Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fe2b1f63-1194-3d0d-94b4-8df099da6153.roa
File:                     fe2b1f63-1194-3d0d-94b4-8df099da6153.roa (raw, json)
Hash identifier:          /wOlzsl7ies3ib3Y8O6spuE3okr2rfxgA73atn+ACLU=
Subject key identifier:   0B:36:D2:52:D8:F9:30:45:06:84:4C:E3:E8:C5:BA:90:14:F0:D5:60
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F43285845C873ABE3CD3372F7EB64A098
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fe2b1f63-1194-3d0d-94b4-8df099da6153.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     3695
IP address blocks:        70.36.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:ab:e3:cd:33:72:f7:eb:64:a0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=ab75266b-9694-4c26-b06c-8be29a890703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:2d:6a:2a:73:e6:bf:41:10:e3:b8:44:37:
                    0e:56:92:78:18:55:d8:14:e4:7a:29:7f:28:88:33:
                    e7:70:02:6d:87:48:46:b3:38:1f:5f:eb:a0:0a:66:
                    9d:74:8a:e4:19:31:a0:10:7b:32:d2:f8:6b:f0:40:
                    7e:a8:23:2e:8b:99:70:43:fe:2a:4c:dc:f0:2f:44:
                    5e:64:df:6f:5f:bd:5a:94:72:99:c0:3f:7c:f1:41:
                    26:9d:e2:33:72:dd:51:4d:63:9e:0e:a9:5c:89:6f:
                    5b:8f:bb:71:98:80:06:81:48:25:ac:86:a8:b4:16:
                    fb:a5:d6:62:e9:c5:24:d8:ed:58:60:8e:3d:68:20:
                    21:6e:b1:b8:7e:52:d1:2f:35:d3:c2:2f:e9:d7:11:
                    15:a7:f9:9f:e0:b6:b7:5a:cf:e3:cd:42:56:05:64:
                    8d:8e:5a:70:87:1f:62:06:35:8c:ae:f9:48:c5:ff:
                    01:a8:55:10:26:12:7d:a8:9c:ec:e1:15:8a:ae:36:
                    53:d5:ef:f6:b5:1b:2b:ec:05:7c:10:57:da:b4:65:
                    a7:45:e8:72:c4:0e:53:94:ed:27:53:21:84:80:7f:
                    2b:d3:5a:ed:57:cb:2a:05:f8:a7:e2:56:c5:04:a6:
                    6f:88:4d:6b:a8:c3:e0:13:4b:e9:59:b1:de:75:45:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:36:D2:52:D8:F9:30:45:06:84:4C:E3:E8:C5:BA:90:14:F0:D5:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fe2b1f63-1194-3d0d-94b4-8df099da6153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:31:4d:04:23:ef:8f:d7:c0:9f:aa:b1:b1:c7:90:96:10:
         47:9a:a3:7e:35:c0:98:78:c8:a9:5e:2f:e0:df:21:44:b9:66:
         55:52:a7:f9:ec:df:11:15:49:10:b4:42:c2:2a:32:f0:a1:21:
         d6:63:f1:d3:92:27:74:40:bd:cd:7e:cc:b2:09:39:31:8d:a8:
         b7:cc:e0:a1:46:a9:ae:94:b4:2e:18:d7:a7:88:99:b9:70:08:
         0b:c1:52:81:90:e5:cc:03:59:6a:2a:96:1c:0a:d0:17:ac:c8:
         b8:43:5d:04:6e:13:3c:98:3e:5a:b9:af:d1:4a:de:c9:b6:09:
         b5:a0:5d:0a:c3:fc:5e:a8:da:bd:53:6c:d9:e8:10:54:80:87:
         5a:74:f6:79:ed:a1:f4:80:7e:d6:20:88:98:d1:23:f1:c9:ae:
         7d:8f:e4:95:83:fe:9c:39:18:e8:3b:e8:26:b3:1d:e8:c5:81:
         af:b7:b4:80:c1:f6:8e:52:e6:f5:2a:a2:c6:c0:a9:50:39:5b:
         2d:54:f8:08:4e:9c:d6:d7:77:42:b4:d9:e4:37:49:eb:63:4a:
         9c:76:22:ac:23:c1:49:5c:53:0b:83:5b:91:ed:ed:52:15:a9:
         fa:ca:6b:4d:21:8c:4d:c8:39:19:e9:e3:fb:2a:b7:2f:4a:96:
         e2:92:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:34 2024 by rpki-client on console-fra.rpki-client.org