Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/89df5dbd-c0ce-324f-8189-e5aa24a40457.roa
File:                     89df5dbd-c0ce-324f-8189-e5aa24a40457.roa (raw, json)
Hash identifier:          ZYoKDRzDIeadr21AOwxjAEIHXfKBcOBbt0ydmKGFp1E=
Subject key identifier:   AF:15:8D:81:C8:FB:61:4E:CD:62:CE:C9:85:FD:2A:A6:EF:D4:05:8C
Certificate issuer:       /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial:       010D0C9F432858450D858A60123EDBEDFAED0F50
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/89df5dbd-c0ce-324f-8189-e5aa24a40457.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     8075
IP address blocks:        137.70.154.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:8a:60:12:3e:db:ed:fa:ed:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=92c458a9-10a7-4416-a075-155042a8f3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:9b:3d:c1:46:b3:df:ec:0f:d5:c9:1d:21:
                    f4:44:67:34:73:8b:00:d7:7f:ef:97:20:66:9d:65:
                    b2:03:ed:51:22:7c:cb:16:c3:03:25:26:35:36:bd:
                    ca:9c:44:a0:26:8a:cd:7e:17:fb:77:78:f1:29:56:
                    30:ea:1b:15:68:c6:79:a8:ff:76:bd:62:7f:b3:3c:
                    e7:18:4c:b6:03:3e:ee:6a:d3:f4:9d:b5:95:a6:9d:
                    30:b6:dd:00:d8:b9:56:8d:2c:dd:af:78:b2:a2:12:
                    81:41:2e:96:1e:46:2f:38:b8:15:dd:dc:e4:95:4d:
                    fe:56:93:ba:c6:2b:b8:66:f0:ae:82:53:fa:23:97:
                    fa:3a:88:f4:fb:df:46:2b:6c:2c:e3:c0:34:4b:fb:
                    d9:71:00:f3:b3:0b:15:b9:79:43:bb:f3:2e:c6:f3:
                    e3:cf:b8:a8:3c:0b:62:bc:4d:96:22:f4:30:53:15:
                    c0:30:1a:9f:3c:a3:6c:d1:71:5d:98:56:a2:bc:16:
                    c4:df:e5:45:fa:68:79:01:2c:27:d9:b0:60:c6:e1:
                    77:09:48:f4:74:31:3b:9d:50:ce:20:2c:16:60:03:
                    35:cf:3c:bc:df:2d:34:59:3c:b1:fb:45:60:27:61:
                    1f:83:9a:cf:f7:85:26:30:4c:c1:87:09:84:71:2d:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:15:8D:81:C8:FB:61:4E:CD:62:CE:C9:85:FD:2A:A6:EF:D4:05:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/89df5dbd-c0ce-324f-8189-e5aa24a40457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl

            X509v3 Authority Key Identifier:
                keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.70.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:60:90:bc:0f:ba:7a:b2:8b:ef:f6:59:85:57:9b:af:e6:55:
         90:08:67:95:9d:3e:f8:c3:8b:4b:47:f0:01:b4:55:d2:79:b7:
         8f:0d:7a:54:68:7a:4c:87:7a:a1:d2:c5:c4:e5:bc:94:e0:be:
         26:0b:f7:20:ea:86:0b:63:33:d8:86:eb:53:c8:6a:f9:53:91:
         2c:0a:d5:85:df:a1:6b:7a:50:6c:df:f4:83:fd:7e:83:82:42:
         1a:0f:65:c1:b5:32:48:8a:c6:97:de:96:4e:57:94:9c:da:76:
         3d:79:3f:bb:52:9d:2e:47:92:e0:91:71:65:3a:d7:56:a5:1e:
         7f:49:7a:da:c0:27:16:21:ed:91:1f:6c:12:36:28:d8:3d:95:
         c7:04:a8:b6:7a:fb:56:02:6c:bf:ce:a6:77:c0:41:f2:b1:2f:
         75:29:f2:99:4b:0f:af:e1:cd:1d:01:cf:65:c4:eb:07:6a:8d:
         63:f8:3c:15:3e:ac:60:84:d0:a3:86:34:61:5c:7a:69:18:44:
         a5:f5:ac:c5:ee:48:25:10:43:3d:a9:b9:4c:1b:a4:6e:0d:e5:
         24:f5:1b:86:96:20:90:c5:bf:bd:44:f4:6c:c4:06:2a:13:ba:
         e3:05:f3:81:cd:e8:91:4b:cc:a0:38:ec:a7:8c:49:d9:0e:19:
         c4:12:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:04:33 2024 by rpki-client on console-ams.rpki-client.org