Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa
File:                     d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa (raw, json)
Hash identifier:          yqFPxSQxBdwRstJE9YB/zh1LKBfuF7duUbB2cjgktMM=
Subject key identifier:   29:DC:3D:A7:8C:76:02:EA:36:89:DA:BB:45:DA:8A:C2:84:78:0D:B6
Certificate issuer:       /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
Certificate serial:       010D0C9F432858450D858A765494E986534F4400
Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa
Signing time:             Thu 29 Feb 2024 14:00:31 +0000
ROA not before:           Thu 29 Feb 2024 14:00:31 +0000
ROA not after:            Wed 29 May 2024 13:00:31 +0000
asID:                     8070
IP address blocks:        137.70.156.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:85:8a:76:54:94:e9:86:53:4f:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4
        Validity
            Not Before: Feb 29 14:00:31 2024 GMT
            Not After : May 29 13:00:31 2024 GMT
        Subject: CN=e41bb8c9-22cd-46ab-9c98-134b69ae790a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:37:29:87:27:9c:31:05:70:25:de:18:af:00:
                    de:bb:cd:fe:75:04:36:c1:0c:ac:68:92:ed:30:e8:
                    37:44:9a:74:1d:b3:44:9d:b3:fc:a5:bd:51:55:0e:
                    66:22:58:e2:44:51:f9:f9:34:52:a5:e8:04:7a:00:
                    1e:2d:b5:13:92:9d:ee:da:18:54:af:b1:22:4d:84:
                    b3:13:fd:19:4b:b0:40:34:1a:db:fa:53:da:5c:2e:
                    85:f0:c9:1e:ad:af:34:68:0a:0c:aa:30:24:7a:ae:
                    8f:4b:f7:a1:2b:47:b9:f8:e3:9e:4f:3d:01:1d:fd:
                    31:5b:30:9e:38:c8:44:7a:c4:87:0a:c9:b3:0e:08:
                    e3:7a:a9:33:93:4b:ca:78:d7:0d:b1:21:bc:a1:2e:
                    22:bc:1b:b1:8d:9a:11:ac:0a:ff:7a:be:6e:dd:a2:
                    79:37:c0:fa:44:b5:06:e9:56:4b:0a:9f:89:91:c6:
                    96:e8:aa:b8:63:94:9d:f2:3f:d0:1f:d4:97:fe:be:
                    47:62:8c:63:3b:ab:11:1a:c0:6e:ef:72:44:c5:5e:
                    70:89:30:d8:58:b0:c9:78:05:c8:ce:85:22:70:d5:
                    f9:26:29:4b:60:9e:e4:f2:cc:6c:b6:aa:b3:43:55:
                    25:fc:a1:ab:37:f7:73:fe:f9:7e:f1:fa:69:79:3b:
                    f5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DC:3D:A7:8C:76:02:EA:36:89:DA:BB:45:DA:8A:C2:84:78:0D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl

            X509v3 Authority Key Identifier:
                keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.70.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:59:2f:0c:1b:1f:e8:67:02:d1:77:e2:e8:6d:ff:15:f4:
         75:6f:06:10:dd:db:bb:3a:9d:24:cb:3e:84:ca:ed:8f:94:45:
         f0:c5:17:13:0d:6b:d0:54:47:44:35:d4:15:fb:cd:7f:73:76:
         2b:4f:81:c0:26:f6:e9:49:33:fb:0f:0e:e3:71:31:3a:7e:1e:
         8a:89:6d:2a:4d:e5:e0:4b:c7:0f:71:96:61:48:97:25:00:6b:
         22:51:c2:53:19:8c:c0:4c:e9:b5:fa:5a:d6:b3:f6:9d:f2:3e:
         be:2d:24:56:08:29:0d:56:93:5a:fd:a8:d2:62:a5:bb:89:44:
         72:35:94:c3:89:4e:cd:75:5d:aa:1b:bb:6f:49:a3:04:95:3a:
         ae:42:2b:13:f2:c3:68:a1:26:8a:32:04:ed:93:1b:c2:a8:d5:
         86:e5:d8:11:c2:a2:e9:ca:d1:9d:3f:1e:ed:59:69:0e:fb:5e:
         79:f4:b6:5f:89:c9:a9:f3:02:9b:fd:18:c6:e4:ec:f3:a5:ce:
         74:bc:bb:7c:3c:17:4f:ae:b5:15:a1:cb:04:67:c0:ff:10:79:
         fa:31:f8:d7:5d:15:aa:8b:1c:13:f5:fa:b0:86:c2:dc:cb:b8:
         99:b7:77:5c:c6:0b:43:48:fb:ee:63:6b:7e:e0:6a:02:60:e9:
         8d:2b:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org