Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa
File:                     3c8c920b-c526-3c5f-9275-8f041f85fd59.roa (raw, json)
Hash identifier:          OT4MvRxf2ERkThvDIrN6Y0rrO8kKjlTEYHqNyEETAhE=
Subject key identifier:   81:4F:FF:FF:F9:47:95:15:91:03:35:B4:16:61:89:3B:C4:E0:CA:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC91EEDF1AD28D0AD9BA946
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        70.106.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:1e:ed:f1:ad:28:d0:ad:9b:a9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=91c46060-ff58-4f2d-a7d4-8a2bc502d380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:f7:4b:d1:41:dc:07:9d:8d:02:56:67:19:
                    37:5f:60:11:a8:82:3f:bb:50:ba:e0:fa:1d:c7:92:
                    70:90:34:53:73:00:d5:b8:2d:99:84:a5:98:12:55:
                    10:28:4b:e7:5b:74:47:ab:e9:b5:10:53:d7:59:ef:
                    5a:20:4a:4b:42:7c:8d:6c:2d:9f:32:56:8d:3d:02:
                    08:44:cc:99:15:b9:02:82:f7:dd:ce:9e:4c:b1:20:
                    7d:c3:cd:db:91:f7:cf:71:99:72:1d:00:3a:9e:31:
                    15:80:64:fd:80:b4:2e:46:3a:5b:3f:bb:d4:67:6a:
                    b7:7e:ff:8f:33:59:d9:b9:02:71:8f:16:f8:c5:d5:
                    8f:0c:6b:cb:d6:c3:31:ed:cb:b8:5c:5f:00:e6:b1:
                    94:3d:9b:d4:7b:9d:48:62:8b:e7:53:74:f9:63:7e:
                    82:d1:6d:ae:4c:27:8d:57:2b:35:d3:42:be:6b:75:
                    ba:9c:80:5d:c1:21:66:26:48:90:e2:6c:7c:43:aa:
                    99:44:46:46:a9:ca:db:5c:a7:60:cb:f4:fe:fc:a9:
                    fc:5d:e4:a0:6c:a5:48:d1:2f:33:fd:b1:b0:06:e8:
                    1f:d9:04:b6:b8:19:23:60:be:61:e7:56:b5:be:56:
                    50:c9:a2:4d:e5:f6:7e:1d:61:ae:f2:bd:11:f8:65:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4F:FF:FF:F9:47:95:15:91:03:35:B4:16:61:89:3B:C4:E0:CA:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c8c920b-c526-3c5f-9275-8f041f85fd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.106.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:87:16:f4:89:ff:7a:0b:a5:f4:58:dc:18:7c:ea:4d:90:
         d3:6c:2f:e9:2c:4d:03:1c:5d:6d:3a:d4:31:a9:0d:a0:ed:90:
         ff:4f:80:29:8b:7c:9d:a4:dc:7a:63:33:b2:96:11:16:2f:53:
         c1:fe:cd:cc:fe:40:3f:66:62:96:2a:4a:96:ed:e9:da:5a:44:
         44:f0:fa:fe:f1:f7:c5:71:4b:06:79:0f:77:17:42:dc:4c:76:
         7b:c5:59:52:75:f7:38:9e:2f:7d:84:18:58:c7:8f:9e:41:02:
         80:75:fd:41:01:50:57:6f:7d:96:da:64:df:b5:b5:ce:26:10:
         52:01:7e:71:31:f3:dd:6b:cc:f6:39:77:46:11:73:36:a2:c7:
         c7:11:ea:73:d1:40:2c:c1:7e:32:59:41:d2:33:10:59:09:c3:
         f3:ae:9f:3f:c1:d1:12:0c:f8:d8:f5:3a:3a:55:5c:52:3a:5a:
         e2:c8:21:db:42:5f:18:33:bc:ad:3c:3f:0f:5f:cf:e2:08:19:
         47:ea:b3:e2:3c:d1:64:1e:fa:31:ba:cf:cb:de:e8:d5:ba:f7:
         85:57:8d:05:3f:40:01:ad:d9:1f:96:ab:cf:99:8d:63:9a:55:
         0d:8e:78:e2:0e:c1:d2:cd:bd:bc:be:2c:68:e7:43:30:36:f7:
         ab:1e:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:34:01 2024 by rpki-client on console-fra.rpki-client.org