Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa
File:                     3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa (raw, json)
Hash identifier:          kJByze0PM4iRPICmIut12+DNkIy9SxHQ8AgSvfZBumQ=
Subject key identifier:   85:1F:65:98:30:9B:F8:C9:35:ED:87:00:B4:41:13:56:26:61:25:B0
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F432858465DACA4A9E9BC2058AC146F80
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa
Signing time:             Fri 28 Jun 2024 23:51:03 +0000
ROA not before:           Fri 28 Jun 2024 23:51:03 +0000
ROA not after:            Thu 26 Sep 2024 23:51:03 +0000
asID:                     16509
IP address blocks:        208.70.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5d:ac:a4:a9:e9:bc:20:58:ac:14:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: Jun 28 23:51:03 2024 GMT
            Not After : Sep 26 23:51:03 2024 GMT
        Subject: CN=ddeced1a-0ce7-477a-9c76-9198c1cb893c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:64:63:43:95:ce:89:14:6a:3c:ac:65:9d:
                    d4:92:ba:dc:3d:a5:b6:0c:ed:da:a2:40:f8:e9:73:
                    77:46:99:27:27:8c:c0:5d:05:ef:53:97:aa:3c:b2:
                    0d:e8:0b:12:04:ac:7c:ad:a1:d2:ed:2b:52:a7:f9:
                    e2:97:84:ee:df:24:77:81:78:ba:71:d8:a4:ae:ff:
                    86:2f:c8:b9:40:7d:ef:10:bd:a0:03:96:3c:ba:9b:
                    d1:6e:88:fc:dc:35:1e:ee:ee:02:32:f9:32:68:bd:
                    f6:61:67:48:01:0e:6b:70:41:2f:19:d9:d8:1a:f9:
                    b0:63:74:48:59:ca:b9:7f:88:e0:fc:f7:c5:f4:1e:
                    ca:20:c4:aa:49:36:f3:99:b1:c5:a2:a3:c2:00:bf:
                    f3:ef:08:d7:11:fa:0e:21:f0:29:87:80:04:cc:0a:
                    80:90:ba:26:69:f9:24:7d:f1:c1:4a:97:ee:35:4e:
                    32:d6:2d:cb:51:33:3c:5a:27:c2:c7:0a:c7:41:9c:
                    e4:1a:07:c2:12:5b:61:0d:3f:b3:3d:1d:53:3b:da:
                    83:ca:46:2d:33:bd:7a:dc:aa:dd:63:45:35:41:f8:
                    e5:60:4b:6d:b9:78:ee:72:1d:75:e0:27:72:61:f4:
                    2b:cb:95:68:dc:6f:c3:86:e9:cf:b8:a8:93:90:24:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:65:98:30:9B:F8:C9:35:ED:87:00:B4:41:13:56:26:61:25:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8a:e3:51:fb:62:a2:d2:6a:79:fd:e2:41:44:86:46:65:b1:
         30:cf:31:e7:97:eb:69:33:fa:fb:10:4d:e2:67:fb:6a:06:39:
         11:65:86:2c:72:97:2c:95:54:78:06:5d:fe:4f:53:81:ad:ce:
         2a:15:5a:8a:5c:48:01:7c:76:16:43:02:14:9e:40:a4:9e:e6:
         16:51:46:02:e2:95:3e:8b:f6:98:b9:35:7a:b2:00:38:07:a4:
         c4:f7:c7:4e:1f:68:f7:98:56:ca:ab:26:93:b7:0e:e1:92:a0:
         73:09:a5:1b:bc:2c:8b:33:14:43:af:e0:b9:0b:60:b1:6e:75:
         44:0b:d9:52:98:52:f7:7d:36:b7:5e:0f:16:cf:ba:0e:fc:53:
         01:bc:a0:84:0e:ed:c9:7c:a6:cc:b6:5a:23:ff:35:14:50:be:
         19:13:6d:3a:5c:76:14:15:08:a8:6f:d8:95:18:79:94:ec:70:
         7e:e3:a6:65:52:40:8b:6d:12:50:66:c4:45:7c:37:9c:0d:63:
         b9:62:68:65:c6:e3:ea:c7:cf:76:24:f4:d9:ef:3e:47:b1:59:
         77:a0:3e:db:f1:7d:cf:82:e8:44:b2:3f:8c:1b:c5:19:da:22:
         5d:54:80:f9:f9:97:cf:1a:74:da:b2:8f:c7:82:2b:c0:92:39:
         7e:cb:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 16:48:50 2024 by rpki-client on console-fra.rpki-client.org