Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/be2cd3aa-3e0d-3676-8e37-0434e6e1412e.roa
File:                     be2cd3aa-3e0d-3676-8e37-0434e6e1412e.roa (raw, json)
Hash identifier:          IqAwPkwrZc5kgTuC7kONRaZZYPOOxAXX6AoiVkpiDc4=
Subject key identifier:   3A:B8:6C:98:B0:A1:25:60:20:B3:51:E0:09:A6:8D:21:EE:F7:95:C4
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285844FF90155BBFD6CF21AD48CA33
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/be2cd3aa-3e0d-3676-8e37-0434e6e1412e.roa
Signing time:             Sat 24 Feb 2024 14:00:31 +0000
ROA not before:           Sat 24 Feb 2024 14:00:31 +0000
ROA not after:            Fri 24 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        70.42.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ff:90:15:5b:bf:d6:cf:21:ad:48:ca:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Feb 24 14:00:31 2024 GMT
            Not After : May 24 13:00:31 2024 GMT
        Subject: CN=f2be9c96-a3b8-4bf3-b328-dcb2e4fb61bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:f6:77:73:17:42:1e:33:a3:47:d4:0b:b3:
                    4a:00:05:6b:8d:41:08:38:90:53:eb:5c:b2:16:36:
                    3d:c8:5e:7f:84:af:3e:1a:5e:ce:e2:1f:75:76:73:
                    2e:f8:b7:4e:64:08:88:ed:0a:07:01:3c:51:dc:79:
                    b2:97:9b:2a:5e:56:fc:40:ca:96:ee:f4:49:aa:fc:
                    98:fe:1c:af:00:ce:85:2c:d9:b7:8e:28:77:d9:01:
                    06:f1:97:71:93:22:5a:78:21:01:f4:23:58:e0:17:
                    75:f8:e1:39:71:a0:34:f0:c2:43:98:bc:b5:33:54:
                    52:ea:22:fb:9c:fd:91:50:04:2c:38:6d:20:93:0e:
                    b6:93:e3:f3:5d:4f:f8:5f:b8:69:8c:6d:b1:35:33:
                    b8:40:09:76:24:4e:bb:34:b1:b6:7c:ca:62:71:cc:
                    4a:e3:d7:8e:93:06:35:ac:72:ed:d7:4e:31:fa:f6:
                    a0:18:03:b6:31:67:6d:a6:2a:5c:40:33:3e:a1:95:
                    7d:f0:08:39:13:57:87:cb:98:b5:a4:ab:60:62:a8:
                    fd:2b:eb:c6:65:16:13:e3:e5:3d:b0:cb:f9:0c:26:
                    1d:ae:b9:8a:07:8a:b5:b3:60:30:7f:f2:8a:f0:2f:
                    72:de:e8:8b:cf:aa:fc:7f:97:23:71:60:b6:25:fa:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B8:6C:98:B0:A1:25:60:20:B3:51:E0:09:A6:8D:21:EE:F7:95:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/be2cd3aa-3e0d-3676-8e37-0434e6e1412e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.42.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:06:e8:fa:71:71:a2:74:e0:1d:38:60:11:c6:4b:bb:aa:2d:
         34:4a:be:88:ec:9f:e2:98:f7:e0:b2:42:bf:52:5d:fc:5a:19:
         b6:9f:a8:f6:0c:e5:0c:f7:26:04:60:8f:1f:eb:46:48:77:b6:
         56:1e:d3:3f:77:91:0e:e8:74:9e:09:5f:cc:cc:87:bb:05:4b:
         f2:ee:39:77:fb:03:7e:00:1e:4d:b2:9b:58:c4:e3:0f:05:c4:
         14:be:a3:7b:f8:c8:d9:e0:64:71:82:b7:5f:c0:e4:44:70:98:
         58:05:6f:49:1f:98:0c:81:e5:0d:dd:49:44:93:4c:2e:30:78:
         a9:9e:07:4f:05:15:39:57:30:54:b0:e3:21:fd:59:1b:13:b7:
         e6:4e:5c:5f:d1:92:83:f9:ea:70:7f:79:a2:04:99:81:86:2a:
         92:6a:7d:67:af:9e:41:5e:97:c5:39:5f:a8:2e:51:e9:33:7e:
         82:93:ac:be:01:46:52:46:f1:4c:08:b3:27:ab:42:f5:2e:b2:
         07:2f:ee:3f:6e:ae:de:6d:e7:64:d8:84:b8:dc:a5:09:7d:0c:
         4a:2c:1b:c5:80:76:fd:7b:65:7e:77:e2:06:42:d9:7b:55:73:
         64:16:69:1b:65:02:21:7c:4d:25:98:06:c6:4b:9f:61:90:00:
         6f:0a:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:53:37 2024 by rpki-client on console-fra.rpki-client.org