Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa
File:                     5f1246fe-5889-33b0-9a38-bc38ab95466d.roa (raw, json)
Hash identifier:          RynXwanFXhMt69gNoKW014uUr8wfqEzVNlTh1bId7aQ=
Subject key identifier:   0D:8C:FA:FC:7E:79:D3:63:DD:92:8A:37:3F:17:48:23:A2:35:F6:A8
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584548FDFEF597FBFC62EE6D6F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa
Signing time:             Thu 21 Mar 2024 21:16:03 +0000
ROA not before:           Thu 21 Mar 2024 21:16:03 +0000
ROA not after:            Wed 19 Jun 2024 21:16:03 +0000
asID:                     396982
IP address blocks:        70.32.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fd:fe:f5:97:fb:fc:62:ee:6d:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:16:03 2024 GMT
            Not After : Jun 19 21:16:03 2024 GMT
        Subject: CN=32601f3a-612c-4a2d-92b2-df14ff40ac2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:aa:38:53:a7:6a:73:65:70:cd:59:a4:46:
                    08:eb:cc:2b:2c:18:9f:e9:cd:fc:b8:ac:c2:80:9f:
                    32:d3:2f:4f:71:6a:72:f6:31:84:92:d4:39:c9:fb:
                    be:ec:58:47:3f:ab:21:8b:e6:74:6e:c8:79:21:cd:
                    d7:5c:3a:6c:d0:71:6e:c6:0c:98:bb:62:9e:13:d0:
                    76:fd:bd:e5:57:65:19:f0:a3:42:79:e7:33:a8:99:
                    9e:1e:a0:0a:59:bd:80:da:20:57:78:35:82:25:37:
                    09:bf:88:86:d2:2b:dc:16:59:4a:57:18:c6:9f:ce:
                    c9:a6:31:34:80:b8:23:65:b0:04:be:6f:31:b0:ef:
                    49:2b:c1:11:2d:a3:11:69:a9:26:dd:1c:31:58:3f:
                    b2:b0:e9:87:68:2d:5e:d2:d5:a5:d3:3a:95:72:49:
                    12:e3:24:c9:4e:b1:cd:c7:b8:79:60:54:ac:4c:74:
                    c5:eb:25:64:29:52:86:29:56:5f:6c:1b:0b:ac:70:
                    35:5f:79:c3:a6:56:f0:e5:df:72:fd:af:1c:d3:0e:
                    94:48:81:13:e9:6d:0c:e4:c0:70:23:4a:e9:7b:fd:
                    d0:70:92:46:d6:e1:a9:05:be:6b:71:b5:db:af:37:
                    5f:ba:e8:17:b9:d2:a6:96:5e:12:73:4b:a2:81:a2:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8C:FA:FC:7E:79:D3:63:DD:92:8A:37:3F:17:48:23:A2:35:F6:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f1246fe-5889-33b0-9a38-bc38ab95466d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:61:4a:d0:43:6b:d8:57:22:eb:9c:32:8b:6c:fc:d2:1f:
         69:37:c7:5b:6c:46:75:c5:20:5f:2f:bd:a7:da:a3:9b:fa:70:
         7f:ba:86:94:6d:c5:a9:83:48:ea:33:ac:3e:f7:74:e4:74:c8:
         5c:7b:70:eb:fa:c7:0c:c5:82:df:02:cd:56:89:34:35:1d:eb:
         79:8e:5f:b6:95:1f:a2:be:06:f1:05:06:95:7e:35:19:9b:3c:
         2e:13:bb:2f:08:3a:34:af:21:3d:6f:17:56:83:8e:1b:23:cc:
         b4:82:14:1e:39:57:b6:98:4f:7c:74:95:81:29:8d:8f:82:33:
         05:6a:78:26:f9:cc:80:cb:cf:49:e9:aa:0a:3a:e0:16:d4:23:
         52:1c:20:40:18:cb:fe:1e:c1:3d:eb:ea:25:95:8e:a5:d5:ad:
         d8:d6:ea:c9:66:b8:4d:7f:eb:ec:a2:16:65:f8:43:25:56:35:
         15:f7:64:c6:8b:5a:f3:60:13:45:34:dd:89:2e:42:59:4e:9f:
         61:fc:a9:42:8c:e9:7c:fc:ab:ec:9c:72:6f:15:f3:10:4f:88:
         e1:31:fa:28:b0:5b:64:bf:41:e6:ed:88:84:6f:ea:3b:94:db:
         0e:52:49:61:0b:2c:20:fd:a5:42:fc:b5:de:bf:6f:e4:2f:16:
         f5:cf:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:01:47 2024 by rpki-client on console-fra.rpki-client.org