Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
File:                     591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa (raw, json)
Hash identifier:          wL/dXAFxHTIaWke7yZlHD6PoG6MlOSa2xgcVhXMCNlY=
Subject key identifier:   D8:99:3B:30:4C:50:EB:2D:B3:C3:A5:27:78:68:84:64:EA:6E:1C:E3
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584787213206D710A676D54EC600
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     3695
IP address blocks:        70.36.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:32:06:d7:10:a6:76:d5:4e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=c4f81dd9-2de8-43e9-8b17-79f4edf2705c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:0f:be:61:eb:0c:d2:09:7c:89:2e:5b:9a:
                    3f:56:3e:5c:20:1d:34:a8:e8:a8:45:d7:ed:aa:2e:
                    62:88:fb:8e:c3:2f:d0:aa:2f:b4:5e:bc:ac:3e:f7:
                    2d:99:69:d1:e1:ea:39:af:b4:33:54:dd:3b:11:56:
                    1c:95:e5:f5:b6:5d:c9:4f:b0:08:25:9a:a6:a4:e3:
                    c5:4a:fb:2f:a4:fb:69:27:d3:89:61:d7:21:91:3c:
                    eb:14:16:50:4f:ef:e1:64:e2:39:f2:38:8a:12:28:
                    c2:60:ad:8d:b1:5e:ba:34:5e:c7:15:35:0b:d1:0a:
                    66:b8:b1:8b:5b:39:6d:dd:93:3f:a0:09:9a:6d:15:
                    78:6d:d4:5a:2a:19:2f:7b:17:aa:b7:bc:6f:f5:b0:
                    b9:98:c2:c7:b4:ae:02:db:7f:44:31:ca:2f:c1:47:
                    d3:65:01:b9:b9:48:04:b4:9e:99:01:ed:df:44:27:
                    16:70:1f:e2:c2:21:bf:51:f1:4e:bd:1c:f7:62:68:
                    5d:73:a9:46:a5:e6:f9:ca:7a:5d:74:9c:33:15:a0:
                    fd:b5:7b:33:0f:03:4e:05:6f:89:bb:d7:50:da:f7:
                    f8:cb:3e:c3:ea:d0:2c:be:43:36:c8:fb:40:1d:d2:
                    69:87:af:4e:86:4e:46:83:4a:8c:41:79:bf:d4:92:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:99:3B:30:4C:50:EB:2D:B3:C3:A5:27:78:68:84:64:EA:6E:1C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:aa:a6:3c:5a:f5:29:8d:29:f5:ec:35:d1:3d:34:f1:6b:c4:
         63:ed:7e:d1:55:55:69:ed:45:eb:81:ee:7d:ef:9f:3c:30:2a:
         c7:6a:81:44:1a:01:67:b7:0e:3a:db:1e:10:7c:d1:17:6c:b4:
         db:9a:70:f1:14:61:2a:1e:1f:b3:f7:87:d7:d0:d3:db:6c:a9:
         6c:ed:65:4a:fc:50:b0:e1:e4:17:66:00:e5:66:84:cf:64:cf:
         45:fb:22:41:48:df:a9:73:f6:09:d1:e8:03:11:c6:a8:db:e0:
         0f:31:2f:b1:37:f1:a5:0a:d5:df:13:08:5c:e1:ed:4c:6d:7e:
         94:1d:cd:88:9d:2c:5d:ff:57:70:56:bb:c5:20:9a:1b:ee:38:
         d5:df:88:bc:d8:1f:a3:60:16:fa:51:ab:0c:5b:e8:40:e8:c5:
         9c:38:aa:6d:9f:83:87:7f:7f:20:30:3c:09:20:5d:d6:24:3f:
         4e:bf:da:ef:ad:e6:09:85:9f:39:0a:91:eb:05:88:11:72:86:
         05:d9:06:fb:ea:b7:c1:81:34:11:e1:bc:fe:a1:42:68:3b:40:
         da:2a:ed:fd:db:01:05:30:bb:4b:4b:86:c9:2b:c4:eb:df:3c:
         a8:54:cf:56:9d:af:a7:70:b7:3e:86:28:bd:87:e9:6b:91:8e:
         ac:02:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org