Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa
File:                     c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa (raw, json)
Hash identifier:          o7tj4PZ2u/xhB7g8W8w6hfr6y2tmfmTR42UIoseTCwY=
Subject key identifier:   DE:2E:3B:81:30:25:13:30:2A:D0:3A:F7:15:11:9B:D3:73:2E:19:C4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E8F4E5A5F69101B0F199B9C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        70.32.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:e5:a5:f6:91:01:b0:f1:99:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=ad57ae4e-287b-41eb-9be9-29bc22260975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:14:b9:ab:e1:ce:91:fc:3f:25:8b:a9:c1:
                    06:b1:61:2b:6d:ee:e9:44:b9:db:a2:9d:ee:c9:4a:
                    e0:9a:91:db:ca:58:e1:e6:dd:ff:48:67:53:4e:d7:
                    2c:76:e6:2b:b0:be:73:34:cb:90:59:33:09:c6:0c:
                    08:18:80:68:3c:6e:2d:00:0b:46:d9:c7:94:bd:0a:
                    94:87:81:11:63:24:5c:eb:c7:86:96:64:78:35:8b:
                    c1:bf:fc:59:fb:3a:c6:f2:e1:5a:0e:d9:4f:96:11:
                    fc:f9:7e:cb:91:bd:87:ab:d7:9f:65:4e:7a:ea:77:
                    2c:76:b6:59:3f:d4:98:4f:9d:ad:aa:c8:ee:f2:77:
                    e9:6b:21:66:3a:52:6b:1a:5f:61:82:3e:59:c6:8d:
                    69:96:f2:52:db:74:59:09:2b:ca:2d:5f:e7:22:55:
                    d0:eb:04:1a:5d:4f:90:61:28:fb:f3:f9:e6:bd:c8:
                    79:e3:a8:54:f4:1f:f9:14:90:46:59:73:f0:85:d4:
                    1b:92:75:e5:1b:5b:bb:90:66:cf:d3:02:d8:3b:f4:
                    f1:05:94:30:0f:21:cb:c1:68:31:cf:8f:a9:da:2d:
                    b6:95:de:6b:d9:50:b2:ae:39:a5:9e:0c:8f:69:99:
                    d9:a7:55:d2:23:a8:c3:bb:87:64:39:34:f6:13:04:
                    1a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:3B:81:30:25:13:30:2A:D0:3A:F7:15:11:9B:D3:73:2E:19:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c4e5dc26-2348-34c5-8a0d-8ed71e02f695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:40:e5:c9:8b:7f:53:f4:f1:ab:05:a7:99:81:22:19:db:da:
         57:d9:49:f0:81:83:e4:87:e0:58:1c:fa:bd:4d:e2:f1:4b:21:
         3b:44:98:97:cd:a5:36:2e:92:55:ba:be:fe:a3:30:60:07:cb:
         eb:2c:0c:ac:b2:20:a7:c6:31:b5:39:67:ed:28:c0:cb:82:af:
         11:ad:e3:e3:87:88:58:ea:ab:22:ac:ea:c8:37:1b:8d:bc:d6:
         50:15:7d:d9:e6:68:9a:d5:c1:d4:18:95:2d:92:7f:bd:cb:f6:
         e6:a3:89:56:41:86:b2:18:41:ee:13:60:04:50:d1:a6:cf:ca:
         40:fb:07:fa:4f:a9:d4:d3:01:85:55:df:c5:85:69:0f:2b:f2:
         d6:50:1a:b9:07:18:e0:fc:91:ec:20:73:e4:93:c5:3d:7b:2f:
         f9:ee:d5:7e:dd:8e:e2:cb:39:ab:d2:0f:05:73:51:24:dd:6a:
         34:c9:f7:ba:12:18:16:ce:46:0c:e3:57:a0:0f:15:e6:75:56:
         2d:03:83:46:a8:95:30:a0:b7:5e:96:e2:04:78:67:ae:da:a7:
         d3:de:04:85:d4:bc:15:ff:f9:b3:14:6e:db:0c:9a:8b:fe:b0:
         f8:03:93:d4:57:0c:94:1e:be:7b:d2:24:9f:c2:5a:36:55:98:
         6f:c9:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:20 2024 by rpki-client on console-fra.rpki-client.org