Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
File:                     591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa (raw, json)
Hash identifier:          UgYF5JPmAWqECrAfqsV54DItzDfUIqefChsQclLyarU=
Subject key identifier:   65:66:82:7C:20:81:84:F4:67:A4:8D:31:5E:24:D7:C4:9F:6D:15:D7
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F43285845C873AC57DBEB89B1E97DC900
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     3695
IP address blocks:        70.36.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:ac:57:db:eb:89:b1:e9:7d:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=c1747483-4b20-4e23-a39c-b00bae64a63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:e7:33:a8:d8:e6:ca:bc:ae:75:22:9f:e4:
                    8e:e4:e9:b6:e7:6c:d7:8b:12:c4:4a:0d:0e:12:d4:
                    92:94:34:6c:64:b5:cd:b1:27:d4:4c:e2:d8:ac:8d:
                    6b:b4:fb:9b:40:71:cf:9d:dd:62:a5:3e:09:71:46:
                    bf:39:5d:54:3d:0d:58:ba:09:dd:fc:49:3c:85:89:
                    f6:ee:b3:e5:f2:61:5b:b2:fa:04:61:d2:26:12:0a:
                    82:64:98:e0:f7:67:63:02:33:e0:b0:02:fb:78:03:
                    2c:cd:cc:07:d7:27:38:ef:94:99:9d:f3:a6:4d:8f:
                    0c:cb:70:7f:fb:e9:46:53:d7:55:08:f9:03:b2:cb:
                    74:54:9e:60:df:7b:2d:61:c2:3e:45:35:94:10:6e:
                    e1:f5:a8:3c:05:34:2a:20:4f:55:3d:e1:be:31:80:
                    6b:97:13:aa:b5:58:22:60:af:14:1a:f4:d5:28:64:
                    cf:ae:0b:ad:c0:c9:fc:2f:cc:b2:f7:bc:54:91:fd:
                    2c:94:65:23:31:14:ea:60:02:4c:3d:aa:98:52:01:
                    86:10:8a:71:97:c6:82:a5:d0:fd:e2:e3:b0:57:0b:
                    b9:40:dd:92:bf:ab:13:dc:a9:e9:6b:1f:15:b9:12:
                    da:88:bd:d7:2d:d4:58:79:eb:28:97:12:b1:03:c5:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:82:7C:20:81:84:F4:67:A4:8D:31:5E:24:D7:C4:9F:6D:15:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f4:4b:8b:7f:e5:ec:d4:24:d4:87:66:31:06:95:f6:8f:11:
         e8:3c:48:21:e5:d3:b1:de:cc:a3:ae:46:d9:7f:19:a1:38:b6:
         eb:fe:c1:ce:d6:14:0c:de:2a:55:54:ad:19:49:5e:99:85:aa:
         4c:49:dc:a9:6f:9c:45:55:df:fe:82:a5:5d:da:ed:e1:76:f3:
         d4:c4:01:87:4b:86:c0:fd:6e:bc:a8:43:e9:ff:24:59:f5:41:
         cb:fc:d6:26:aa:0d:29:57:ae:12:bd:e9:5d:f2:db:32:07:af:
         47:51:88:63:35:e4:14:25:e7:cb:3e:0f:d4:c7:a0:26:79:5a:
         27:d4:79:f0:a5:fb:25:fa:9b:55:d4:c5:7c:4e:3c:b9:94:20:
         bf:40:8f:c3:01:f8:9a:9f:0a:58:ed:95:d0:40:5e:02:79:9e:
         3c:59:69:06:2e:61:ad:64:7b:39:f0:eb:7b:0a:36:c0:0a:3e:
         66:99:ac:d8:06:37:24:2a:67:7f:7f:d1:28:62:d7:b8:37:ab:
         2c:0a:ff:f4:f7:ed:c2:7a:2b:9f:0c:00:10:ba:16:cb:b7:67:
         25:fb:e2:7c:0f:80:c2:8b:33:1b:8e:66:97:ca:5d:d1:bb:1c:
         82:2c:a4:8f:bf:e1:38:b7:a8:4c:18:e6:b2:de:8b:95:d0:12:
         1d:cd:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:45:41 2024 by rpki-client on console-fra.rpki-client.org