Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa
File:                     bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa (raw, json)
Hash identifier:          JpU5AM3P7YKjThCyyseGeEEIJdua3/93vGQWgt34rGM=
Subject key identifier:   7A:20:CB:00:F7:92:CC:AC:82:65:7C:EB:E6:39:66:81:7B:FC:5C:B3
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F43285845C873AC796CFCAF41CB856B10
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     3695
IP address blocks:        70.36.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:ac:79:6c:fc:af:41:cb:85:6b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=e1010606-6415-4190-8e4f-1f6ce133784e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:ab:f2:41:b1:e2:b4:d7:d9:b1:90:df:dc:
                    a2:a8:82:aa:9c:35:8d:48:16:df:13:e6:72:ef:51:
                    9d:a8:31:c8:ee:73:ec:7b:e3:e1:7a:4d:fb:1d:c9:
                    eb:c5:0e:e9:e9:d5:b2:4c:39:1b:58:74:ae:9a:38:
                    6b:9a:ea:d5:9e:6a:ab:a1:57:29:94:e5:bb:17:dc:
                    7b:6e:72:4e:bd:a2:ff:b1:af:29:6b:3b:5d:f3:a1:
                    df:0b:f6:58:4c:33:88:c2:8a:6c:9e:c0:10:2d:63:
                    03:39:11:53:98:ea:cb:c0:19:b1:47:f6:4e:97:2b:
                    00:ee:8b:20:9c:dc:4d:fc:65:31:c3:9a:0b:bb:61:
                    24:7b:4c:4b:0c:78:bb:40:7a:e3:c3:d8:79:f8:2c:
                    ee:ef:4f:54:84:44:3e:06:ad:81:8b:92:d9:48:26:
                    6d:28:d2:8f:7c:a4:18:c7:ba:4a:de:69:e0:db:5b:
                    ed:a7:f2:88:e5:92:89:d4:49:02:77:20:54:9c:2c:
                    fe:49:cd:b2:27:c0:8c:d4:d2:cd:b2:2a:52:dd:dd:
                    de:22:79:a7:69:70:68:fe:d8:db:91:bf:cd:bb:48:
                    7f:b7:72:bd:8d:a4:48:87:08:58:f3:46:6f:6c:b2:
                    d1:5b:ab:f0:26:51:cd:38:e9:17:76:e1:7e:9d:a9:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:20:CB:00:F7:92:CC:AC:82:65:7C:EB:E6:39:66:81:7B:FC:5C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/bd9e7ce5-e62e-3ef3-81a9-aad2be7b50ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:96:9d:8f:7e:82:97:f7:62:d0:58:56:21:0d:20:8f:3d:3a:
         eb:cf:ab:ad:7a:d0:63:4f:06:dd:5e:97:ff:07:15:de:6a:cd:
         a2:f7:2b:0d:25:57:96:ed:e9:ff:8f:6f:76:5e:71:f8:1b:76:
         dd:85:51:11:0b:9e:ab:b9:e6:d0:4b:11:5e:de:c1:ba:6e:f2:
         af:10:46:7b:56:00:4c:eb:b4:1d:48:25:7c:52:13:81:d1:01:
         46:9d:aa:11:5f:6f:37:97:69:01:7f:59:e1:57:17:56:3d:87:
         1e:82:fb:4a:2b:13:79:36:99:c3:e6:64:e5:dd:7a:99:43:59:
         d1:cd:4c:c1:49:68:b4:30:4f:86:5c:30:d6:7c:68:cd:14:62:
         52:13:eb:25:ae:a3:56:dd:e8:49:1b:7d:df:ba:2d:34:3b:e2:
         4e:a7:7d:61:e2:f6:4a:a0:7e:2c:8c:f6:37:ca:09:9d:98:2c:
         09:af:42:7a:b0:0d:0e:1a:4a:c1:6d:1b:db:71:7f:3a:20:ad:
         4b:5f:96:ba:50:18:f4:d3:0d:c1:2c:af:5e:2c:5a:c5:84:3a:
         56:22:74:93:c6:88:22:da:91:23:3f:63:40:f1:6d:92:56:bb:
         f3:a6:00:b7:6b:98:aa:2d:2f:fc:41:c0:27:ca:08:09:0f:af:
         01:49:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:14 2024 by rpki-client on console-ams.rpki-client.org