Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa
File:                     43659337-d3a9-39a2-9081-bbcafeb0d57d.roa (raw, json)
Hash identifier:          ITX97UTOJK/GYoX2wVMRIRy0CB4btu87utQu8/BsD1g=
Subject key identifier:   DD:9B:49:65:DE:A2:31:B3:BD:19:08:A4:1B:61:74:A2:D9:7A:41:EB
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845490580E79120D533BD086BE0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa
Signing time:             Thu 21 Mar 2024 21:31:10 +0000
ROA not before:           Thu 21 Mar 2024 21:31:10 +0000
ROA not after:            Wed 19 Jun 2024 21:31:10 +0000
asID:                     15169
IP address blocks:        70.32.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:05:80:e7:91:20:d5:33:bd:08:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:31:10 2024 GMT
            Not After : Jun 19 21:31:10 2024 GMT
        Subject: CN=3d783e5c-9518-4b6b-a4bb-9441a9a827bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:8a:db:d7:94:57:89:4f:72:31:fb:d7:16:
                    1d:c8:9e:43:c6:ba:f1:87:dd:66:09:78:91:8e:b2:
                    65:b9:5a:b3:ac:ba:10:56:1e:f1:d4:fc:e2:30:89:
                    eb:bc:22:8c:2d:81:77:37:14:f4:71:1d:31:b6:25:
                    59:c7:bc:88:c5:b4:fe:dd:00:2a:50:b0:73:be:e3:
                    6a:d2:b7:2d:dc:67:f7:da:d4:0c:c7:62:00:ad:be:
                    7a:b7:b9:3e:65:e5:17:3e:e7:bd:ef:83:24:17:a4:
                    01:35:bc:ba:54:5a:06:d7:79:4d:20:57:cf:a9:56:
                    80:b7:71:d0:1b:20:4a:0b:b3:b8:33:f8:97:fc:9a:
                    9b:cc:f3:ee:88:9e:c6:01:74:e2:5f:b7:0e:dc:e9:
                    df:75:01:6d:ab:c7:6a:34:0c:e1:56:92:bf:9c:ae:
                    fb:f6:a2:37:f3:a3:7e:f6:24:4f:17:df:81:0c:74:
                    55:c7:cd:2c:a7:07:a9:d0:66:2c:37:fd:f5:7e:db:
                    35:17:99:4f:66:e3:10:df:e1:43:02:3e:de:e7:c9:
                    f7:33:dd:35:c3:a5:d8:cb:7f:33:88:76:bb:ac:95:
                    5f:f2:e7:65:b7:61:ce:32:2b:3e:df:17:57:13:29:
                    33:71:3d:78:fc:a6:de:9b:c8:fb:55:de:6f:5f:e8:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:49:65:DE:A2:31:B3:BD:19:08:A4:1B:61:74:A2:D9:7A:41:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:33:3c:1e:de:33:fd:08:50:10:5e:f5:b5:83:65:21:14:
         39:8e:6f:9c:63:bd:12:fb:46:b5:d2:a9:81:65:77:5b:05:19:
         fd:e9:18:bb:3f:07:07:e7:7a:1d:52:58:f6:b3:86:21:ce:71:
         f6:20:20:67:db:2a:06:a2:c1:ff:a1:1d:e4:92:e1:d1:1f:91:
         d5:00:fc:b6:7e:af:1e:59:8b:91:ba:70:7b:81:38:13:39:53:
         f0:a1:69:2a:69:8a:8b:35:a7:5d:2c:f1:ef:b2:b4:8a:b5:8c:
         7d:61:b4:3c:70:96:ac:c8:cf:52:8d:1a:41:6c:6c:43:75:c9:
         8c:ec:6c:ad:b1:04:93:22:32:ae:17:4e:f6:c5:a0:c1:51:f7:
         20:55:c6:73:d1:e1:5b:6a:f3:a3:4a:54:a1:56:90:7a:fe:9f:
         e5:89:df:3b:2e:a9:64:2b:bd:bc:a7:b9:9e:49:3b:d9:94:6e:
         a7:c1:2c:38:47:71:88:5b:37:05:44:ec:ad:94:ee:05:1e:83:
         41:7f:ca:6c:ba:46:de:f0:ae:94:24:26:00:af:c8:2a:a0:05:
         62:1c:29:88:d1:3c:2c:64:66:d3:d8:73:5d:ac:ce:e9:e4:cf:
         c9:2f:63:9c:55:9d:fa:dc:54:aa:42:9f:75:1a:21:a6:5b:38:
         14:16:f1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:17:02 2024 by rpki-client on console-fra.rpki-client.org