Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
File:                     a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa (raw, json)
Hash identifier:          sFyVoxsUjz2VIaVTQpUrE+B7h+RohNEBAifKHDKEh3M=
Subject key identifier:   DB:D3:64:AA:35:47:89:42:DD:DF:1F:80:20:22:DC:73:F7:BE:92:5D
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F432858471E705EA60D3212E6AA022380
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     1239
IP address blocks:        65.160.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:5e:a6:0d:32:12:e6:aa:02:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=33ce410f-c123-4c85-8819-59499d16181e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:17:19:7d:56:70:99:38:e8:69:03:76:d0:
                    3e:13:e8:fa:7b:1e:37:69:8c:94:f4:78:89:fe:6b:
                    e4:cc:12:54:a2:89:03:73:8b:34:d2:3a:53:9e:05:
                    5d:d4:87:ad:88:2d:0b:35:a8:bf:62:96:1c:1b:ab:
                    a2:d7:38:6e:0c:58:45:e2:3d:48:6c:00:c6:de:a9:
                    81:3e:f2:02:3e:be:22:e9:39:30:01:7f:71:6e:6e:
                    c2:8b:6e:63:0b:79:b1:b7:fc:28:ca:46:15:b0:91:
                    b5:02:c7:d0:1e:17:38:e2:f0:38:41:ff:1d:20:d5:
                    32:31:dd:f2:f9:30:1a:8b:e4:08:05:29:07:63:5c:
                    62:5f:21:8f:00:3e:cd:fb:5b:7c:19:fa:10:fa:1a:
                    6e:18:dc:ca:dd:83:81:8a:fe:f5:79:85:2b:a1:c3:
                    e1:a7:63:98:68:5a:e2:32:d6:8c:e8:68:e1:d5:84:
                    88:7e:58:03:10:60:d0:1b:34:52:f9:e4:05:ec:2d:
                    b9:39:92:89:28:bc:a1:0d:de:06:89:fb:2a:59:d1:
                    c2:16:09:11:e2:f9:d7:bf:4c:20:20:a3:8a:e4:c0:
                    a4:47:a8:41:7c:99:24:7a:9a:be:bc:d2:ca:2c:77:
                    a9:7d:51:2c:da:37:21:4e:ea:df:c8:69:bb:f5:f8:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D3:64:AA:35:47:89:42:DD:DF:1F:80:20:22:DC:73:F7:BE:92:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/a395d8c5-35be-3b38-8aa4-a48ba3efc08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.160.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:37:f7:31:16:65:7f:1c:a0:dc:c5:89:cb:7b:a6:5d:70:
         0e:40:da:e6:41:94:35:3e:0f:f1:c6:50:40:90:6a:ea:52:39:
         9c:e3:63:7f:e1:a5:25:20:53:5d:7b:75:13:77:c7:50:3a:6e:
         1c:3d:b2:83:1d:a6:ff:1f:64:14:5c:e6:29:2a:af:5f:08:aa:
         4c:d3:89:4b:3b:53:3f:78:bd:39:2e:8d:5f:58:ea:e9:29:89:
         f3:55:83:a6:52:4b:1e:41:0c:9a:51:f3:a7:e1:6d:c8:cf:a4:
         09:27:d5:d7:da:d7:a4:1f:52:f6:4c:7a:b6:30:49:98:35:3b:
         ea:19:3b:9b:2d:31:a4:e9:89:d7:0c:34:98:08:55:99:02:b8:
         58:d2:63:1d:00:4a:4d:4b:03:d9:5e:ac:70:06:c8:98:9a:8d:
         09:c1:60:a5:6a:df:00:14:44:0c:ed:8b:dd:c6:32:04:49:7d:
         0d:43:ad:a4:19:63:98:4b:c1:98:8d:bf:ac:83:f9:4b:ef:ed:
         40:aa:34:33:97:61:28:55:91:bc:17:71:7a:84:8b:f8:e2:9a:
         0a:fb:6e:17:41:97:c0:9a:1b:07:50:76:3f:de:35:b2:50:e0:
         ec:1f:c1:83:e2:5d:d7:36:69:0b:bc:61:cd:8d:68:d0:04:1a:
         06:40:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:12 2024 by rpki-client on console-fra.rpki-client.org