Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e9d63068-d8da-3fba-bf52-4495a1330232.roa
File:                     e9d63068-d8da-3fba-bf52-4495a1330232.roa (raw, json)
Hash identifier:          nY6fyoF4+kp0sBRL5QxZ+h8CWhUS28RVkhh7XmhTDBM=
Subject key identifier:   52:87:12:A4:20:05:96:8F:8E:84:B4:19:56:B6:49:DA:9D:C2:5D:9E
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584795169281D7908EC8CC702720
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e9d63068-d8da-3fba-bf52-4495a1330232.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     8560
IP address blocks:        70.35.192.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:92:81:d7:90:8e:c8:cc:70:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=5d57623e-c52f-42d3-ae46-bdce13b0f887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:f1:82:1f:e2:bd:d8:19:af:17:f0:a1:80:
                    3f:78:df:b5:a6:25:1d:9a:8b:3a:7c:f2:0f:1d:af:
                    5f:da:1a:9f:a5:f1:1b:cf:24:6b:c0:81:83:d9:e6:
                    99:a6:5f:72:0a:ff:4d:39:99:88:38:5e:df:45:b4:
                    db:b6:b9:ba:f4:6f:89:1f:aa:b3:b5:bc:39:27:81:
                    31:98:1c:e0:b8:ed:3c:c6:eb:2a:0b:24:87:28:1b:
                    62:94:ff:e4:c9:3d:18:cb:92:92:f5:9b:71:97:61:
                    ff:d9:68:99:4a:78:eb:d7:d9:fc:3c:7d:5d:b1:7b:
                    42:14:ba:e8:9e:cc:c6:43:21:54:4b:69:d3:09:c9:
                    27:03:b3:92:78:48:12:f8:5c:a0:2f:e8:6d:17:ea:
                    7a:be:ea:c5:41:c1:60:8b:45:77:a2:62:fa:23:07:
                    2e:98:a2:b3:8a:d8:05:83:bf:71:2b:9c:04:66:b5:
                    2d:26:ac:9e:9c:03:d8:03:3a:59:f3:f3:39:f6:68:
                    65:2b:12:ae:af:4a:30:41:0c:1f:d6:f7:75:a4:3b:
                    20:97:3e:78:f0:62:89:99:6e:38:bd:a3:77:92:b2:
                    61:6e:f3:26:1f:81:29:df:0a:79:cb:0b:1d:3b:f0:
                    c0:d8:8f:cb:de:83:a8:62:eb:94:71:d8:7f:6a:80:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:87:12:A4:20:05:96:8F:8E:84:B4:19:56:B6:49:DA:9D:C2:5D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/e9d63068-d8da-3fba-bf52-4495a1330232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:41:b4:da:f0:a9:39:98:2c:8d:a1:68:50:c6:d0:f8:27:2f:
         62:eb:49:3e:32:1c:59:e6:34:51:ac:1e:97:02:cc:ee:23:72:
         da:76:e8:47:20:9e:3c:19:eb:48:5d:93:d6:18:27:6b:73:2f:
         65:3b:3f:4a:48:b3:d4:e6:90:99:48:96:95:58:e6:b2:68:cd:
         ac:66:db:36:fa:35:1c:c4:a0:03:56:4b:50:5f:3a:09:66:4a:
         7f:79:64:80:8b:70:cc:2a:9c:6e:cf:3a:01:f0:9d:80:70:eb:
         3d:9a:7d:6d:d2:8f:f1:1a:88:c4:f2:cd:f5:7e:9c:7c:40:c3:
         ba:81:71:5a:e2:af:7f:e1:b3:58:58:fa:c0:fb:d7:9e:4d:3b:
         01:94:43:d9:1e:16:61:67:13:cb:ea:77:3c:3a:df:1f:b8:30:
         d8:7a:6f:99:b1:d0:81:4d:45:bd:f4:c8:87:2d:8f:ef:64:01:
         a8:b1:0d:97:aa:34:f3:3a:98:b2:4d:1d:4c:f8:fa:07:52:56:
         a5:da:3f:d8:d4:00:95:18:1c:46:06:a0:1f:69:08:ed:8d:fa:
         49:a4:57:5d:13:65:59:9a:7f:53:c8:3b:cd:d2:b4:71:16:7f:
         c2:1f:d0:62:17:01:92:32:24:20:45:c2:68:8a:69:32:f4:b9:
         b7:a3:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org