Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f276f718-941e-3c1d-91f4-115c25025331.roa
File:                     f276f718-941e-3c1d-91f4-115c25025331.roa (raw, json)
Hash identifier:          j4aaZLDGQrLCXZVaPhSSlp627MCxasIjtM62rRs0IoI=
Subject key identifier:   C1:9A:C9:55:14:68:F4:50:56:5B:6E:C4:23:81:80:D6:60:EB:64:D8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA112DAD61F21A06C2119120
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f276f718-941e-3c1d-91f4-115c25025331.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        65.94.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:2d:ad:61:f2:1a:06:c2:11:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=3b2470f0-8feb-426b-977f-d9f711565279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:b4:ab:24:8d:7f:7a:71:8d:36:5b:b0:f8:
                    dd:16:ef:a8:50:85:d6:fa:02:3c:70:f4:32:3e:32:
                    b8:17:df:a3:c8:1b:5b:22:11:e2:30:da:58:f9:d4:
                    f6:df:06:7c:12:09:89:7d:d5:b9:51:5a:6a:5b:13:
                    ba:a1:44:5a:07:be:00:4b:75:f0:38:38:29:5b:01:
                    8b:d1:54:2b:b1:3f:2c:61:4c:b2:7a:83:fc:0b:2e:
                    b4:2f:fb:af:37:4e:24:62:84:6a:d3:4f:7c:45:05:
                    45:80:4f:e2:8f:99:95:dd:82:2b:dd:56:fc:e6:f4:
                    00:a6:30:bf:47:d6:1a:ad:0c:1f:c5:89:8f:de:e1:
                    42:58:34:55:4d:32:3e:d8:91:f6:48:06:cd:1f:c6:
                    1b:18:99:ea:b7:38:0e:b4:d5:3c:6f:c2:e8:19:ed:
                    97:fd:21:9c:23:11:fc:87:91:b7:93:b5:0f:9f:55:
                    ae:7f:e3:a1:81:ff:f0:0f:ee:c7:22:23:11:42:3c:
                    a1:db:6e:b9:04:b4:c3:6b:33:51:d6:ee:18:3a:97:
                    c5:58:8b:de:20:46:94:fd:08:bc:14:b6:99:26:c6:
                    83:2c:44:f4:34:74:91:7b:f5:1c:e5:08:42:bc:1c:
                    6f:c3:09:5d:74:db:94:b6:6d:70:df:38:be:26:52:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9A:C9:55:14:68:F4:50:56:5B:6E:C4:23:81:80:D6:60:EB:64:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f276f718-941e-3c1d-91f4-115c25025331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:fe:90:eb:a8:72:3a:d6:e0:96:63:e8:b3:e6:1a:09:5f:
         6e:56:f5:ee:d7:f7:41:6f:38:4c:e8:c2:7d:59:65:80:76:ca:
         d2:7f:fd:84:56:ef:2e:da:dc:8a:bf:95:98:38:be:86:5a:e7:
         13:cb:57:7f:f5:4a:eb:57:7a:1b:43:60:f1:77:27:78:99:d4:
         9f:8b:cf:d3:28:d7:12:37:f8:b2:42:f8:3a:60:ca:7e:fa:b1:
         d6:e6:fe:91:0b:82:4f:9c:8e:cc:ab:e7:be:75:f5:43:33:a2:
         46:49:3d:2a:98:59:2b:04:f1:74:8e:01:33:ff:c5:d0:64:67:
         0e:65:79:7c:30:93:04:e2:8b:80:c5:35:4e:1e:cb:26:4a:8e:
         f0:83:25:37:2d:51:02:8f:1b:87:64:d7:9c:33:34:ef:8c:d4:
         07:89:68:bf:6c:e2:45:e4:a8:0b:78:38:9c:57:7f:11:94:1c:
         be:da:c9:a6:00:0b:e5:ef:e6:59:21:69:54:5d:3a:b4:50:d8:
         53:18:0f:c8:80:7e:60:c6:ab:bb:f9:92:4e:eb:6a:bd:7a:2b:
         65:7f:5a:b0:0a:10:05:1c:05:88:09:2f:29:7e:bb:86:fe:4a:
         58:f8:e9:50:7a:ca:7d:31:d2:ac:3a:c4:a9:dc:3d:9a:dc:f6:
         11:25:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org