Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa
File:                     3da83a5f-2475-344d-bc7c-33066927f827.roa (raw, json)
Hash identifier:          EUrlXEHYKIHq1Jv0h6OoH11/kDFSjVmT7wIAF6qEzCw=
Subject key identifier:   65:4B:A6:2E:28:4C:15:F9:B1:4D:D1:48:8A:42:BB:F0:26:7B:C6:1C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F50CB5993A9295A1818300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        70.32.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:0c:b5:99:3a:92:95:a1:81:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=9a20665d-9e9f-4a37-9902-2cbca808e418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:db:85:49:8d:fb:1c:3d:78:be:5d:ae:35:ed:
                    8f:e5:f3:3f:f0:4b:bc:38:ca:26:57:ff:44:15:73:
                    0e:03:df:ee:ed:b7:64:3f:f6:70:7f:63:c9:10:af:
                    9e:02:07:3d:be:4d:06:ac:5c:cc:4c:45:33:e6:be:
                    7a:3c:19:c5:67:e2:52:0e:35:86:cf:9c:44:14:80:
                    80:68:91:33:0f:4e:36:b2:23:50:96:88:7e:b9:b2:
                    fb:a5:1a:54:87:c4:08:a1:15:ba:0f:98:9a:fa:c2:
                    a1:0d:36:02:38:9f:39:da:c0:0a:cb:95:fc:08:31:
                    46:a9:07:4f:23:2e:46:39:a9:36:3f:98:32:be:c4:
                    e0:51:35:ea:49:f5:ed:14:84:5a:e7:76:c2:25:3f:
                    38:da:bf:93:c5:54:1e:dd:62:85:b5:65:6a:c5:f3:
                    6c:cb:5e:14:ff:6b:2d:74:e1:b9:f1:87:c8:f9:37:
                    48:59:4a:b0:76:11:d3:88:58:98:dd:8a:ed:37:b3:
                    a7:60:19:7e:0c:42:75:2e:4c:0a:6d:a4:1f:16:72:
                    e6:df:05:b6:6d:55:97:eb:37:4e:00:eb:70:09:46:
                    01:99:d3:5e:07:3b:b3:ab:7e:9d:3e:51:6b:c9:f9:
                    10:0b:c4:a8:cd:51:e4:fd:70:89:15:43:d8:f8:e1:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:A6:2E:28:4C:15:F9:B1:4D:D1:48:8A:42:BB:F0:26:7B:C6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:08:a8:e2:da:d2:31:e2:7c:b1:74:4b:e4:f3:f9:58:b8:78:
         ee:d7:c2:1d:23:09:3e:c0:e1:fb:f1:a6:25:92:61:dd:b2:11:
         c1:19:32:8d:25:48:a0:7b:69:9e:3a:6e:3a:11:79:95:00:15:
         73:51:fb:a5:2e:c6:4d:e2:09:6b:0b:ee:b7:3b:3c:ce:7f:ab:
         9e:49:20:0e:58:be:24:90:40:9b:01:ad:02:40:ca:d0:80:d9:
         b3:4c:0c:d3:3e:cf:7c:05:6b:be:85:86:6a:57:5e:a4:27:f1:
         79:62:8a:70:b4:57:d9:6c:25:ec:1e:20:85:fe:45:77:d2:5b:
         0e:6b:1a:70:56:42:83:de:79:13:88:6b:57:5b:69:34:b5:2c:
         5f:65:51:69:b1:db:31:9a:3c:98:9a:38:b2:58:10:1a:db:69:
         4d:5e:9c:11:31:1a:0f:f8:a2:b5:18:1c:63:b2:13:86:64:a1:
         a7:79:c8:da:59:b9:c0:25:6a:e0:bd:76:78:b1:58:cd:ce:25:
         82:3a:ad:07:e3:ac:5b:df:43:aa:e5:c9:22:de:c9:da:2e:4a:
         32:d2:56:10:d2:72:6c:5e:6f:cf:0a:bd:cf:9a:d5:e1:ae:f8:
         bd:a5:4e:73:86:e3:9c:83:dd:7d:71:be:95:22:3d:d2:f4:57:
         74:c4:69:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:52 2024 by rpki-client on console-ams.rpki-client.org