Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24ea30ae-d1cf-3a73-8a46-dac2db64f05c.roa
File:                     24ea30ae-d1cf-3a73-8a46-dac2db64f05c.roa (raw, json)
Hash identifier:          VmSIz3TQLZWdZWmASFiZn3BKk9AfGedbqhEz3u9zXrk=
Subject key identifier:   B6:50:1A:08:08:99:D6:D1:86:09:33:2E:7C:15:73:00:64:37:A2:B4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F06E044FD01CADFB8E6C3E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24ea30ae-d1cf-3a73-8a46-dac2db64f05c.roa
Signing time:             Fri 29 Mar 2024 18:41:43 +0000
ROA not before:           Fri 29 Mar 2024 18:41:43 +0000
ROA not after:            Thu 27 Jun 2024 18:41:43 +0000
asID:                     396982
IP address blocks:        70.32.159.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:06:e0:44:fd:01:ca:df:b8:e6:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:41:43 2024 GMT
            Not After : Jun 27 18:41:43 2024 GMT
        Subject: CN=846054b2-4c62-439c-a023-58372592142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:05:53:18:6d:db:ff:4e:9b:77:7a:3b:3a:
                    81:21:bd:d7:3c:05:78:01:b4:a0:9f:2a:10:c2:40:
                    89:e2:5e:5c:5f:a7:bb:63:77:0a:d7:c0:5b:ba:f8:
                    a6:14:36:e5:3b:5b:51:6d:73:f6:6b:3a:08:f0:1b:
                    23:cf:de:25:f9:64:9d:de:84:77:8e:85:5a:02:e7:
                    46:75:04:19:f7:61:7c:bb:3b:4d:83:e7:dc:32:29:
                    e6:4a:7c:9e:75:59:16:e6:8c:cf:22:70:5b:ea:ac:
                    31:97:ca:f3:e5:b7:9c:85:ad:b7:3c:03:a5:b1:32:
                    6d:0a:0c:eb:d9:96:03:0e:d0:eb:7a:fb:39:62:9f:
                    65:80:9f:61:5c:02:bc:31:37:5a:85:3f:bb:bd:47:
                    4d:fc:65:56:92:eb:18:86:c9:59:49:eb:87:da:95:
                    2f:dd:46:ad:14:9e:c0:0a:ad:f8:76:03:c3:62:f3:
                    b5:5f:49:2a:54:18:c8:ac:4c:c6:6e:2b:43:b9:96:
                    b0:23:08:c9:33:0c:81:cb:56:9a:4d:ac:20:a1:63:
                    68:51:93:74:7e:47:a8:18:92:52:76:da:21:82:eb:
                    be:57:91:74:ea:ce:c3:f0:00:dc:c2:73:d1:5e:58:
                    5d:10:cf:7f:e3:af:03:fb:7e:be:1a:3a:02:99:57:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:50:1A:08:08:99:D6:D1:86:09:33:2E:7C:15:73:00:64:37:A2:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24ea30ae-d1cf-3a73-8a46-dac2db64f05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.159.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a9:b2:2f:1a:97:41:f3:52:b9:4a:f4:22:bf:b4:0a:3e:2f:
         ac:af:c7:c2:bf:1d:cd:09:72:67:96:22:d0:cc:97:61:04:5b:
         91:19:dc:9c:5d:af:22:1a:03:0b:6f:0e:2f:ee:f2:c1:4e:10:
         ed:02:45:8c:4b:e0:10:c3:72:08:16:e3:31:24:ed:44:fe:7c:
         9e:3f:93:6e:6c:bf:db:c7:60:ee:f0:b3:24:e6:43:fc:2a:d1:
         bd:ad:77:10:83:fa:e0:20:45:46:8e:aa:62:d7:47:da:cb:55:
         5c:79:b0:2d:38:1a:ab:87:4a:27:1b:00:03:5d:21:3b:39:ff:
         a2:9a:d5:2b:38:1e:a4:0d:10:50:08:c2:81:0d:db:f7:b8:98:
         87:64:9d:f2:14:82:31:ec:cd:00:79:90:23:f7:d3:24:85:65:
         1f:e1:df:b1:93:c9:e5:29:ea:d0:74:5e:18:1b:07:01:67:77:
         ab:26:26:3b:4b:75:e2:f1:b2:e9:45:3b:ff:84:c4:7f:ad:87:
         67:e1:5e:de:ff:ec:10:42:5b:d5:22:14:14:b1:d3:d9:ba:f2:
         89:d6:e4:8d:f4:df:49:93:54:bc:7f:94:5e:85:da:d2:69:bf:
         ed:ec:d2:a6:a2:d5:a9:41:5f:39:b6:c9:c6:90:00:42:02:6e:
         52:ed:0b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:38:02 2024 by rpki-client on console-fra.rpki-client.org