Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
File:                     024a5f29-c6d1-392d-99e1-436589772a96.roa (raw, json)
Hash identifier:          vt4UZZyl0K3XcjtOJfhGEoBsHHhzVb/SvUGiS6pasTE=
Subject key identifier:   34:56:EE:4B:D0:75:8A:82:CA:97:01:14:D9:B7:B6:FA:20:0E:E4:80
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858478721313D30B474BBABA9D280
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     3695
IP address blocks:        70.36.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:31:3d:30:b4:74:bb:ab:a9:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=1f6d2d2e-c0b2-499f-99ff-dda4c1972ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:43:4b:1b:94:88:89:74:4d:14:3d:7b:ec:
                    ef:3d:0d:84:5b:de:6c:95:6a:53:1b:04:91:7e:5e:
                    c0:b8:70:43:bb:95:c5:87:d4:a4:23:a2:1b:58:d8:
                    d4:72:ab:e3:32:8e:c5:b8:8e:00:3f:e0:6d:97:08:
                    12:fd:39:40:03:88:1c:c4:6d:78:90:cb:14:68:81:
                    68:76:d7:10:9d:9d:ae:6f:69:0f:00:e3:50:67:c0:
                    45:65:25:2d:de:d8:0a:31:7a:8a:9f:a7:d2:03:6d:
                    9a:64:1e:50:a9:46:e9:26:c1:44:ce:d4:3d:ac:b0:
                    64:71:dc:64:1a:4c:54:ce:62:b2:a7:41:e6:14:79:
                    db:6a:eb:59:5f:e6:3b:16:d9:d6:c1:79:82:06:f4:
                    9b:69:1f:a1:ee:56:3e:eb:19:bf:5e:ea:1c:b8:3b:
                    f9:84:99:db:d7:da:e1:f8:fd:d0:d3:a1:c4:75:f6:
                    61:8f:9e:ab:32:18:73:38:e6:1a:66:57:95:32:33:
                    8a:f3:01:ca:63:cd:87:5c:4a:34:ea:c4:2e:6e:dd:
                    61:f7:9e:75:df:75:3e:7f:a9:bd:5d:f9:42:0b:69:
                    df:ae:cb:16:8d:4e:25:ac:7c:95:ed:62:3e:2c:42:
                    27:96:1b:3c:f4:08:f6:b6:75:05:05:74:af:1b:4b:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:56:EE:4B:D0:75:8A:82:CA:97:01:14:D9:B7:B6:FA:20:0E:E4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:35:c5:71:fa:fc:a3:96:1e:af:71:e3:79:5a:27:18:61:de:
         a7:6f:f0:ca:54:c3:0e:92:d3:4d:7c:63:c8:67:f1:19:8a:00:
         0f:a8:41:95:8b:0d:2b:5f:13:57:e8:78:8c:43:d3:f3:11:54:
         e9:67:da:21:35:7c:6f:37:39:e0:55:cf:46:21:8b:a7:6a:89:
         e4:29:1e:86:eb:da:c4:cf:ff:4c:7a:79:92:e0:32:36:2d:a6:
         6d:1f:f4:03:a9:8f:a8:0a:0a:d7:4a:0f:fb:d0:89:bc:2f:ac:
         c7:92:89:ae:b5:56:b6:89:d0:44:6a:05:32:d4:5b:ea:8b:7e:
         44:88:77:71:3f:7e:f0:72:5f:ba:c5:05:2f:9a:1d:85:4a:ea:
         d4:34:75:70:15:cf:b5:04:79:e3:b0:35:d0:01:21:e6:6f:c6:
         29:46:09:84:17:68:e4:15:6a:dc:e9:02:90:ec:49:6c:78:d7:
         46:0d:16:d1:28:72:69:95:2d:c3:99:83:83:54:e9:f3:29:7f:
         4e:bb:a9:15:5b:82:13:71:4a:64:5d:32:27:f4:e3:4f:78:f3:
         43:14:d7:f1:be:5a:ae:6b:62:d4:4e:8a:01:e8:fe:b7:9b:b1:
         cb:43:70:d0:05:cf:29:4e:99:6c:76:49:ec:24:c9:db:d0:77:
         5d:9a:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:19 2024 by rpki-client on console-fra.rpki-client.org