Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c63d564f-30a8-3bc2-b0bf-2a3be881c0f7.roa
File:                     c63d564f-30a8-3bc2-b0bf-2a3be881c0f7.roa (raw, json)
Hash identifier:          e3hiOroZKJfqXf1wzYrwnp55oHG1pitiM36wg/zQC3s=
Subject key identifier:   8F:FA:4C:AB:AE:FE:D6:3C:1E:17:3A:02:85:42:04:17:4C:96:56:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC40CEC2130DD84E5F17C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c63d564f-30a8-3bc2-b0bf-2a3be881c0f7.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33657
IP address blocks:        70.88.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:40:ce:c2:13:0d:d8:4e:5f:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=9603ea7d-70b0-439b-ab73-7201113f5834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:f8:53:f3:c5:91:88:15:33:fd:c3:e8:53:
                    ae:53:6a:5e:74:c8:15:73:bb:4e:cf:05:75:db:3c:
                    af:78:fe:90:36:50:1e:69:91:04:61:02:d3:d2:ac:
                    7d:fb:05:ad:9b:d5:41:20:ff:04:af:16:d5:d2:73:
                    e6:e7:66:c8:3b:72:eb:eb:93:a2:22:91:70:9e:a8:
                    2a:8c:c0:a6:88:2d:4d:76:13:d2:28:38:67:32:c6:
                    c2:cf:af:b0:65:b6:a4:03:a7:c3:14:db:e1:cf:7d:
                    66:bc:26:68:31:e1:ca:d0:b1:48:e1:54:54:d7:ea:
                    04:c5:07:d4:e7:cf:a7:ae:d4:d3:13:4a:d9:6e:ed:
                    37:ea:9b:15:32:72:de:3a:56:33:7b:61:3c:10:8b:
                    5e:c9:60:00:51:73:0d:7e:cc:90:9c:08:72:10:f3:
                    cf:4e:c5:ad:36:d1:8b:59:ac:d7:75:09:d0:a2:1f:
                    1c:33:0a:0d:d1:14:1a:a3:c2:8a:fb:c2:db:d9:aa:
                    36:a9:c5:65:03:f8:60:16:2e:e0:af:05:70:ca:80:
                    d9:26:08:a2:2a:7a:ec:63:f6:2e:b4:17:46:4b:10:
                    89:e1:f6:25:64:a5:6a:54:45:f8:9d:53:32:9c:0b:
                    2b:38:04:b3:5b:bb:ff:12:2b:cf:32:cc:c0:fa:b3:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FA:4C:AB:AE:FE:D6:3C:1E:17:3A:02:85:42:04:17:4C:96:56:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c63d564f-30a8-3bc2-b0bf-2a3be881c0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.88.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a2:fc:fb:d3:c6:29:e4:7f:ac:81:79:34:b8:ac:d7:53:cd:
         51:03:0b:43:65:4d:77:7d:eb:af:af:f9:1d:4e:3b:7f:fa:d9:
         7e:16:c8:c4:03:47:a2:f6:85:3a:cc:c8:88:38:b3:05:12:7e:
         a0:0c:94:6e:92:4b:14:90:c9:c4:ba:12:24:7e:7f:0b:d5:6f:
         2b:67:1d:84:f2:1b:a4:ed:9f:48:f0:f9:d9:fc:53:23:72:a2:
         46:7c:49:84:65:39:04:3a:84:27:63:d1:a0:e0:39:9d:93:66:
         ee:3f:f7:8d:a6:e6:53:70:23:ba:35:ca:f1:19:e9:3d:de:1f:
         5f:56:23:d5:ff:0f:00:75:b9:f2:c3:24:d0:33:e0:30:9b:c5:
         76:0a:36:10:f1:ec:4c:d9:53:a5:66:e8:7d:ce:95:e5:a4:d3:
         fd:aa:13:43:05:c4:c6:e8:84:6a:34:ab:c0:45:ef:73:01:2e:
         30:be:51:25:40:39:a2:f9:5b:e0:de:9b:a5:24:52:98:f7:d4:
         ce:31:2c:75:92:a4:48:77:3d:3f:d4:d9:fb:dd:67:52:83:07:
         a1:9c:84:5e:28:a1:a8:65:08:8d:3b:d2:de:8a:cd:58:f5:d1:
         cd:56:75:1a:8a:57:09:bc:be:2a:59:4d:69:dc:5a:98:f5:46:
         19:cc:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:22 2024 by rpki-client on console-ams.rpki-client.org