Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa
File:                     192335d9-916c-318c-8388-956ea609b14b.roa (raw, json)
Hash identifier:          Cm5KmFR9Ib0s/u4+nc/YYUk6n5q0fdboZmKo+GiGaic=
Subject key identifier:   47:1F:D9:A5:75:5C:FA:6B:1C:9E:B5:B0:40:3A:D4:89:5B:82:AD:1E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F4ECE0B9BE5A51F6ACF300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        70.32.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:ec:e0:b9:be:5a:51:f6:ac:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=88d3efd7-7980-4fb9-bc17-fcdc4806b3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:29:99:34:f1:65:b9:16:f3:5c:24:bc:69:
                    26:09:a8:89:af:89:9a:1d:a0:34:7e:62:66:af:11:
                    49:70:c9:58:52:6d:5a:48:0b:df:fb:9f:19:4a:6e:
                    23:55:b3:99:53:bd:03:b3:06:14:01:15:50:63:a9:
                    eb:16:79:53:6b:36:86:5a:56:7f:8d:22:a1:94:63:
                    f0:70:5c:a2:98:86:29:b2:3f:ce:7f:1a:34:3b:45:
                    98:52:5f:42:6b:6c:29:50:5d:83:48:cf:ec:7f:f8:
                    c8:d8:6d:11:c7:89:a5:92:62:29:28:a8:74:e1:00:
                    c9:bc:f4:be:e8:0d:34:1b:2e:7e:f6:b4:2a:e5:42:
                    78:11:87:85:c3:d3:af:77:30:f3:54:09:11:bd:af:
                    6f:c9:ab:bc:8a:9a:47:33:09:1d:66:79:c2:bb:a6:
                    9f:ec:79:32:c2:83:25:2c:54:b0:fa:73:57:8a:78:
                    98:00:13:84:7b:f5:4b:c9:94:67:f2:f9:85:e0:c8:
                    e8:4c:3c:41:c4:f7:01:f5:8a:5c:87:72:e8:bc:64:
                    3c:fd:15:c1:a9:9f:e2:38:53:a8:e4:4f:a4:08:19:
                    63:21:fa:4e:d0:98:f1:81:92:80:11:1b:78:45:e6:
                    d4:5a:9a:c9:28:3a:8a:da:8b:51:e5:f4:6d:45:08:
                    fe:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1F:D9:A5:75:5C:FA:6B:1C:9E:B5:B0:40:3A:D4:89:5B:82:AD:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/192335d9-916c-318c-8388-956ea609b14b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:58:c9:e2:6b:c5:64:d0:0c:bc:b8:a6:be:1d:88:52:29:1c:
         c3:78:38:dc:6a:32:49:b4:35:82:ba:c3:41:d1:52:19:da:5c:
         6d:42:4f:51:e6:46:f6:d5:75:6b:e0:04:14:16:a8:65:a7:b1:
         b7:65:4d:f5:44:9f:f1:83:6f:03:97:bb:ba:1b:5c:5b:4a:16:
         eb:f8:3c:f5:f9:fd:00:3d:bd:ee:77:b9:ea:7f:b2:dc:83:e7:
         20:a7:c9:5e:f1:08:b9:21:03:c3:59:0a:16:4d:b6:2a:52:98:
         cd:22:ef:86:88:bf:13:ec:2e:37:76:8f:0c:30:75:62:91:5e:
         40:f2:ba:01:3a:52:f4:eb:68:e1:45:f3:99:90:ee:50:b1:8b:
         ef:fb:9f:e9:89:0c:6a:bc:6f:d5:87:0b:8d:73:27:22:25:7f:
         0d:ba:79:52:ae:da:6d:86:99:49:0d:5f:89:d4:69:b0:81:e2:
         fd:7b:fb:ce:e9:8d:a4:55:d6:e4:a2:41:77:ec:6e:fe:e7:6f:
         d9:e4:07:01:21:9e:94:ac:45:bd:df:a7:34:54:b2:a4:aa:3a:
         8a:d2:a1:77:b4:9a:04:46:5d:de:eb:46:12:5f:90:d5:07:fb:
         44:2b:69:5e:77:2a:b9:9b:ca:b6:3e:b3:07:d0:9d:39:89:79:
         99:df:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:14 2024 by rpki-client on console-fra.rpki-client.org