B:80
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA118CF31286065589381280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e09b902c-cd43-37c4-ba93-c7fa20d51a2c.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        70.49.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:8c:f3:12:86:06:55:89:38:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=1a4960cb-5114-477f-9f0c-63d90a50f4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:bf:29:1a:1c:e3:38:86:dc:df:e3:0f:04:
                    85:c5:10:43:ad:69:34:0e:5b:5d:d9:57:e6:5e:36:
                    50:59:f1:3b:10:b6:cf:4f:cf:d4:89:33:bd:31:41:
                    34:89:03:54:e4:a7:40:c4:64:42:0b:36:54:4c:b2:
                    74:46:1d:c6:83:00:86:d6:57:6d:1b:71:38:8f:35:
                    22:ac:6b:8a:e7:10:b0:dc:cd:cf:6c:82:15:4b:8f:
                    e8:0a:90:a8:36:aa:e3:da:b8:3c:88:f5:5e:8b:21:
                    2a:dc:5b:f1:a3:b4:52:1b:53:8d:ae:04:89:f6:7b:
                    20:93:eb:b1:2b:b7:d2:ae:e8:c1:9f:20:16:57:af:
                    07:93:dd:b5:86:02:58:5c:e6:b2:a4:b5:42:22:31:
                    77:f5:43:dd:44:8f:89:86:b7:e0:56:0b:e7:ab:09:
                    ed:2c:98:af:56:7f:02:b5:ac:d1:37:dc:fe:09:65:
                    e4:01:78:0c:83:86:b8:2b:78:12:44:eb:ad:db:14:
                    1c:6a:5a:98:dd:4e:f3:d5:d5:5f:33:09:45:0c:14:
                    22:17:4c:fc:8e:62:32:92:8b:02:2c:31:77:62:5e:
                    56:57:1d:b3:ce:47:54:e0:9d:78:33:3c:fd:03:fb:
                    af:2b:7e:f9:1d:e6:df:fc:24:00:69:c5:53:19:78:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:57:73:66:07:1B:75:35:48:0C:15:50:1B:8E:06:01:9A:31:9B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e09b902c-cd43-37c4-ba93-c7fa20d51a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:98:bb:95:69:f9:46:a0:1b:45:5b:ff:3d:68:15:e9:54:b1:
         13:9f:68:e4:73:26:86:d0:ef:d3:3b:17:9d:c4:a1:0b:b8:b7:
         30:d8:99:29:91:3d:ee:c6:8b:e9:bf:c1:00:37:b3:0b:76:7d:
         96:25:bf:87:66:4c:8e:fa:6f:de:b0:d3:23:25:74:36:4d:90:
         ab:c3:0e:6d:72:4a:7b:78:b5:64:c3:4e:b4:86:36:34:16:69:
         3b:a5:81:05:88:da:ea:9a:fe:80:f2:d3:4d:5c:21:4c:e7:95:
         95:86:7d:ec:2c:27:da:08:11:69:ff:4c:d6:a1:26:4a:07:54:
         6f:96:50:66:fa:9f:6c:39:a0:11:d0:3d:11:70:21:75:0b:07:
         88:29:23:6f:1a:49:83:c5:99:18:40:88:02:3f:62:23:7f:1e:
         47:f4:74:47:06:f8:f5:26:fd:0a:ac:d5:1c:b0:56:94:65:79:
         1c:de:66:5e:6e:c2:8d:1c:50:99:94:b5:10:fa:6d:50:72:2e:
         c2:b3:2e:a4:92:d8:35:87:61:37:ab:bf:c7:e5:3e:6e:6b:db:
         60:33:ab:fb:de:5a:52:4b:ef:b3:f0:01:9b:d2:5f:94:29:15:
         4f:3f:fa:49:11:03:ed:e3:b0:a8:2f:a0:3a:47:c8:9c:01:12:
         70:cb:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org