Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/981a47a8-b157-34ff-b2ec-b1ed4ccb6514.roa
File:                     981a47a8-b157-34ff-b2ec-b1ed4ccb6514.roa (raw, json)
Hash identifier:          fjK/KJsFNxyljLTux4Be7oWGtGqzOXJrdzx3FHBCs/4=
Subject key identifier:   9F:CB:8B:44:E9:BC:F3:E2:48:B5:97:C3:B6:A5:19:C5:68:24:4C:8E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C84BC442D7FE50FF6F08B648
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/981a47a8-b157-34ff-b2ec-b1ed4ccb6514.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        70.32.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:c4:42:d7:fe:50:ff:6f:08:b6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=fa21433b-6f0b-4479-af51-418175baf708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:71:fe:24:b9:db:3a:85:3f:cb:54:cd:07:
                    70:08:41:6d:63:8b:f2:00:98:0d:af:e6:f5:9b:c6:
                    7f:c0:b0:28:43:eb:94:1c:ff:9a:87:ee:2f:24:5b:
                    01:b3:af:53:d0:6f:18:5a:77:b9:c8:cb:64:cc:e5:
                    6a:2d:24:45:f6:0a:51:22:a6:f4:5a:0f:f4:2a:34:
                    f3:0f:31:de:6a:69:cf:2c:72:4c:8a:0a:e6:83:d9:
                    a8:46:f0:d6:b1:3f:d3:0b:65:87:84:74:14:0f:99:
                    45:27:86:c5:0d:20:48:c5:60:c8:18:e8:5e:12:e1:
                    7f:3b:48:41:d9:8c:b5:93:63:df:6f:65:7f:c7:46:
                    22:59:f8:89:8e:0a:75:8c:3a:8e:25:58:4f:fa:0d:
                    90:0a:91:14:92:6a:bd:76:bf:e0:38:ac:79:e8:e8:
                    19:ad:99:60:0a:66:47:4c:c8:af:b5:34:8e:93:c1:
                    3b:0e:9f:25:a6:92:f4:7f:22:9c:36:4d:c0:74:bf:
                    6f:fe:d2:60:27:61:3a:bb:3a:f5:63:40:bd:ff:38:
                    ec:c3:b8:f5:59:d3:95:cd:29:42:4a:ea:eb:74:34:
                    67:87:ec:56:1c:66:cc:f4:67:7b:cc:03:c2:cd:59:
                    ce:56:0c:92:fd:df:4b:c7:00:28:35:eb:58:f4:e0:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CB:8B:44:E9:BC:F3:E2:48:B5:97:C3:B6:A5:19:C5:68:24:4C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/981a47a8-b157-34ff-b2ec-b1ed4ccb6514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:58:98:68:3b:6d:68:61:55:e7:78:38:d0:0c:ca:51:b3:
         f8:44:db:62:9d:15:41:54:55:19:b8:8f:0c:2f:25:ac:b8:77:
         08:85:5d:13:c9:b0:15:1a:83:6c:79:b0:1a:e3:9e:ff:20:77:
         e6:8c:5e:fe:1e:1d:c6:b5:13:a4:79:a0:a2:2f:63:09:ea:60:
         98:9b:d1:d8:6e:63:62:78:27:7b:c4:c8:6e:8a:3c:1c:12:62:
         76:2f:12:09:17:18:90:58:3a:f9:25:61:f7:60:7b:72:45:d4:
         03:fd:1b:ab:39:27:b1:4d:8b:ee:ca:d1:4c:4f:31:50:4e:41:
         17:df:1e:96:7e:e2:ec:c7:7a:a3:7d:d1:80:8d:fb:e4:66:e5:
         4a:62:5c:37:9e:10:2d:8a:bc:e3:46:f0:07:ca:c6:bd:7e:2e:
         ad:11:27:a3:c2:fc:23:94:4b:17:bc:df:0a:c8:fb:5f:d5:37:
         6c:0d:a4:d0:ba:fb:fc:6b:a6:0e:7c:a5:6e:17:f7:f2:79:c7:
         5e:82:fa:e0:0f:e3:79:f4:71:a6:14:c3:c5:a8:0b:e5:ae:1a:
         60:95:00:f1:29:af:07:9d:9c:ac:f6:1a:2e:a7:7a:89:2f:1d:
         0d:dd:43:16:ac:3f:3b:cc:8f:27:4e:4e:99:c6:7f:50:1b:ea:
         91:11:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:40:38 2025 by rpki-client