Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e87f794c-ce25-3ed0-90aa-447126ded8f7.roa
File:                     e87f794c-ce25-3ed0-90aa-447126ded8f7.roa (raw, json)
Hash identifier:          TXgWgFIMtb+EYTKEfWbw8Zh0ZQbjcMr0WaqpKM3des0=
Subject key identifier:   3C:59:BE:8D:2A:87:06:C6:CE:FC:4A:E6:5E:98:82:C1:E6:AA:11:42
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584785BBA943A7E5E40CF8FC4800
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e87f794c-ce25-3ed0-90aa-447126ded8f7.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     4922
IP address blocks:        70.32.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a9:43:a7:e5:e4:0c:f8:fc:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=af5aa57e-8131-4b3f-9b25-6741d8e25b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:f3:91:57:22:c5:bc:d3:67:c8:c3:7e:7d:
                    36:1b:54:66:e5:13:f9:21:b8:25:b0:88:8c:4c:20:
                    f1:4b:b0:8b:3e:9c:6f:90:c9:54:9c:fc:f8:a6:53:
                    a7:41:72:9c:1f:d6:ae:1f:73:94:02:27:a3:65:03:
                    04:93:fb:3f:62:89:bf:82:ae:91:75:ea:36:38:68:
                    62:2c:0c:25:54:72:8c:0f:1f:fa:5a:91:ad:e7:e6:
                    99:1c:b1:c7:8b:6c:4c:72:51:eb:fa:d1:0d:16:c9:
                    82:49:fe:3d:24:12:f7:25:03:c2:cf:86:2f:58:16:
                    ea:c8:6e:72:ef:1d:87:17:5f:c6:9a:54:94:b2:b1:
                    28:8e:11:8b:f3:f2:56:56:f5:96:9e:93:60:99:b5:
                    55:f2:6b:f8:27:4b:68:63:52:80:e1:3d:cd:54:0a:
                    f9:07:54:92:89:1b:3e:2f:4b:3e:dd:be:7e:b7:83:
                    2c:11:a8:28:90:83:b1:17:4a:d8:79:31:ed:8f:a2:
                    0f:32:fa:6e:8f:0a:71:58:08:e2:89:c1:cb:1d:61:
                    f3:d2:7e:e2:eb:fa:02:e5:50:76:11:df:bb:d7:be:
                    c2:1e:f3:1d:52:2d:53:b3:ab:f1:9e:10:cc:3a:bf:
                    5e:81:6d:35:3f:3c:15:6f:9e:11:ce:8d:d2:6f:d8:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:59:BE:8D:2A:87:06:C6:CE:FC:4A:E6:5E:98:82:C1:E6:AA:11:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e87f794c-ce25-3ed0-90aa-447126ded8f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ec:d3:28:18:2a:8a:09:2d:1b:e5:8f:97:d1:7d:c6:b6:39:
         85:a8:62:77:35:04:90:25:34:a8:87:bf:0c:ea:fe:d6:b7:93:
         ce:67:d5:fa:f0:fc:79:f6:99:75:26:6f:37:59:9a:5a:f3:05:
         93:3e:27:5c:f6:ff:63:f5:1d:8c:c8:ee:87:23:75:44:51:3f:
         49:3c:76:57:53:df:9d:fb:05:c3:54:b8:18:93:5b:25:d5:c7:
         8f:bc:06:73:e6:d2:76:2a:1c:2b:31:aa:99:a8:66:49:80:8b:
         53:36:6e:e9:a9:e5:f4:8d:92:49:35:da:8b:42:71:4c:6d:fd:
         2e:f8:7e:0e:a3:74:85:65:97:09:3c:97:80:6b:f3:76:92:c8:
         c0:fc:a3:18:16:3f:aa:e0:54:da:94:cc:5f:46:5f:f8:20:7f:
         85:46:40:71:1f:72:eb:7e:d5:55:e6:81:3f:40:9d:d2:a3:63:
         1c:85:22:35:de:c9:b5:8e:85:97:e5:e9:bf:74:fa:41:98:fb:
         fd:01:5d:49:89:61:10:28:d6:24:77:8a:e4:0f:eb:2e:43:8a:
         9c:4d:17:e3:2a:55:c5:c2:fd:3b:41:9b:d5:f4:74:2e:48:6f:
         c0:37:1a:a2:5e:a6:69:18:e1:0b:c8:02:0b:41:32:92:48:66:
         6a:31:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org