Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
File:                     50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa (raw, json)
Hash identifier:          zl3zvZlb6lhGf+Ib6TXjhpgKhrfhjUStxS8uUKKh2H4=
Subject key identifier:   C7:B6:61:EF:9C:96:73:50:2D:E8:6B:22:27:69:17:44:44:17:FA:86
Certificate issuer:       /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial:       010D0C9F43285845963347C11E125142D69A5C68
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     32181
IP address blocks:        70.32.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:47:c1:1e:12:51:42:d6:9a:5c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=f92afddf-215c-4170-82d2-35a10f0d4d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:58:aa:66:f3:70:52:93:d5:6a:be:89:e5:
                    2f:36:d6:15:fb:63:ea:3e:db:75:46:92:bc:e3:3f:
                    6b:0b:e9:c6:19:90:6f:9a:61:10:a8:97:3f:1f:86:
                    56:f4:eb:89:ef:50:6d:f9:5b:2f:f1:44:64:9c:80:
                    8f:65:da:fa:b6:a3:ff:25:fb:a6:26:e1:86:80:9c:
                    8f:7f:ea:2c:fe:74:4b:1a:84:e7:4a:9a:a7:95:4e:
                    ec:6e:a6:65:aa:6a:85:d5:71:1c:c1:3a:f2:55:13:
                    c4:55:2e:f3:8f:1d:a7:a0:0a:2d:92:92:57:8e:8f:
                    0a:dd:fd:0d:65:8b:2d:de:00:42:54:45:c5:9b:40:
                    d5:a4:a4:16:fc:a4:9d:ad:cb:bb:dc:f4:8e:c1:5e:
                    99:f4:f8:99:b4:3e:17:d2:0b:9a:24:6c:12:c9:ae:
                    68:be:4f:1c:85:3c:13:16:92:f2:f7:7e:a3:96:c5:
                    d6:6d:ad:c9:1a:86:b4:26:59:ee:25:e0:b6:3c:44:
                    96:be:f9:5f:35:ee:46:97:d6:5d:6d:de:f0:33:b3:
                    d9:9b:ed:dc:d6:27:e9:48:7d:f6:66:13:6c:fa:14:
                    79:dd:f6:3c:8d:a3:03:c5:d3:dc:6b:7a:91:d6:dc:
                    62:47:1d:ca:bb:e3:6d:e7:26:8f:0c:5e:03:c0:1f:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B6:61:EF:9C:96:73:50:2D:E8:6B:22:27:69:17:44:44:17:FA:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/50786a16-0073-3f4d-b1e6-df1e5eb16eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9b:2a:90:91:9c:14:65:d4:53:66:9f:b1:5d:64:b2:83:6d:
         20:15:52:64:40:72:51:79:7a:a3:78:ac:3d:7c:e3:08:38:73:
         68:54:c0:f0:ae:f3:f2:7b:e6:74:e3:c4:8d:de:ae:44:16:32:
         30:0d:11:d4:6e:0f:4e:64:ff:b2:3f:50:27:54:95:7b:d1:e5:
         e9:a7:88:01:88:aa:20:e1:75:f2:d9:d5:26:09:91:29:03:67:
         93:c6:5e:6a:a0:54:5b:f6:cf:e2:10:60:15:0f:07:0d:8c:5e:
         c9:b0:0c:a9:a3:a3:58:a4:c5:2a:91:6f:90:18:59:bc:be:62:
         46:bb:aa:e9:ec:bc:ac:9d:b3:be:37:0f:34:87:94:27:6e:48:
         9c:ec:2d:cc:ff:27:b2:ca:76:89:de:97:ca:c0:d3:54:51:9c:
         f9:57:18:a1:2e:fa:99:de:10:db:68:cc:23:1f:c7:b5:5c:d9:
         16:79:50:2e:37:e0:ef:87:bb:27:bd:71:16:9b:fb:73:3e:a6:
         5e:63:f1:85:1b:29:7e:65:0b:ad:27:44:b2:d1:74:8a:a5:09:
         cc:b8:a4:11:1b:d1:c7:e4:63:a7:a9:82:79:27:a3:a4:80:b2:
         b2:c7:09:b6:30:3f:28:14:52:5e:00:ad:4f:fd:90:0a:19:93:
         9f:e3:34:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:26 2024 by rpki-client on console-fra.rpki-client.org