Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
File:                     024a5f29-c6d1-392d-99e1-436589772a96.roa (raw, json)
Hash identifier:          pdUb/OM2KUG/k1E+ESpmKY7XqNzXg0pN3TGHyiKwDDE=
Subject key identifier:   70:F7:85:E8:59:11:25:86:C5:37:82:44:3D:33:31:BD:C7:83:74:C3
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F43285845C873AB8AE8E84CA22FE0BFC0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     3695
IP address blocks:        70.36.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:ab:8a:e8:e8:4c:a2:2f:e0:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=dc0b3985-c3ef-485a-8ee2-741ca23d5a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:da:77:a3:06:2e:b4:e5:12:e8:ac:e1:e7:
                    52:25:bd:75:ab:73:fd:6d:05:44:3c:a3:04:01:1d:
                    69:ff:78:7a:91:62:53:64:c2:31:8b:a8:8a:ea:43:
                    50:72:53:a6:3c:ed:27:6c:c0:d2:3f:91:9b:e6:e0:
                    59:9d:cd:23:13:7c:de:5e:5f:f3:28:7c:e3:2a:6d:
                    cd:af:4d:90:38:54:49:2d:3e:90:b4:49:11:b0:c0:
                    c5:86:66:ee:4d:31:7f:79:e5:20:8e:38:70:2f:9e:
                    92:d0:6b:03:f6:76:21:92:bb:52:af:0d:2a:82:a0:
                    b0:82:9a:12:12:69:b6:8c:59:ce:0e:be:d8:19:e8:
                    9b:9b:5f:73:cd:61:8f:ba:9a:a5:fd:0e:05:96:ae:
                    ca:4d:2c:9e:a0:55:69:0d:ef:ea:be:93:71:3e:4f:
                    b0:9b:c9:a0:11:38:9e:6b:ae:48:fc:50:00:b4:95:
                    3f:af:78:fc:9b:42:8d:c5:b0:9d:4c:78:bc:82:36:
                    36:b2:dc:5c:26:b5:69:fa:91:3d:ce:64:d0:a1:f3:
                    e3:33:0f:27:a3:15:24:6d:85:a5:de:99:ea:48:a3:
                    7d:24:8a:ff:0a:e6:f8:40:cb:36:c2:59:c2:e2:9b:
                    3d:ad:58:52:d1:87:7c:f2:f0:b1:d7:60:16:28:e4:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:85:E8:59:11:25:86:C5:37:82:44:3D:33:31:BD:C7:83:74:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3a:ff:a0:85:a9:9f:3f:3e:58:59:b0:9c:a6:53:c2:8d:32:
         60:77:43:de:18:2b:4e:ea:61:f1:e4:4f:52:f6:ce:72:d3:29:
         22:74:cd:57:3a:60:52:0e:69:d4:85:ae:42:83:4f:b7:06:a3:
         92:5e:c5:01:15:a8:4b:10:18:a6:ec:9a:a5:07:ed:47:9c:1f:
         68:d1:5b:d5:99:db:f7:78:47:26:7e:ac:34:76:d8:a9:a7:59:
         a9:f7:26:59:05:1b:93:57:bc:fb:ea:27:a7:c4:27:91:57:dc:
         c5:89:05:3f:d2:7e:01:d5:9f:36:6d:d3:fb:2c:91:80:43:56:
         b9:4c:02:7b:77:3e:7d:f0:98:f6:c1:49:85:f6:31:dd:94:72:
         31:02:57:83:b4:08:a4:bf:02:cb:6a:1d:5c:cb:fa:71:68:30:
         2c:50:0e:bb:1f:28:af:40:12:88:42:35:e8:8e:7c:ef:fb:2e:
         f5:8b:77:26:a1:5d:92:4a:a9:fa:bc:cf:ca:a7:e3:17:40:54:
         fb:b8:89:a2:f0:ed:dc:be:12:da:62:42:e6:10:7d:a9:3f:cc:
         b4:ad:99:99:0c:bf:c2:97:18:0f:c5:74:f7:ff:5e:db:9c:78:
         92:94:a4:67:41:de:ce:4d:02:4c:d6:f4:e9:26:1d:d3:fd:84:
         ae:d8:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:38 2024 by rpki-client on console-fra.rpki-client.org