Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d6e797fc-af1a-386c-bed6-8f8e3a582a8b.roa
File:                     d6e797fc-af1a-386c-bed6-8f8e3a582a8b.roa (raw, json)
Hash identifier:          HGgeE56ZxtvHcbEVvk1owvgNnEykuUyMYP+qWcUAWNY=
Subject key identifier:   7F:64:4C:9A:82:84:61:45:A2:9A:CD:B4:66:06:8D:00:6E:59:E2:C1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584782F1017DCCDD80EB73E19BC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d6e797fc-af1a-386c-bed6-8f8e3a582a8b.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     852
IP address blocks:        142.59.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:01:7d:cc:dd:80:eb:73:e1:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=93ce427f-0760-4168-97dd-ecca046eaf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dc:94:08:c7:d2:30:1f:a0:4a:8e:75:93:39:
                    a9:7e:df:84:28:f5:f0:8e:15:25:c2:98:f9:4d:dd:
                    ca:8f:5e:03:92:da:0e:ce:55:b9:9c:e4:0c:5e:56:
                    8b:08:6d:3d:2f:37:13:01:fd:26:41:28:6c:3a:5a:
                    ec:1e:d9:94:bd:90:79:e0:5d:3b:e3:d9:69:19:ba:
                    e6:5e:b5:cc:d7:2d:9b:0a:60:e0:72:53:7c:ec:e0:
                    51:7a:d0:c4:c9:ae:15:ec:12:04:7a:e2:8c:64:58:
                    d3:a9:bc:22:a1:f5:67:5b:57:2b:63:9e:80:cb:53:
                    21:65:6f:12:bd:3b:1d:a4:4f:4f:27:ff:87:d8:9a:
                    78:3d:62:d7:34:cd:41:50:1f:17:58:b1:49:95:0c:
                    36:42:d0:37:b9:9a:e3:a0:5f:42:d5:61:36:e4:f6:
                    ed:5b:f1:8c:8c:7e:36:d3:a5:bc:2b:69:8c:c6:d9:
                    75:fe:18:8e:46:34:df:b4:97:78:e3:cb:c2:06:62:
                    cc:26:b7:d8:a0:3c:ee:3d:61:81:fe:84:e2:7c:14:
                    79:4e:b0:e7:a4:8f:81:4c:13:2d:16:a6:fe:94:6b:
                    a6:1c:4a:ba:fe:b5:69:04:01:99:69:28:8c:15:18:
                    76:c3:02:70:54:59:2e:18:a2:80:2c:6e:b7:84:22:
                    d4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:64:4C:9A:82:84:61:45:A2:9A:CD:B4:66:06:8D:00:6E:59:E2:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d6e797fc-af1a-386c-bed6-8f8e3a582a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.59.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:73:82:60:05:ee:eb:ad:db:4a:fc:d9:77:7a:62:0a:40:c0:
         36:3a:ad:6a:58:a9:0f:3f:db:2b:53:f7:5c:3a:2a:16:68:83:
         1f:c4:cc:53:b3:22:f7:19:67:8e:c9:ce:49:52:e2:e6:1f:d7:
         11:17:7a:36:ed:c1:f6:e7:bc:1c:4c:f3:19:70:18:d9:00:aa:
         02:34:6f:43:83:a6:a5:4c:94:60:2f:bd:90:2c:d6:75:6a:25:
         57:eb:54:b6:d0:6e:a9:8b:1b:71:54:4c:ba:a6:fb:48:9b:32:
         cd:02:d7:ca:ac:c3:ee:96:9c:51:20:b8:15:93:fe:86:c3:b8:
         68:3d:2e:d3:ef:cc:f4:0a:84:79:4f:b0:91:24:f9:03:a2:c0:
         0b:16:88:10:cb:59:31:84:84:5c:3f:0c:0d:2d:ef:14:bf:2f:
         0e:5b:1e:8a:05:7f:50:ae:91:41:32:e0:9f:e0:b5:50:b1:c3:
         51:a0:f1:55:e6:97:3f:05:f7:9f:1c:0a:ba:83:d8:86:03:fa:
         81:e7:84:f0:fd:71:26:d0:b6:dd:fa:24:08:77:2d:16:6d:fa:
         ec:15:50:d7:13:aa:b8:4d:f6:26:6f:a8:15:02:28:bb:65:e3:
         f4:f8:3d:e9:92:a5:00:ba:fb:22:9b:4e:a7:69:19:a8:62:f1:
         66:c6:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:58 2024 by rpki-client on console-fra.rpki-client.org