Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa
File:                     aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa (raw, json)
Hash identifier:          MmbmD0bxC38SN2z9JuAxvPG+uxafes1EQxYSmji0gwA=
Subject key identifier:   4F:8D:1B:8B:13:18:C2:1F:EC:DE:5E:DA:4C:0A:EF:14:94:25:93:7C
Certificate issuer:       /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
Certificate serial:       010D0C9F43285847D4048E456CCFA4F210374920
Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     394470
IP address blocks:        216.10.70.0/23 maxlen: 23
                          216.10.70.0/24 maxlen: 24
                          216.10.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:8e:45:6c:cf:a4:f2:10:37:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=7cc94156-7012-4bb1-a1f5-1829e15a4471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:ca:72:a1:62:cd:da:6a:08:fe:2b:f0:9c:
                    30:9d:d4:8a:c1:18:59:cd:bb:52:43:e7:57:f0:b9:
                    0e:c8:3c:5e:d8:64:f2:88:5f:39:36:d3:2f:5f:58:
                    2c:42:0c:46:3b:4b:84:4c:8d:e4:d3:cc:94:51:86:
                    2c:64:ba:01:3a:04:82:4e:37:80:e4:b0:14:d3:6a:
                    44:d5:e7:ef:66:d5:15:d9:3f:8a:67:df:13:34:6b:
                    eb:c6:ce:64:95:76:69:75:d0:f3:4c:1a:91:63:d8:
                    c8:9f:8a:a8:1a:a4:88:c9:79:73:83:5f:34:83:5b:
                    63:f9:62:fb:59:82:cf:a5:d9:3a:32:79:50:d3:10:
                    47:bd:52:32:d2:32:09:8d:e0:a0:a0:2a:83:88:59:
                    5c:a9:92:43:6f:2d:ba:33:a3:ee:b2:23:5b:17:1a:
                    bd:21:a0:88:ba:98:34:51:ef:88:9b:cf:71:ea:6b:
                    b6:cd:51:a5:3e:e4:3d:02:0e:36:8a:15:1b:e0:62:
                    f2:46:d6:0b:34:41:54:4b:9d:3d:69:e1:f9:16:42:
                    45:8f:33:7b:1f:3f:d6:63:a9:e3:99:69:53:97:a3:
                    50:19:b2:c8:d4:81:7f:a5:6d:5f:fd:09:19:f6:0c:
                    00:66:f1:74:a5:4c:2c:49:db:22:01:31:42:42:45:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:1B:8B:13:18:C2:1F:EC:DE:5E:DA:4C:0A:EF:14:94:25:93:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl

            X509v3 Authority Key Identifier:
                keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e3:3a:ae:dc:dc:e1:db:09:c6:05:37:1f:3a:21:26:11:20:
         c8:9e:98:48:b0:a9:d4:04:a8:93:fd:ad:7a:24:38:42:92:9d:
         c7:17:3a:fc:e6:2f:ad:81:fc:76:cf:fd:94:a4:fb:d2:cb:4d:
         c8:7e:eb:0e:25:9b:a7:00:68:57:cb:4f:9a:42:84:da:02:b5:
         c8:91:bc:4f:3f:7f:f0:b7:e5:b6:e1:ca:e1:b9:f9:25:0f:e6:
         cf:bb:64:c6:0e:e0:d4:6a:ec:d8:0c:21:5c:27:0b:4d:01:86:
         3f:ca:8b:13:e0:c7:97:2f:0c:9b:d9:9f:3e:98:0a:a2:dc:b9:
         a4:05:aa:da:6e:51:00:d4:12:23:40:67:b5:de:3b:c1:60:f4:
         51:66:df:ac:a0:06:55:e5:06:2b:09:09:f3:e2:f0:e9:a5:65:
         33:8a:1c:e5:95:d8:73:4a:a4:e8:42:db:3c:26:72:83:6f:93:
         3a:eb:68:cf:66:b0:a1:81:a8:31:d5:6c:c1:c1:64:47:cf:19:
         9f:ad:1d:39:5e:df:b9:13:a6:03:60:fe:eb:fb:88:24:82:dd:
         36:1b:ad:14:c2:2a:32:ef:3b:95:49:44:e2:72:ec:6a:0d:a1:
         e6:c9:51:37:e0:3e:3d:dc:ba:33:4d:cc:c8:69:4d:e5:bc:e3:
         d5:a2:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:22:51 2024 by rpki-client on console-ams.rpki-client.org