Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa
File:                     60899ba4-2e02-3634-b503-2d70ad64f496.roa (raw, json)
Hash identifier:          91aOjz6WGf/HpP399z7NEJRqJfRb2QE9KnxpDbv/wNY=
Subject key identifier:   BA:2A:CB:4D:C9:3A:68:5A:B3:75:D2:F2:23:46:64:88:26:F4:45:6A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454907287DB5FDDFB8D193C100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa
Signing time:             Thu 21 Mar 2024 21:34:30 +0000
ROA not before:           Thu 21 Mar 2024 21:34:30 +0000
ROA not after:            Wed 19 Jun 2024 21:34:30 +0000
asID:                     15169
IP address blocks:        70.32.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:07:28:7d:b5:fd:df:b8:d1:93:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 21 21:34:30 2024 GMT
            Not After : Jun 19 21:34:30 2024 GMT
        Subject: CN=65aedb45-9484-4576-8671-e903fb3827a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:9d:c2:f7:a7:97:b8:3e:60:5b:3d:0f:01:
                    f1:06:5a:08:6b:e0:23:eb:ef:98:99:35:a5:79:76:
                    ba:39:ce:3e:3a:fc:34:7d:57:0b:1f:fe:79:c0:2f:
                    c3:fd:de:d9:cc:08:3c:68:19:c6:3a:91:fe:df:05:
                    f4:e2:04:23:04:f0:7a:83:33:78:d1:ed:2b:85:c9:
                    3f:79:09:ef:5d:e8:0b:1f:c8:d2:0f:bc:f0:cc:b9:
                    4c:41:60:83:dc:aa:04:40:cc:34:30:99:87:bb:82:
                    b6:0c:7e:36:ff:e5:6f:2a:48:da:b6:8c:21:90:b6:
                    b3:43:64:5f:05:5a:65:3c:36:f7:04:ad:bb:8c:49:
                    d7:35:0d:b5:1a:c5:51:4a:79:8a:ed:42:07:10:24:
                    85:6a:0c:d8:5b:ee:ab:4d:33:13:f3:28:0b:3b:24:
                    32:74:81:c8:5e:2c:91:1f:da:c7:ca:41:98:12:80:
                    d1:5d:3f:87:28:4f:5c:c9:7d:73:b3:bf:1a:9d:7a:
                    93:f0:50:d4:a0:f5:24:8b:b7:10:0c:c4:ba:20:d7:
                    49:5b:ce:84:34:7b:79:60:eb:37:e3:b9:b1:76:b9:
                    35:d9:76:e4:0c:e0:a9:47:3f:cd:10:e6:cd:3d:fd:
                    4f:d0:81:4f:af:c6:0b:0a:f6:5e:ef:93:72:11:39:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2A:CB:4D:C9:3A:68:5A:B3:75:D2:F2:23:46:64:88:26:F4:45:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:05:6d:99:f5:1c:ae:1e:06:0b:9c:96:03:89:fc:c5:21:89:
         f5:eb:af:9b:e9:cf:a0:4d:70:0b:83:08:56:12:ef:77:a4:9f:
         fc:d1:05:3b:b6:17:62:06:1c:cc:09:27:a3:9f:7f:ea:e4:e7:
         07:fd:46:5b:b1:a8:9c:37:cc:7e:ab:82:7f:f4:de:25:78:da:
         c9:82:07:37:72:7b:53:64:3c:bc:c1:55:08:44:75:40:90:cf:
         79:fb:33:6d:b3:b9:2d:02:ca:7d:36:6b:42:60:1e:b3:6d:60:
         13:26:de:fb:f1:02:89:98:b8:80:d6:09:cf:09:af:f1:a4:e5:
         bd:14:18:97:ad:11:4f:95:a9:5d:f7:86:6e:a1:5a:3f:40:e7:
         46:d3:7d:3d:49:46:7f:9f:0f:e9:c5:18:92:3a:f5:cf:7f:62:
         fa:0b:75:64:f1:70:c7:ac:dc:b2:47:b3:e7:d2:98:a6:15:28:
         dd:ca:2f:d4:74:1b:3f:e8:c1:ca:8e:dc:37:66:46:22:5d:7e:
         47:34:53:21:f7:d9:bc:76:d0:8d:fa:ce:ba:6b:ee:dd:0a:b0:
         d8:3d:5a:40:0f:2e:6e:ff:3b:6f:ab:94:b9:07:11:d9:a0:c3:
         78:eb:fa:4c:77:c7:d8:5b:24:e7:70:e7:bd:40:0d:64:f5:52:
         26:6f:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:44:18 2024 by rpki-client on console-fra.rpki-client.org