Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa
File:                     ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa (raw, json)
Hash identifier:          HEAeRcAruSDNV8ghRY/1UYv6196dMLT5Dfqbym4Yt8w=
Subject key identifier:   44:B3:60:05:89:F9:C9:8C:81:9B:D2:F5:00:CF:8F:E9:D9:90:ED:44
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F432858473D25DFEAC200E507E3AC0D80
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        208.70.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:df:ea:c2:00:e5:07:e3:ac:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=c6a4a36c-69c1-435c-98f8-63553eefc0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:0a:0f:f7:4f:83:6f:5b:eb:44:a8:8a:3c:
                    68:f6:62:49:96:da:e5:13:8f:8a:67:79:59:45:00:
                    35:0f:5a:c8:88:57:19:5e:b7:8e:32:3a:51:1d:4e:
                    17:a7:fe:ad:a3:4c:89:37:1d:f4:07:a4:f1:ea:d4:
                    5d:19:e9:43:54:2e:96:3c:af:13:23:d4:b3:04:66:
                    6b:91:72:7c:1d:bc:3c:c5:ea:d5:84:1e:48:8d:ec:
                    5f:1a:14:d4:32:d4:40:f9:ff:94:b7:74:41:de:4d:
                    8d:b5:30:f5:ed:f1:7b:89:32:33:f1:07:2c:96:f9:
                    e0:43:ed:aa:cc:e8:b9:32:fe:94:96:5d:89:2f:45:
                    02:4e:8d:b6:ea:c9:7d:dd:73:eb:38:3d:08:c3:13:
                    a7:92:b0:4c:f5:9e:df:cc:5f:e5:39:b7:ac:8e:48:
                    24:7d:01:dd:a2:90:eb:07:71:12:57:fe:68:37:3c:
                    e6:7d:f6:aa:42:9d:bd:63:69:7b:82:64:96:4b:a2:
                    9f:ea:ce:39:4f:50:a9:e2:50:90:8e:ba:4a:35:e0:
                    e3:6a:89:cf:ca:5d:50:88:83:9d:c5:ff:1f:ae:e3:
                    50:aa:31:c7:e5:32:8c:63:12:65:ac:45:a8:75:ea:
                    8f:d7:16:8f:1e:5f:8f:6c:df:f3:44:3d:cb:1e:b5:
                    c5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B3:60:05:89:F9:C9:8C:81:9B:D2:F5:00:CF:8F:E9:D9:90:ED:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:66:43:0e:60:36:bd:9b:a9:b5:c7:39:e0:65:b2:d3:d2:12:
         f6:3e:6a:45:58:d5:7d:7c:d0:97:87:3d:50:32:4c:fc:71:8a:
         ba:33:a6:06:96:ff:79:95:9f:28:da:68:d6:f9:a1:bb:fe:f3:
         ed:ae:17:c9:7f:9b:43:ce:2f:df:bd:18:6b:97:33:38:cf:da:
         7a:de:cb:ff:41:26:d0:8d:f8:3b:b1:99:53:03:3d:db:b5:fe:
         83:e2:c4:9b:95:ad:7f:35:5b:5d:67:89:12:e1:3d:c8:ca:fe:
         07:42:7f:82:dd:a3:1f:60:2f:8a:54:5f:d8:1f:d0:e3:76:fb:
         ae:81:45:f1:17:6a:2f:ef:16:e3:a5:4d:38:08:e1:a7:79:6b:
         35:2e:fe:e0:fc:ea:e5:82:6e:ff:a5:ff:08:cd:4f:0a:f9:0a:
         94:90:27:66:9c:25:37:88:6d:a7:ff:e1:d6:a1:da:42:b8:55:
         56:c7:06:4b:aa:78:22:fc:37:57:20:04:e7:45:cd:1a:c6:6b:
         66:da:ca:e6:68:a9:ce:4e:0f:76:66:a2:ce:89:2d:93:fd:d8:
         72:a5:4f:54:5e:7e:dd:e2:2c:3f:77:b9:e3:af:8d:d0:af:06:
         4b:a7:de:57:9b:f4:ed:7f:f1:c5:19:fe:51:9b:ba:c7:48:34:
         62:04:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 18:36:04 2024 by rpki-client on console-fra.rpki-client.org