Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa
File:                     b531105f-a4af-323c-9208-5b8904f199fd.roa (raw, json)
Hash identifier:          qmr2qNgZQItxQHioNxCuwxtKE3Erb8mzB7GnDkORtFQ=
Subject key identifier:   D4:D9:88:72:95:0A:79:87:F9:30:80:A7:37:61:F6:6D:A1:28:F8:91
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584746EB5E52ADD63B9F3FFE0E80
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     18914
IP address blocks:        206.168.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5e:52:ad:d6:3b:9f:3f:fe:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=ddc2ecdc-013b-424f-bd2d-ef2352201a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:bc:38:58:97:43:6d:20:12:f5:bb:b6:9c:
                    0b:ed:a8:1a:91:80:58:0a:e4:28:90:d8:11:b0:fd:
                    a3:0a:90:47:eb:a6:d8:50:d4:30:e7:e9:40:52:cd:
                    58:06:b4:eb:49:57:01:df:6a:1f:b2:4a:a2:4d:f2:
                    c2:ed:e2:b9:ae:cc:f9:ca:3e:f8:96:ec:e3:59:eb:
                    e8:98:b6:e3:ba:e5:0b:fa:45:2a:d3:69:80:5c:48:
                    e9:8d:33:d1:92:4d:c3:b2:db:99:5e:c1:b7:4a:e7:
                    6d:a8:3f:2c:fc:7c:29:26:01:9c:11:1d:52:14:a5:
                    2f:6f:a6:7c:49:88:a3:ce:61:65:5c:a4:64:70:ae:
                    d6:d8:07:05:d8:14:26:07:5f:8e:71:11:1a:72:2b:
                    66:c4:de:de:9c:3b:6c:31:98:b4:12:61:c1:c6:3d:
                    ac:1f:d8:e8:39:ce:e4:7e:b0:c3:d9:90:79:e1:2f:
                    a4:b8:65:b1:3e:5c:b4:06:b7:a5:ba:76:98:ba:97:
                    42:8c:53:b1:71:87:5c:5b:c1:4d:f1:b3:57:fc:86:
                    2e:1d:bd:57:5f:d5:e1:ad:1e:68:d3:51:0e:8f:f0:
                    7a:fb:10:a7:0c:d6:2b:bc:be:c7:80:f0:e7:ee:0a:
                    92:c4:fd:51:14:da:4c:35:06:48:50:ad:8a:53:d7:
                    43:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D9:88:72:95:0A:79:87:F9:30:80:A7:37:61:F6:6D:A1:28:F8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/b531105f-a4af-323c-9208-5b8904f199fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:5b:02:dd:32:c5:f5:85:1c:1a:c3:8d:a9:44:f3:52:d6:
         e3:cb:e2:f3:3a:41:2e:1d:f6:c9:99:e4:f8:69:1f:2c:25:79:
         f0:b0:0a:ef:b0:75:cc:1f:c1:9b:9f:2a:bd:46:6a:62:20:78:
         61:6a:f1:fc:66:e8:a9:5d:5a:6f:ba:03:6f:1a:62:cb:74:46:
         88:02:54:50:e2:12:6e:2a:03:e7:4e:39:42:d0:55:f2:de:36:
         ae:b7:76:6a:06:ed:ed:73:01:63:c3:8c:4f:e8:2f:23:f8:44:
         ad:8c:50:9f:80:6c:69:02:ce:4b:2d:c6:9c:6a:0b:44:87:2c:
         cb:1e:ed:c1:f2:1d:0b:d3:5d:d2:b2:70:6d:86:01:81:23:29:
         e1:54:28:31:87:01:c7:cd:af:76:8f:c3:1b:a1:81:dc:09:fa:
         0e:f9:be:9e:11:a0:d9:f1:2f:e5:18:92:82:a7:b3:52:3e:81:
         39:1d:c8:66:06:8b:99:c5:76:aa:61:3e:0b:f5:37:09:f5:08:
         9e:e3:00:17:d1:e3:19:3a:cf:28:55:66:c5:74:de:39:3d:e7:
         08:06:fa:bc:a4:3a:dc:0e:c8:57:23:7f:70:c0:1f:9c:6d:5b:
         f1:db:09:d6:de:8c:3d:a9:04:fa:76:c0:c6:51:f9:cd:97:68:
         eb:7b:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:35:34 2024 by rpki-client on console-ams.rpki-client.org